Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214510.roa
File: AS214510.roa (raw, json)
Hash identifier: 6j/+0ZzfWFDz4B8r444scZ9ZEApDRjDEX0z/TYvFyBM=
Subject key identifier: DC:0C:4C:12:B0:7C:05:71:04:EE:B1:15:07:32:97:BA:7E:A1:63:4F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5190911A703AAC06C698656808CFF8A7C7CD5E0E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214510.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 214510
IP address blocks: 2a0f:85c1:3f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:90:91:1a:70:3a:ac:06:c6:98:65:68:08:cf:f8:a7:c7:cd:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=DC0C4C12B07C057104EEB115073297BA7EA1634F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:59:7e:54:21:ec:77:7b:18:91:4a:d4:86:
cb:23:19:88:e9:f9:f2:3a:02:31:15:3c:7b:7b:80:
40:d5:41:51:e4:f1:c7:92:68:3c:bb:44:2d:bb:1c:
6a:6a:67:a3:26:3b:3c:3d:ad:14:15:ad:e1:34:e8:
4d:59:fc:2d:16:29:32:a5:c9:a5:23:dd:5d:88:ca:
53:87:f5:75:1d:60:f4:37:86:14:0f:c2:30:89:ea:
c6:26:c2:61:d2:8f:6b:e3:1b:57:b5:c9:01:ca:1f:
7b:0f:0d:9a:65:c0:be:9a:5c:39:07:df:e9:ec:58:
aa:4f:b0:67:e4:4c:3a:c8:15:49:45:64:4e:61:bd:
bd:a8:eb:13:71:c9:eb:7e:28:b9:7a:9e:2b:b6:51:
89:c9:d6:98:d4:d4:30:cc:b8:ae:44:51:cb:ab:ca:
ce:2e:da:6a:f8:3f:57:da:d3:84:5d:c6:d8:ea:da:
2e:84:d0:bb:5d:65:7a:42:09:7b:02:50:58:f3:c9:
fc:1d:dc:c9:0e:7d:53:6c:c0:b4:b1:73:3d:2f:06:
bd:b5:5a:bc:d9:bf:5f:9d:8a:c8:94:40:11:9a:f8:
1e:ac:5b:a6:b2:75:66:2a:dd:63:3c:44:f5:2c:28:
a0:a9:b7:9b:71:80:a0:be:b0:08:e1:38:49:a3:6d:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:4C:12:B0:7C:05:71:04:EE:B1:15:07:32:97:BA:7E:A1:63:4F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f9::/48
Signature Algorithm: sha256WithRSAEncryption
a7:e3:8a:4f:08:81:07:37:47:3b:2a:bc:e5:09:7b:fb:8b:1c:
3d:d9:7b:6f:ec:53:5a:fa:a5:fa:03:8f:11:b5:70:f5:ee:b9:
ec:33:5e:02:df:aa:6b:aa:7d:7f:a9:72:57:5b:09:83:d9:72:
f2:57:40:64:52:28:12:db:c5:10:48:7e:61:8a:6e:ee:8b:16:
16:0a:f6:7b:21:14:ba:11:b3:3a:fc:e1:aa:69:95:76:f2:af:
88:18:34:88:df:1c:3e:e7:7b:f9:00:d6:73:b7:5e:b5:2e:ef:
75:41:e8:e1:55:b5:c9:d3:87:00:ec:51:05:e3:03:67:8c:4e:
12:f7:c4:27:da:24:9e:a8:92:b0:bd:ae:0a:03:d5:c6:97:e0:
5e:19:a1:dc:2e:b3:7c:d2:4a:3d:2c:06:75:2d:31:82:43:f1:
f5:9f:98:53:a3:71:bc:50:d8:46:3b:76:a6:d9:78:cc:66:91:
75:5a:e6:d0:42:a3:d3:b9:ad:3f:e2:3a:60:1e:d1:8c:f1:ab:
9d:96:02:7a:56:68:84:da:c3:91:98:9a:d0:05:7b:16:7e:d7:
0b:48:e3:35:65:32:ab:05:db:e9:aa:0b:b7:07:42:07:8e:a3:
60:b5:e3:88:36:ff:fb:8b:f6:cb:2c:46:1e:30:48:02:e3:95:
5e:38:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:37 2026 by rpki-client