Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214522.roa
File: AS214522.roa (raw, json)
Hash identifier: VUBGxJOYO5y+0KyfgmdM2TN3xY9T6Cs4Mi+uhB1eDH8=
Subject key identifier: 23:9F:AD:47:C1:B7:3B:7B:90:58:E3:53:D7:96:28:64:4E:77:94:8E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: A63E989C050D04E000ACB31C23943B3938887A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214522.roa
Signing time: Fri 26 Jun 2026 08:08:45 +0000
ROA not before: Fri 26 Jun 2026 08:03:45 +0000
ROA not after: Fri 25 Jun 2027 08:08:45 +0000
asID: 214522
IP address blocks: 2a0f:85c1:3f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a6:3e:98:9c:05:0d:04:e0:00:ac:b3:1c:23:94:3b:39:38:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:45 2026 GMT
Not After : Jun 25 08:08:45 2027 GMT
Subject: CN=239FAD47C1B73B7B9058E353D79628644E77948E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:6b:d6:02:6f:71:72:62:f2:dd:e3:66:cc:
cd:01:78:1f:89:1e:34:8a:1c:2b:69:7a:50:78:bd:
e7:a3:28:03:1d:d2:9b:65:05:0b:62:02:c3:05:4e:
65:af:94:b8:ae:83:3a:cd:0e:cc:75:2f:7c:5b:86:
dd:de:04:84:e3:2f:d1:b6:08:b9:d2:4a:69:09:11:
9b:ce:91:1a:1f:09:a2:6f:e5:04:32:8b:6b:31:74:
67:8a:d6:cd:37:13:ad:55:d6:13:c2:90:f4:ee:1f:
a5:1d:ea:3a:5a:a4:52:ae:3a:1d:e0:45:9c:9b:1d:
1e:b4:76:0e:d3:e2:3f:bc:7b:e7:35:6b:1c:40:c6:
2a:48:9b:ee:b5:b7:1e:c2:3a:89:6a:33:95:a8:57:
a0:ee:0a:7c:b7:36:64:83:3b:ab:77:de:35:89:0f:
31:57:df:55:cf:55:18:3e:33:1a:75:69:00:ce:14:
62:ad:31:20:ca:41:8a:e4:79:f5:c7:22:4c:74:37:
f3:de:0e:5f:68:0c:06:c8:b7:31:ef:a4:17:69:94:
da:19:75:11:b1:32:4f:41:2d:be:2c:28:2c:ef:2a:
a7:a4:1c:ea:51:3e:77:0f:98:4a:ef:a6:ba:e8:15:
3f:80:70:0b:d8:37:be:d2:f1:82:0c:84:af:b8:29:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:AD:47:C1:B7:3B:7B:90:58:E3:53:D7:96:28:64:4E:77:94:8E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f4::/48
Signature Algorithm: sha256WithRSAEncryption
cc:d2:fc:d2:e6:5c:8b:83:c3:02:86:1b:55:39:4b:cb:2b:3b:
98:2c:d7:34:a3:33:e1:3e:c1:33:cc:5f:e1:aa:77:49:2b:98:
17:78:81:ba:17:ef:7b:af:c4:76:f9:58:2f:31:56:f7:c4:19:
da:29:84:27:8f:55:21:50:b8:82:e5:88:af:87:ea:57:99:75:
ae:02:fa:a7:f5:d6:8a:96:91:a4:71:f1:6d:ff:99:8c:1f:7d:
53:eb:b7:c5:d7:91:53:00:3c:07:df:7b:85:1e:6d:d2:68:56:
f5:d3:e7:c4:f0:7c:47:83:e2:a4:0e:19:2e:bf:57:86:23:8a:
df:59:42:55:f9:23:a4:c8:8a:bf:84:12:2b:ba:40:4c:b5:51:
c3:03:8b:5c:d9:c5:24:84:7a:a2:f0:14:e1:2c:08:43:4a:71:
c1:62:f7:7a:9a:83:04:5f:db:d0:48:91:76:35:43:5a:b0:20:
8f:c1:63:01:28:02:2d:de:c7:4c:dc:4a:37:9c:16:4a:89:b4:
6f:a2:02:8a:4a:05:e1:94:70:56:2b:d6:75:ef:97:1f:56:86:
dc:30:47:90:a9:bd:73:1f:f4:b7:93:a4:8c:fb:26:11:68:97:
19:fc:27:aa:5c:69:08:79:0f:fd:05:a1:01:61:60:96:a1:b6:
86:57:40:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUAKY+mJwFDQTgAKyzHCOUOzk4iHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDVaFw0yNzA2MjUwODA4NDVaMDMxMTAvBgNV
BAMTKDIzOUZBRDQ3QzFCNzNCN0I5MDU4RTM1M0Q3OTYyODY0NEU3Nzk0OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACWvWAm9xcmLy3eNmzM0BeB+J
HjSKHCtpelB4veejKAMd0ptlBQtiAsMFTmWvlLiugzrNDsx1L3xbht3eBITjL9G2
CLnSSmkJEZvOkRofCaJv5QQyi2sxdGeK1s03E61V1hPCkPTuH6Ud6jpapFKuOh3g
RZybHR60dg7T4j+8e+c1axxAxipIm+61tx7COolqM5WoV6DuCny3NmSDO6t33jWJ
DzFX31XPVRg+Mxp1aQDOFGKtMSDKQYrkefXHIkx0N/PeDl9oDAbItzHvpBdplNoZ
dRGxMk9BLb4sKCzvKqekHOpRPncPmErvprroFT+AcAvYN77S8YIMhK+4KW1RAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUI5+tR8G3O3uQWONT15YoZE53lI4wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQP0MA0GCSqGSIb3DQEBCwUAA4IBAQDM0vzS5lyLg8MChhtVOUvLKzuYLNc0ozPh
PsEzzF/hqndJK5gXeIG6F+97r8R2+VgvMVb3xBnaKYQnj1UhULiC5Yivh+pXmXWu
Avqn9daKlpGkcfFt/5mMH31T67fF15FTADwH33uFHm3SaFb10+fE8HxHg+KkDhku
v1eGI4rfWUJV+SOkyIq/hBIrukBMtVHDA4tc2cUkhHqi8BThLAhDSnHBYvd6moME
X9vQSJF2NUNasCCPwWMBKAIt3sdM3Eo3nBZKibRvogKKSgXhlHBWK9Z175cfVobc
MEeQqb1zH/S3k6SM+yYRaJcZ/CeqXGkIeQ/9BaEBYWCWobaGV0AV
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:37 2026 by rpki-client