Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214498.roa
File: AS214498.roa (raw, json)
Hash identifier: QWWJm5ut5sVYbKGDzV3UMjtQA58RNVZ0LLateIoE8XA=
Subject key identifier: B8:45:1A:1A:2F:2E:D9:8E:2F:AB:4E:15:41:E6:E5:7A:D4:A7:3C:91
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 582BC8CFB913051E84F380AE3D1881AC231EA90E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214498.roa
Signing time: Sun 23 Aug 2026 15:09:07 +0000
ROA not before: Sun 23 Aug 2026 15:04:07 +0000
ROA not after: Sun 22 Aug 2027 15:09:07 +0000
asID: 214498
IP address blocks: 195.200.20.0/24 maxlen: 24
2a0f:85c1:32a::/48 maxlen: 48
2a0f:85c1:b70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2b:c8:cf:b9:13:05:1e:84:f3:80:ae:3d:18:81:ac:23:1e:a9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 15:04:07 2026 GMT
Not After : Aug 22 15:09:07 2027 GMT
Subject: CN=B8451A1A2F2ED98E2FAB4E1541E6E57AD4A73C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:b7:11:32:3a:d9:ea:ba:0e:a1:14:9e:29:
2c:de:67:75:13:13:d6:96:7a:d5:06:94:8d:45:f4:
c5:a1:58:61:23:96:bb:b5:65:f5:bb:2f:16:55:08:
fb:fb:29:bd:43:59:44:6e:61:73:28:e7:d6:b5:a9:
4c:df:7e:db:5a:1e:42:de:2c:09:45:24:ca:ba:13:
1a:c1:34:0a:cb:48:89:5d:22:90:bc:6a:c5:3c:94:
17:9e:0b:c7:d6:44:d8:b7:ab:21:c4:88:66:6c:70:
85:ef:0e:34:6d:09:ad:6e:21:98:85:cd:5b:dd:ab:
83:51:b0:c1:fa:8b:7b:96:83:f2:02:65:2e:35:d8:
b8:ca:a1:eb:9d:55:51:ef:2a:f5:63:45:f5:62:d8:
0e:5b:16:90:08:76:08:d8:51:c5:79:c3:03:ce:1b:
16:d1:1f:92:20:1e:53:1c:4e:69:bf:c2:8c:dd:83:
02:92:98:97:1c:71:90:75:3e:60:49:2a:86:c7:3b:
d0:ea:56:d7:a4:d7:8f:69:67:b0:5c:96:94:40:c2:
a2:b6:64:57:e8:29:4a:a8:b3:00:72:d4:0b:fa:93:
ec:c7:00:b8:70:0f:86:54:65:94:c0:93:10:cb:ee:
cf:8e:0e:a2:77:0d:25:7c:9f:9f:a1:1a:cb:b3:cd:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:1A:1A:2F:2E:D9:8E:2F:AB:4E:15:41:E6:E5:7A:D4:A7:3C:91
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214498.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.20.0/24
IPv6:
2a0f:85c1:32a::/48
2a0f:85c1:b70::/48
Signature Algorithm: sha256WithRSAEncryption
d4:91:56:2f:a7:a4:6f:42:b7:0a:5c:79:d0:6c:65:5f:31:d6:
e5:8a:94:9d:da:f1:65:99:f2:f6:98:e5:42:5d:75:a8:6c:0c:
bb:02:35:4e:b3:01:0c:25:07:92:e2:ac:a9:a4:16:c6:0a:d4:
84:21:ef:23:2e:46:9e:b1:dd:50:77:63:23:5b:f2:c0:aa:53:
35:63:91:90:c3:25:9b:16:f6:38:f3:af:d7:cf:16:47:25:0a:
59:51:42:1c:c3:b3:42:6c:c8:13:b4:69:f8:b3:14:43:0c:d9:
ff:2d:fc:67:d8:81:8b:92:b3:19:6e:bf:72:a2:97:53:17:66:
1f:93:73:c6:1b:4f:30:6d:29:85:a5:c3:d0:3e:33:29:b8:5f:
03:29:93:95:aa:96:cf:d0:40:50:39:60:e8:33:03:a8:a3:31:
7d:84:74:ef:eb:67:59:87:be:c6:4b:a3:a3:54:b0:83:94:bc:
c6:7b:63:15:6b:5f:e4:80:b2:5f:f9:19:7f:b1:50:f4:96:cf:
98:df:6d:5b:a3:bd:38:26:47:b8:e5:c1:41:24:f3:fd:df:89:
8f:38:36:98:5f:a3:11:c4:0b:41:b2:96:08:67:7f:6f:13:e8:
d1:0d:f3:5d:5b:a2:5c:3d:3a:f4:3b:08:f2:c6:d2:c5:b3:49:
c2:f5:8f:da
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUWCvIz7kTBR6E84CuPRiBrCMeqQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MjMxNTA0MDdaFw0yNzA4MjIxNTA5MDdaMDMxMTAvBgNV
BAMTKEI4NDUxQTFBMkYyRUQ5OEUyRkFCNEUxNTQxRTZFNTdBRDRBNzNDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKrcRMjrZ6roOoRSeKSzeZ3UT
E9aWetUGlI1F9MWhWGEjlru1ZfW7LxZVCPv7Kb1DWURuYXMo59a1qUzffttaHkLe
LAlFJMq6ExrBNArLSIldIpC8asU8lBeeC8fWRNi3qyHEiGZscIXvDjRtCa1uIZiF
zVvdq4NRsMH6i3uWg/ICZS412LjKoeudVVHvKvVjRfVi2A5bFpAIdgjYUcV5wwPO
GxbRH5IgHlMcTmm/wozdgwKSmJcccZB1PmBJKobHO9DqVtek149pZ7BclpRAwqK2
ZFfoKUqoswBy1Av6k+zHALhwD4ZUZZTAkxDL7s+ODqJ3DSV8n5+hGsuzzZc3AgMB
AAGjggIkMIICIDAdBgNVHQ4EFgQUuEUaGi8u2Y4vq04VQebletSnPJEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NDk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAw8gU
MBgEAgACMBIDBwAqD4XBAyoDBwAqD4XBC3AwDQYJKoZIhvcNAQELBQADggEBANSR
Vi+npG9CtwpcedBsZV8x1uWKlJ3a8WWZ8vaY5UJddahsDLsCNU6zAQwlB5LirKmk
FsYK1IQh7yMuRp6x3VB3YyNb8sCqUzVjkZDDJZsW9jjzr9fPFkclCllRQhzDs0Js
yBO0afizFEMM2f8t/GfYgYuSsxluv3Kil1MXZh+Tc8YbTzBtKYWlw9A+Mym4XwMp
k5Wqls/QQFA5YOgzA6ijMX2EdO/rZ1mHvsZLo6NUsIOUvMZ7YxVrX+SAsl/5GX+x
UPSWz5jfbVujvTgmR7jlwUEk8/3fiY84NphfoxHEC0Gylghnf28T6NEN811bolw9
OvQ7CPLG0sWzScL1j9o=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:59:33 2026 by rpki-client