Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214533.roa
File: AS214533.roa (raw, json)
Hash identifier: j92DVZhMPkqo+5ne1V/eA5Na5Jd5iBxTMkfKFixfysg=
Subject key identifier: B6:C1:10:61:8A:57:5D:28:B2:7D:FA:BA:78:32:0E:5A:0F:CC:5F:D2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7B232E540D857E5BFFADB8ACBFB9EFA8A5C7A980
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214533.roa
Signing time: Tue 21 Jul 2026 05:08:55 +0000
ROA not before: Tue 21 Jul 2026 05:03:55 +0000
ROA not after: Tue 20 Jul 2027 05:08:55 +0000
asID: 214533
IP address blocks: 2a0f:85c1:836::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:23:2e:54:0d:85:7e:5b:ff:ad:b8:ac:bf:b9:ef:a8:a5:c7:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:55 2026 GMT
Not After : Jul 20 05:08:55 2027 GMT
Subject: CN=B6C110618A575D28B27DFABA78320E5A0FCC5FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:21:d5:b2:f2:c4:89:f5:7d:f2:f1:7a:68:
37:a5:dc:62:a0:16:28:89:3c:f6:5a:ce:d4:5c:e9:
60:79:c9:12:af:83:3c:17:67:0d:da:33:3c:59:d6:
aa:98:7c:da:71:95:ed:13:48:98:87:a7:71:40:15:
5e:e7:bb:a0:76:64:41:0a:76:0d:bc:0b:bb:2a:58:
ba:37:e6:d8:72:19:b8:21:0f:ce:2e:c5:e0:7a:6b:
d4:44:9a:57:44:d6:db:10:8b:9d:ee:69:30:7e:c4:
14:6e:a5:d6:90:d2:d7:f0:44:23:35:f6:28:50:21:
33:f5:3b:7a:1e:41:3d:4b:8d:1b:0c:46:9f:c1:c2:
8d:ca:d8:bb:4e:d3:55:2d:fd:32:d3:61:15:42:34:
c4:16:12:9e:8d:4b:8e:f3:7f:7b:b8:22:52:f3:00:
d3:9e:b0:07:a9:01:90:96:75:aa:88:5f:41:be:68:
b3:10:6f:66:f1:4b:12:ba:ec:f9:0d:ed:ee:77:dd:
fa:0d:94:47:00:0a:b5:3e:27:32:67:cc:d4:e7:e1:
93:23:22:cb:85:cf:13:ac:ce:4a:e9:08:b9:99:a5:
9c:6e:bc:3f:f3:bd:1c:eb:08:28:f1:fc:41:7e:bd:
ba:39:c2:2b:23:14:4d:b7:bd:04:23:61:72:f1:2f:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:10:61:8A:57:5D:28:B2:7D:FA:BA:78:32:0E:5A:0F:CC:5F:D2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:836::/48
Signature Algorithm: sha256WithRSAEncryption
0c:44:3a:be:fc:36:20:a7:a3:d1:f1:f7:1b:96:0d:76:c6:8f:
b7:de:05:53:cd:fa:59:23:bf:3c:bf:de:4e:93:39:3a:62:06:
3b:d7:47:f2:d4:7e:00:3d:1c:89:17:5e:da:5b:24:3e:b4:92:
1b:9e:67:31:62:67:e6:00:2a:14:e2:3a:0c:20:16:bc:b7:34:
c5:44:79:88:ec:8f:fd:5a:f3:65:14:44:be:2a:3e:c4:be:e8:
c8:16:99:1d:bf:a6:ab:af:73:79:79:05:0e:69:9c:46:d4:1a:
6a:48:bc:40:2a:f3:8e:df:64:c4:28:7f:19:be:2d:69:32:34:
4e:e9:1e:35:77:c4:98:0b:2c:66:f5:f7:fb:00:3e:4f:1d:3f:
9e:67:86:df:69:66:7f:82:c1:38:75:5e:77:73:2a:f3:1d:8f:
70:ea:c0:c7:e3:31:e2:bb:a7:2d:b3:03:e6:d4:97:5b:a2:f4:
16:1d:80:bd:9b:95:47:3f:87:fc:3b:00:28:c1:ea:e5:c6:31:
bf:24:c1:61:fa:c0:84:f5:b2:0f:c0:6a:79:b9:50:33:8c:b4:
7e:6a:de:d3:e3:19:9e:7f:41:01:18:da:66:08:36:3f:eb:be:
5a:39:5f:98:ee:26:6c:7f:df:e7:84:47:81:70:e9:52:5f:0c:
3e:85:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:40 2026 by rpki-client