Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214495.roa
File: AS214495.roa (raw, json)
Hash identifier: MC9vTu2LgST2gGqjYKPq1prJI4KONmJTtogy0GXLZqU=
Subject key identifier: 37:2D:9C:6F:69:F4:F0:A5:A2:C0:21:0F:96:A8:FE:BE:1A:69:CE:92
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 433E0999A87C4A40B2B903E9707182B463C6A6CB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214495.roa
Signing time: Fri 26 Jun 2026 08:08:42 +0000
ROA not before: Fri 26 Jun 2026 08:03:42 +0000
ROA not after: Fri 25 Jun 2027 08:08:42 +0000
asID: 214495
IP address blocks: 2a0f:85c1:83c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3e:09:99:a8:7c:4a:40:b2:b9:03:e9:70:71:82:b4:63:c6:a6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:42 2026 GMT
Not After : Jun 25 08:08:42 2027 GMT
Subject: CN=372D9C6F69F4F0A5A2C0210F96A8FEBE1A69CE92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:0d:ae:55:6e:ea:1f:f0:55:b4:24:97:29:
66:6a:d1:0d:1c:86:76:34:51:d2:f7:c1:c3:ef:08:
b5:cc:f1:b7:78:df:9d:6a:26:9b:bd:62:23:e9:ec:
da:c0:38:df:9e:65:2f:aa:c4:b8:e9:f9:72:34:c4:
98:8a:1e:34:26:e8:84:ce:3b:00:1c:b5:be:84:b6:
e7:40:f7:6c:1b:e2:fa:04:76:c1:49:2c:96:dc:15:
e9:14:ce:10:f6:47:07:25:34:23:e7:13:ab:1c:3c:
25:a8:c7:fc:88:46:4b:57:ca:b8:ce:8f:7c:7b:a3:
ee:80:5c:5c:d2:53:42:b5:c2:34:97:b9:57:c7:c1:
19:53:c2:98:bc:7c:34:31:8f:69:c6:5b:7a:f6:38:
38:12:0a:5e:f0:b6:a1:e5:38:92:c6:46:d2:2d:51:
27:c5:d2:78:b8:d0:db:a9:74:6a:3e:20:7a:87:76:
46:48:8f:d1:1b:9d:49:94:2f:f7:59:d0:54:a1:84:
fc:51:35:95:15:c3:ea:ae:a6:01:b2:d7:fb:db:49:
ea:47:70:bf:44:e7:de:2b:a0:0a:be:14:28:53:04:
4e:ab:d8:f5:ba:3c:c3:45:ad:bf:ae:24:c1:58:f7:
ad:20:7a:65:a3:67:30:ea:a9:05:e2:f2:14:a5:8c:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:9C:6F:69:F4:F0:A5:A2:C0:21:0F:96:A8:FE:BE:1A:69:CE:92
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:83c::/48
Signature Algorithm: sha256WithRSAEncryption
e9:70:e2:e7:4e:6a:54:1f:e0:6b:d6:7b:28:b8:11:48:f4:e5:
2a:76:c1:f4:5a:40:aa:d7:91:86:37:b1:4d:1b:b6:98:f6:30:
c2:c2:9f:ba:2f:e6:49:f6:2c:aa:49:fb:bd:ed:34:aa:64:5a:
63:10:ce:63:0d:b6:5b:4b:85:06:0d:c5:fa:af:21:0e:0c:86:
7a:e8:90:72:42:fd:87:20:eb:4a:fa:9f:7c:1d:e6:d3:91:c9:
df:fe:1b:9e:41:c9:d6:b8:08:a6:08:95:5c:c3:61:8d:38:e9:
3f:14:46:f2:ac:0d:61:a2:8a:a2:a8:a4:2c:e3:d4:d0:96:af:
ec:42:33:5f:2e:c7:e6:37:0d:c7:88:1e:48:4b:3d:6d:b6:22:
3a:6a:5d:fe:d7:34:bc:bd:3c:5e:95:a6:71:1c:a6:29:6c:f8:
c5:2a:77:56:a7:a9:31:91:b8:31:2a:4a:a3:b1:03:75:93:cc:
6e:fd:95:da:1e:59:46:4c:07:87:aa:b8:47:94:5b:41:c5:38:
fe:62:e6:86:88:28:1e:e8:b1:39:ad:8e:57:b6:17:01:09:c2:
b5:de:89:7c:e6:17:0a:8e:d8:7f:a5:d9:7b:ee:b7:9c:fc:a4:
2b:bf:84:4d:55:1b:e8:ac:64:f2:c1:e3:1e:7a:3b:a3:a9:07:
ff:3d:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:03 2026 by rpki-client