Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214565.roa
File: AS214565.roa (raw, json)
Hash identifier: wA+5T7y+NuhbLMic9oBz+O1IthIUQPvrjUaEmzb2C4I=
Subject key identifier: CB:61:D6:25:BC:95:C1:C7:C1:DD:5F:33:1E:F8:1B:E0:38:C4:A5:A0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5DCA0B226A3B19233678CEE947C5A13B10BA1574
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214565.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 214565
IP address blocks: 2a0f:85c1:832::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:0b:22:6a:3b:19:23:36:78:ce:e9:47:c5:a1:3b:10:ba:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=CB61D625BC95C1C7C1DD5F331EF81BE038C4A5A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1f:ee:b8:8a:dc:9f:40:89:a1:a4:d4:e7:c2:
f9:bc:72:f7:9d:19:05:21:de:b4:06:e9:f3:e8:59:
c0:0f:68:94:6a:36:a3:96:ca:f9:7f:7b:f5:c0:f1:
29:96:f8:1a:e6:a7:ae:00:5a:9d:66:73:a1:af:34:
3c:ac:b6:1c:fc:20:a2:d1:98:b6:82:55:7e:93:93:
10:49:54:80:6a:e4:ad:74:72:94:57:e4:d0:1b:75:
7f:88:4b:77:c0:a9:a6:65:28:72:8a:fa:cb:ca:31:
3c:31:cf:34:2e:bb:94:3a:fc:e4:c4:3d:93:59:9f:
3b:d3:92:ed:24:4d:7f:e7:2c:08:dd:8b:0b:da:c2:
76:93:12:09:7a:ab:d3:e8:1a:c8:16:62:71:ab:1f:
24:d3:fe:89:80:d0:c2:f1:00:e7:ba:32:9d:63:e3:
f2:85:85:c0:96:3b:78:c4:34:73:1b:e1:b3:4f:00:
87:62:bb:36:24:03:9f:09:21:86:46:a6:9f:5b:e5:
1e:fc:e0:e9:f6:4b:a9:fc:52:1d:cc:23:15:05:ed:
81:c5:97:26:aa:cb:81:93:49:3c:2e:76:fc:cd:a4:
41:8b:d8:29:7e:e3:ea:af:af:d1:55:79:52:cc:ac:
64:a1:01:3e:ee:82:9e:1c:b2:e9:ca:a9:e1:b4:ef:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:D6:25:BC:95:C1:C7:C1:DD:5F:33:1E:F8:1B:E0:38:C4:A5:A0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214565.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:832::/48
Signature Algorithm: sha256WithRSAEncryption
c5:d3:7c:d0:f9:92:1d:14:6d:51:60:33:81:56:1e:77:f0:9b:
59:29:2f:d8:ac:50:b9:63:dd:14:d7:dc:4c:a1:b4:f9:67:b6:
be:b7:59:94:e2:5f:36:a0:84:5b:4c:49:9c:7a:ab:d0:da:6c:
c9:a2:20:f5:4c:7f:95:87:e3:9a:72:43:37:08:5d:d5:9e:51:
65:05:d7:65:33:43:6c:df:bf:a3:8c:af:93:36:3e:31:c5:65:
7e:11:9f:06:22:5f:b3:fc:c5:a0:a8:06:9b:ba:2e:cd:1c:5c:
2a:f7:43:43:23:97:5f:de:f6:6c:7e:21:4a:9e:0d:68:79:e0:
ae:d4:fb:dc:af:c2:20:b7:20:34:24:57:31:d5:be:d3:85:a3:
b0:af:3e:29:09:81:b9:fd:f0:ef:da:72:a9:21:78:f4:31:4d:
12:06:94:af:ef:f5:b5:f9:f1:b2:6c:e5:fd:ac:08:36:6f:d0:
9f:ad:38:f4:64:e1:80:b6:46:58:e0:89:27:71:06:70:62:2a:
f2:f6:34:a9:b5:a3:02:97:c7:49:8d:90:18:7d:e1:ac:7a:5b:
37:4a:9a:24:48:be:23:e7:7b:ee:34:ca:91:11:f7:2a:d0:a8:
cd:55:6b:60:dc:1a:80:6e:72:84:bd:bc:f6:9b:10:68:c4:ad:
67:26:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:40 2026 by rpki-client