Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214561.roa
File: AS214561.roa (raw, json)
Hash identifier: PvmTupC9T390mrxuX3jzV2jWA7pJzn4/r3NPj8ayW7A=
Subject key identifier: E1:CC:E8:FC:05:E7:E6:66:20:9E:68:3E:23:71:F5:10:39:85:87:D1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5BDC97A197168E5CC8C87EAC1FB5DB0323E167E7
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214561.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 214561
IP address blocks: 2a0f:85c1:830::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:dc:97:a1:97:16:8e:5c:c8:c8:7e:ac:1f:b5:db:03:23:e1:67:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=E1CCE8FC05E7E666209E683E2371F510398587D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:a6:93:39:b4:8b:72:88:be:d3:5a:09:fe:
21:77:44:6f:b2:8e:92:55:36:d6:55:03:59:7f:7e:
ba:8e:a8:43:ef:4c:50:cc:0e:be:55:82:e8:28:0d:
cd:ea:e1:c9:b7:bf:1f:66:ce:1c:0c:f1:82:a4:f9:
a3:08:40:1c:8a:25:bd:cb:48:d7:9e:c1:50:b2:f6:
51:05:97:b7:8f:de:cb:0b:61:9e:5b:4e:16:d8:95:
85:57:af:f0:70:37:99:c1:02:df:ab:89:3c:d1:79:
0e:32:bb:3b:ef:3f:64:2e:a8:6a:c1:08:08:e3:8f:
35:fe:dc:a0:d0:22:b3:64:36:cd:40:03:5e:b5:c2:
d3:3d:5f:b4:ef:a8:eb:0c:56:c8:17:0d:25:e3:fe:
8e:27:0a:20:6c:da:3f:d4:67:c1:3a:a2:c0:58:6d:
a4:be:7e:75:15:9d:5d:d7:95:00:df:9a:bc:a2:3d:
db:4d:89:f5:b7:b1:38:c8:04:60:08:a7:92:3b:d4:
67:12:ef:65:77:8f:4c:fe:5b:42:7b:a0:df:8c:16:
85:53:f1:19:8a:65:4a:64:b2:02:d7:9e:7c:9f:8c:
02:0e:02:d9:4c:f2:d0:e2:f5:c5:8a:73:48:b8:00:
23:bd:d7:1d:ed:7e:21:5b:1b:be:2d:f8:f8:f0:f1:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:E8:FC:05:E7:E6:66:20:9E:68:3E:23:71:F5:10:39:85:87:D1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:830::/48
Signature Algorithm: sha256WithRSAEncryption
7f:44:16:bb:b9:aa:86:9f:d4:74:11:43:6e:7a:c0:ba:62:ea:
92:cc:57:5f:fc:f8:f4:a9:9e:51:85:1d:fb:2a:06:5b:43:63:
e1:41:7f:94:b9:38:e8:08:2b:2b:08:4d:19:dc:3b:af:2e:c3:
9b:d0:59:7a:ee:32:51:95:7f:27:6a:22:d1:53:5b:63:9f:df:
51:53:6b:93:4d:6e:ef:5f:b1:bf:bb:1f:c8:18:77:72:dd:fd:
82:53:37:f7:c4:e9:f2:8d:60:24:b7:cc:75:ad:ea:32:4d:e9:
29:86:42:13:5e:06:ca:bb:d6:14:76:02:58:7c:a4:bd:3e:05:
6e:32:8b:ed:35:b9:10:ca:bc:0b:7f:85:4b:b7:61:d6:28:b8:
c2:bf:64:e9:28:24:81:4f:fc:07:42:02:ca:db:37:66:2c:01:
8a:6f:a1:ec:fd:16:ce:28:b0:72:ff:1f:ab:af:4e:03:3e:ad:
60:eb:54:5d:22:a1:ad:e8:28:37:00:c7:6f:31:af:71:34:6d:
9d:4b:e1:68:f5:a1:81:3f:5d:72:1d:a6:8d:d7:34:5d:1d:a1:
b0:c9:dc:2c:95:bc:67:ba:6f:35:4b:da:eb:49:7a:23:81:9e:
87:6f:c6:4f:03:03:48:e8:2e:bd:f0:c3:47:bb:49:57:16:7b:
b3:a1:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:15 2026 by rpki-client