Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214610.roa
File: AS214610.roa (raw, json)
Hash identifier: X8NJxymm43kMSEjWmD0nPANgjOOR3C0cqrX0napzPao=
Subject key identifier: D8:D1:43:A3:4B:A0:30:5D:3C:FE:D3:BE:6F:72:DA:DE:AD:E5:C5:48
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0C9050AE868683A8EB02976DE70FFC3A368E0A39
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214610.roa
Signing time: Mon 20 Jul 2026 21:08:53 +0000
ROA not before: Mon 20 Jul 2026 21:03:53 +0000
ROA not after: Mon 19 Jul 2027 21:08:53 +0000
asID: 214610
IP address blocks: 2a0f:85c1:ca0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:90:50:ae:86:86:83:a8:eb:02:97:6d:e7:0f:fc:3a:36:8e:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:53 2026 GMT
Not After : Jul 19 21:08:53 2027 GMT
Subject: CN=D8D143A34BA0305D3CFED3BE6F72DADEADE5C548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:98:89:d7:98:f0:a4:a2:c4:99:d3:d8:5e:
69:6c:25:c6:47:7a:73:86:f5:25:af:68:e5:01:24:
77:ca:21:8b:50:c4:4f:67:45:e4:9b:8a:54:a3:2c:
b9:c0:69:1d:87:7f:39:46:a1:c5:83:59:7c:82:8f:
f7:e1:0b:81:91:45:f7:76:6c:47:c1:a4:ae:97:a7:
17:20:d7:b4:59:48:2d:58:1e:92:c6:f0:77:b7:df:
09:b8:29:31:15:bd:c4:eb:e2:67:93:67:f8:47:1d:
16:e2:78:65:e1:46:82:d9:26:3d:07:e4:c2:b0:3a:
f4:b7:7a:77:20:e6:2c:64:0f:d7:e8:b1:8a:85:4e:
c7:59:9a:0a:69:3d:04:44:68:b1:de:1c:8c:86:f2:
91:77:3e:1d:4d:98:02:c2:b6:23:27:65:52:64:a7:
2b:7b:67:8b:1b:cb:75:a1:25:07:3f:1d:29:9e:6b:
ae:c1:3e:52:3a:1c:03:52:8c:19:fc:c4:b8:fd:2a:
e7:4d:0f:bd:4f:a1:86:6a:7d:7e:54:21:65:11:53:
04:f6:da:4d:3a:2a:bb:6d:58:07:b4:90:25:96:95:
00:99:3e:f9:c2:c0:2a:56:99:f7:53:33:b3:be:a6:
c5:94:a0:cb:98:3a:c9:d5:67:15:e9:2a:9b:51:49:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:43:A3:4B:A0:30:5D:3C:FE:D3:BE:6F:72:DA:DE:AD:E5:C5:48
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ca0::/44
Signature Algorithm: sha256WithRSAEncryption
b5:c7:9f:82:c4:5d:8b:24:eb:12:45:c4:3e:a1:0a:c8:f4:e6:
cc:22:2a:b4:29:7e:ec:01:e9:50:0f:91:80:e5:5d:d5:3d:17:
d3:06:1c:5a:60:89:a8:63:46:2f:b0:57:25:44:f8:bc:9c:54:
bc:16:2f:a0:3c:1b:56:c5:9e:64:6b:50:5b:29:77:47:88:bc:
7d:56:24:ec:9b:60:7a:c6:b1:4f:7a:31:dc:d1:84:4c:8f:5f:
86:1f:94:51:5d:a1:2d:a8:c2:f7:15:83:1b:7f:f6:0a:3e:cd:
3d:a1:97:66:a3:00:f4:f2:1c:8c:f3:50:c9:ae:ab:d5:23:ea:
27:2c:67:b8:54:7f:4b:99:63:66:a2:39:02:2c:f3:2b:88:3f:
38:e4:f3:a6:2f:d0:01:33:ee:7a:53:01:54:b4:e5:1c:91:cc:
4c:54:2d:b4:29:c6:97:91:68:0e:ad:56:49:e8:df:96:e9:f0:
6b:2f:76:52:d7:0f:0a:df:28:d7:6e:fe:7a:4a:3b:ea:9b:d0:
c6:8b:4a:e3:b1:2b:74:af:79:2e:3e:83:2f:31:4b:10:91:71:
c6:76:91:f5:77:df:b2:14:d3:bd:29:c1:c5:4a:3a:7f:a2:ed:
0b:8c:86:d2:85:3e:19:11:f5:35:c1:df:8c:9c:30:5b:da:00:
9d:4b:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:44 2026 by rpki-client