Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214451.roa
File: AS214451.roa (raw, json)
Hash identifier: gp2RO6KSGuur/OiZqi7EfpJFr5DuMkkIFe7ORdMn2to=
Subject key identifier: 80:69:B4:58:DF:2B:C3:CA:25:8C:23:AC:53:AC:36:F4:8E:74:99:31
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 503E70BDC2155CD3567AF2FCACFBEEFC70EAD7C2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214451.roa
Signing time: Thu 09 Jul 2026 11:08:49 +0000
ROA not before: Thu 09 Jul 2026 11:03:49 +0000
ROA not after: Thu 08 Jul 2027 11:08:49 +0000
asID: 214451
IP address blocks: 2a0f:85c1:846::/48 maxlen: 48
2a0f:85c1:870::/44 maxlen: 48
2a0f:85c1:c80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3e:70:bd:c2:15:5c:d3:56:7a:f2:fc:ac:fb:ee:fc:70:ea:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:49 2026 GMT
Not After : Jul 8 11:08:49 2027 GMT
Subject: CN=8069B458DF2BC3CA258C23AC53AC36F48E749931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:98:df:42:4a:8f:fb:b1:62:57:06:d9:47:
99:c8:e3:ed:06:b2:de:d9:12:c5:c9:8b:0f:36:5a:
76:e5:b4:7e:e4:bc:2d:93:3b:b6:d9:b5:bc:8a:23:
df:44:0b:f9:4c:73:ee:bf:95:69:c8:38:d8:c6:12:
aa:b1:5c:8b:01:28:b2:36:50:25:45:8b:c8:a5:52:
8c:86:c5:46:da:f5:3c:a8:fe:0f:63:d5:fe:81:f7:
9e:04:19:98:02:42:b2:af:60:0b:7b:ec:bf:8a:91:
a0:fa:d3:c3:07:73:86:8f:c4:25:32:e3:d5:64:02:
9b:72:23:a8:23:25:40:8f:67:70:be:97:0f:b3:8a:
5b:ad:82:2e:75:d0:99:5d:8b:13:10:fe:bd:06:1d:
e6:85:4c:28:4d:01:78:ec:e7:f1:bf:35:ae:9e:96:
6b:86:8a:f2:af:2f:ec:8e:30:29:bf:97:09:d4:05:
c4:4a:07:f7:f6:c3:0e:7a:ae:41:3b:2e:1a:43:c6:
8a:56:8f:13:5a:a7:eb:1a:ad:09:b8:84:14:79:b9:
25:e1:fe:f6:3c:43:c3:e3:60:4f:21:b2:3a:65:ce:
b9:6a:44:59:f8:75:72:9b:ba:96:7b:82:34:50:25:
91:3a:47:a6:7c:d5:4d:82:34:e1:b9:32:d4:ca:09:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:69:B4:58:DF:2B:C3:CA:25:8C:23:AC:53:AC:36:F4:8E:74:99:31
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:846::/48
2a0f:85c1:870::/44
2a0f:85c1:c80::/44
Signature Algorithm: sha256WithRSAEncryption
d1:83:07:ee:81:58:ff:42:54:92:e7:1a:57:ca:cb:50:1e:68:
f4:9c:24:ee:63:67:2f:b3:1a:45:2f:2e:11:25:14:81:31:f5:
c8:15:db:38:c9:87:65:64:6e:fa:ef:84:93:34:d4:8e:37:90:
47:1e:f3:20:b3:d2:9b:b9:8f:9f:ad:a4:2f:0c:4c:47:5b:53:
90:43:f2:08:ff:a1:0d:30:ee:fb:f0:36:c3:56:fb:4d:00:8e:
c4:4b:23:14:4f:d1:2b:09:61:df:29:3d:06:75:c2:c9:04:81:
9c:74:88:ba:cb:af:0c:93:8c:09:30:07:a8:60:3e:6a:56:aa:
c7:da:36:09:50:00:84:ec:f1:7d:3b:27:66:91:36:f2:55:75:
8d:42:2f:a0:60:17:33:11:b3:4c:90:f0:b5:45:ba:4c:a8:8a:
32:41:f0:4c:ba:49:1b:96:71:1c:be:35:3d:ef:9b:ff:a5:5a:
ec:32:ea:28:d7:08:40:35:1c:c0:ac:68:a3:d8:b2:fb:c9:58:
39:29:50:f4:a4:e4:29:a8:26:38:f0:11:09:cf:bf:af:33:66:
00:f7:6a:d6:f6:02:9e:37:1c:69:41:40:ed:68:7c:ae:b7:43:
24:18:23:bb:aa:b9:b3:ef:e5:f6:11:f0:6c:20:8b:50:35:b9:
f1:49:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:46 2026 by rpki-client