Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
File: AS214539.roa (raw, json)
Hash identifier: SwGARE6RTLAOmDfzzotd0szLBFv+j6uTQbZYzXW3HOY=
Subject key identifier: 40:45:DD:E8:24:0D:B8:14:32:36:47:80:C0:BA:2C:51:FB:AA:F5:ED
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D7DD87D007DA6DCBCF0C2A04DA0337237BA9828
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
Signing time: Fri 26 Jun 2026 08:08:48 +0000
ROA not before: Fri 26 Jun 2026 08:03:48 +0000
ROA not after: Fri 25 Jun 2027 08:08:48 +0000
asID: 214539
IP address blocks: 2a0f:85c1:835::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7d:d8:7d:00:7d:a6:dc:bc:f0:c2:a0:4d:a0:33:72:37:ba:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:48 2026 GMT
Not After : Jun 25 08:08:48 2027 GMT
Subject: CN=4045DDE8240DB81432364780C0BA2C51FBAAF5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:9b:55:16:20:5b:ea:ea:cd:56:e2:c2:25:
68:f4:13:09:a8:05:39:7f:10:3b:3d:cf:fb:f0:5b:
8a:e9:99:97:87:93:09:54:19:7a:c0:2f:16:67:0f:
7b:ec:7a:42:d5:54:f0:c2:13:40:db:f0:d1:dc:b8:
4f:d0:62:4e:dd:9f:ee:5a:52:a6:58:ef:53:fd:0b:
f7:f2:bd:66:f6:ec:48:4a:55:ff:2f:90:cf:30:ad:
cf:f7:08:6f:e9:95:16:41:54:37:64:86:85:65:45:
25:46:bc:1d:b8:63:b5:cc:be:77:97:ae:0e:a8:c6:
e6:95:3c:d7:78:44:65:e3:07:04:72:9f:e1:ce:ed:
03:c5:68:b7:05:c1:7d:3b:4e:02:80:4c:82:12:18:
63:d2:32:0b:61:b0:6a:01:ea:d1:bf:4d:00:4b:17:
44:6c:d5:17:18:f8:7d:c9:33:6b:df:ba:1e:77:03:
7f:34:be:b3:1e:c6:58:10:23:cf:af:92:7c:de:e3:
e3:0a:8a:6e:10:b6:44:4a:25:9f:63:8e:d0:e7:fc:
a2:00:b6:1c:bd:7e:c1:29:1d:08:f4:7e:9d:75:db:
03:1f:5d:39:9d:8d:6c:58:00:15:ae:be:f9:85:b1:
ba:17:e7:3b:ea:a8:07:cb:46:53:36:3a:61:2a:e6:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:DD:E8:24:0D:B8:14:32:36:47:80:C0:BA:2C:51:FB:AA:F5:ED
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:835::/48
Signature Algorithm: sha256WithRSAEncryption
51:d0:ad:0d:4b:2b:23:22:24:d6:a5:55:94:83:85:c8:93:da:
58:b8:89:34:c8:9f:7b:3d:a5:1a:ed:7f:e9:77:77:38:23:bc:
45:d5:33:57:29:dd:6f:6c:81:7a:b0:57:45:4f:b2:d0:73:c0:
f1:37:04:fd:a9:62:56:f0:9b:1c:50:e3:1b:ca:6f:2e:8d:54:
7c:cb:c4:41:3d:3c:2d:9d:5d:1f:90:42:b5:01:0a:ba:d8:93:
5c:9d:cb:15:86:fa:f3:4b:c3:32:17:1a:5e:bb:cb:e5:d7:8e:
68:ce:f3:17:3d:22:0a:c7:13:71:3a:c2:db:e8:d3:c4:20:3b:
13:55:a1:64:78:52:b6:9e:96:e5:3a:ef:ae:36:99:d0:ec:02:
ab:f0:4d:57:d6:f3:aa:3c:a4:11:8d:90:f3:d9:f5:80:e2:da:
ba:27:3f:3d:70:c7:ec:da:19:c6:2e:6e:d8:07:da:8e:6e:d2:
00:be:89:03:8a:79:9a:c4:cd:af:6e:7d:56:66:84:c7:91:b7:
4b:2d:e4:f7:34:ba:ea:ed:d1:0c:1d:7d:1d:77:36:a0:06:32:
43:ab:0f:dc:8d:aa:e0:73:6d:01:4a:36:20:5a:30:22:77:39:
c5:ce:a7:80:7a:11:f5:15:6b:43:26:ba:7c:c0:ed:1f:33:ca:
c3:83:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:17 2026 by rpki-client