Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214546.roa
File: AS214546.roa (raw, json)
Hash identifier: KkxR6pTlEJHvLohyphiR0B8m5CQ5c0t6EZGRLjVZBaM=
Subject key identifier: B9:3C:54:6F:FE:B1:B4:80:E3:5F:E2:E9:2E:9D:86:6C:70:2C:8F:F1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 462C9AAB322FF8377201D50C28CDB647D44FE0DD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214546.roa
Signing time: Fri 26 Jun 2026 08:08:42 +0000
ROA not before: Fri 26 Jun 2026 08:03:42 +0000
ROA not after: Fri 25 Jun 2027 08:08:42 +0000
asID: 214546
IP address blocks: 2a0f:85c1:829::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2c:9a:ab:32:2f:f8:37:72:01:d5:0c:28:cd:b6:47:d4:4f:e0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:42 2026 GMT
Not After : Jun 25 08:08:42 2027 GMT
Subject: CN=B93C546FFEB1B480E35FE2E92E9D866C702C8FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:60:9c:e4:c1:01:1a:42:23:30:53:84:c6:
bc:29:82:8a:e5:42:f3:0e:c8:40:45:82:25:4a:4d:
3b:23:b5:28:fb:12:bb:5c:f7:6a:8f:43:9b:47:0e:
2a:a4:41:40:b4:e6:d8:7f:ca:89:8d:ac:04:ca:f7:
7d:09:94:01:f0:5c:97:ed:58:be:19:58:b4:5f:2d:
92:5b:78:93:d9:b7:09:79:9f:51:9f:ea:3d:30:dd:
a8:4c:d8:6f:c2:68:17:44:82:ea:0d:9b:76:17:a1:
09:10:70:d7:48:0a:0b:0b:45:a7:4d:9f:df:dc:e6:
88:97:ab:63:e6:eb:56:9a:16:57:32:1c:50:af:80:
ee:30:1c:51:df:c7:ca:0f:2f:91:dc:4e:ee:6d:2e:
bf:6a:7c:8a:f1:44:d6:3c:c2:3f:54:b8:be:58:47:
e0:e9:e6:4c:c1:5c:dc:1a:e1:d6:71:29:d3:b6:4a:
cb:36:16:94:37:fb:ec:78:f2:45:3e:9a:66:b0:5c:
0c:5a:ba:10:2a:f7:ce:2d:5a:4a:1a:6d:af:1a:c9:
1f:4d:b3:12:70:2f:a7:ac:06:86:7a:de:3b:b5:6f:
08:2d:e8:36:89:3b:15:0a:30:95:27:de:1f:8d:b2:
ef:ef:9c:56:18:b6:5e:c0:a8:86:c0:58:f1:f1:0b:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:54:6F:FE:B1:B4:80:E3:5F:E2:E9:2E:9D:86:6C:70:2C:8F:F1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214546.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:829::/48
Signature Algorithm: sha256WithRSAEncryption
66:c4:a9:9c:5f:66:3f:97:9e:e3:c9:65:1a:0c:e6:de:3f:46:
6c:66:4f:57:75:be:ab:be:78:73:0b:5d:97:b4:bb:45:f2:e0:
81:6a:43:4a:50:fe:87:e0:0b:85:21:22:65:ef:7d:86:33:19:
de:07:bf:d0:71:fa:ba:12:46:3f:a0:93:66:0c:dc:d9:d6:60:
1d:c9:b7:f5:fa:47:a2:e2:02:b7:55:ba:d9:ed:2b:3e:67:0a:
7d:7b:ba:8c:cf:5e:be:f9:4e:21:05:4c:47:f5:af:40:62:57:
28:14:12:24:ea:c0:a9:2b:ad:11:25:e1:6e:51:a3:3c:5d:5d:
0f:d2:b6:d3:79:1f:2a:28:68:65:43:07:d7:b9:31:85:9a:28:
c3:f3:f7:65:c1:df:88:4a:9b:90:b3:89:36:e5:58:32:7d:48:
94:85:bb:35:9d:fb:fc:bd:a8:b1:e8:b5:b6:b8:c6:90:f0:0d:
5e:42:00:0e:d8:c6:de:e4:36:ab:48:9a:ed:99:0a:00:6b:aa:
91:e3:e2:32:72:59:ab:4f:cf:0e:c4:84:b6:b3:18:37:6a:2a:
42:86:41:b7:89:26:fa:69:67:1f:44:46:c2:32:3d:09:ec:dd:
da:5d:f7:10:b7:f3:64:db:bb:4d:64:88:3b:bb:d3:de:44:84:
1f:a6:97:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIURiyaqzIv+DdyAdUMKM22R9RP4N0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDJaFw0yNzA2MjUwODA4NDJaMDMxMTAvBgNV
BAMTKEI5M0M1NDZGRkVCMUI0ODBFMzVGRTJFOTJFOUQ4NjZDNzAyQzhGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3mCc5MEBGkIjMFOExrwpgorl
QvMOyEBFgiVKTTsjtSj7Ertc92qPQ5tHDiqkQUC05th/yomNrATK930JlAHwXJft
WL4ZWLRfLZJbeJPZtwl5n1Gf6j0w3ahM2G/CaBdEguoNm3YXoQkQcNdICgsLRadN
n9/c5oiXq2Pm61aaFlcyHFCvgO4wHFHfx8oPL5HcTu5tLr9qfIrxRNY8wj9UuL5Y
R+Dp5kzBXNwa4dZxKdO2Sss2FpQ3++x48kU+mmawXAxauhAq984tWkoaba8ayR9N
sxJwL6esBoZ63ju1bwgt6DaJOxUKMJUn3h+Nsu/vnFYYtl7AqIbAWPHxCwmLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUuTxUb/6xtIDjX+LpLp2GbHAsj/EwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgpMA0GCSqGSIb3DQEBCwUAA4IBAQBmxKmcX2Y/l57jyWUaDObeP0ZsZk9Xdb6r
vnhzC12XtLtF8uCBakNKUP6H4AuFISJl732GMxneB7/Qcfq6EkY/oJNmDNzZ1mAd
ybf1+kei4gK3VbrZ7Ss+Zwp9e7qMz16++U4hBUxH9a9AYlcoFBIk6sCpK60RJeFu
UaM8XV0P0rbTeR8qKGhlQwfXuTGFmijD8/dlwd+ISpuQs4k25VgyfUiUhbs1nfv8
vaix6LW2uMaQ8A1eQgAO2Mbe5DarSJrtmQoAa6qR4+IyclmrT88OxIS2sxg3aipC
hkG3iSb6aWcfREbCMj0J7N3aXfcQt/Nk27tNZIg7u9PeRIQfppch
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:39 2026 by rpki-client