Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214480.roa
File: AS214480.roa (raw, json)
Hash identifier: s3tHkelNHa9lZUkbKvtGyf03SZL07VUhJI/4TfuOkXE=
Subject key identifier: 07:7B:DB:B0:51:9E:F8:BE:95:CE:A6:E9:AE:ED:BB:9D:08:50:6B:7A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2052A103866FBB7302E01365EEC4678E4A3712C8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214480.roa
Signing time: Fri 26 Jun 2026 08:08:40 +0000
ROA not before: Fri 26 Jun 2026 08:03:40 +0000
ROA not after: Fri 25 Jun 2027 08:08:40 +0000
asID: 214480
IP address blocks: 2a0f:85c1:842::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:52:a1:03:86:6f:bb:73:02:e0:13:65:ee:c4:67:8e:4a:37:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:40 2026 GMT
Not After : Jun 25 08:08:40 2027 GMT
Subject: CN=077BDBB0519EF8BE95CEA6E9AEEDBB9D08506B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:8f:f7:57:0e:48:a4:3b:1f:98:da:a1:37:
28:49:31:94:0b:fd:9c:0f:5c:33:79:41:45:c8:9e:
72:c5:32:54:13:ef:87:23:d1:51:2e:16:4f:04:27:
56:66:46:5c:58:c3:49:92:3d:a3:d9:5f:d7:80:17:
62:a0:5b:46:58:1d:f7:0e:61:75:7e:8f:c0:2b:52:
a1:23:af:36:ce:6b:4c:bb:6e:2d:c4:62:fb:b2:2c:
dd:e0:38:65:8d:ea:5c:ab:36:f1:c7:14:6d:65:e4:
11:66:22:33:46:06:c7:e0:60:9c:3b:51:73:e7:0b:
b0:82:89:c5:87:4b:78:d6:4b:da:99:16:10:37:29:
2c:5b:3e:ad:ba:e3:3f:18:35:d6:2a:99:b1:95:2d:
a7:2d:01:28:65:2c:f2:2e:a1:ab:e7:e2:40:80:53:
a3:bd:13:3e:3c:36:a8:d9:62:33:96:e9:f5:17:5c:
01:44:9a:0d:37:b9:dd:4f:96:41:fb:94:db:37:ab:
29:1d:21:48:a3:29:e9:56:96:bb:88:59:db:5f:58:
21:8c:c4:02:5a:0e:f8:d1:e8:d1:3a:fc:61:32:92:
a1:ec:13:39:a4:44:73:b9:ed:75:ab:66:8a:4b:46:
cf:00:e9:e8:f5:8c:4f:0c:5e:69:78:78:57:0c:1f:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:DB:B0:51:9E:F8:BE:95:CE:A6:E9:AE:ED:BB:9D:08:50:6B:7A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:842::/48
Signature Algorithm: sha256WithRSAEncryption
c3:66:d9:9b:e8:ef:a3:2d:8d:5c:e6:d9:6a:94:4b:63:46:47:
03:54:b5:b2:41:39:14:90:41:df:05:05:d5:79:5b:58:bb:1d:
10:52:93:1e:6d:2e:a5:89:c5:a3:e2:2c:f2:76:0f:cd:32:ed:
a0:7c:8e:46:c3:e0:4c:cf:86:1e:a0:07:c2:34:aa:e2:0f:ca:
6a:01:b6:8d:53:16:32:db:fd:71:e3:52:7a:25:8e:38:6f:6b:
6f:a0:f7:c9:24:4f:99:b6:bd:f1:79:65:95:e0:34:d3:2c:8b:
19:ef:a3:0b:f7:52:9e:6f:31:20:0c:b5:80:4e:05:cc:8d:de:
50:b8:3c:3e:37:be:6f:f6:13:b3:c8:e6:f0:34:52:b5:04:4b:
7b:74:c4:0e:ee:27:79:d9:75:28:f5:09:7d:a5:28:4b:0f:16:
b7:77:44:a0:30:f5:9c:67:1e:a6:7e:d8:34:4f:94:b3:13:51:
7e:e8:f0:1e:19:05:98:74:e8:1c:1a:29:23:47:b7:ed:1f:2b:
da:c7:bb:04:14:a6:46:79:22:9d:0f:01:a5:9d:b9:d4:7f:bb:
ff:11:5f:07:52:63:0b:ae:1b:74:3b:c1:85:f1:62:21:06:63:
b0:a4:03:e1:6f:36:b2:4b:a5:77:b2:5f:e7:e0:22:50:d4:36:
be:ea:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:45 2026 by rpki-client