Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214634.roa
File: AS214634.roa (raw, json)
Hash identifier: ylEmPwsMmYFpdEvEfVjhgNS/74SlQU+PBWJyaDO6FuA=
Subject key identifier: 41:61:CA:9A:82:CE:C8:D1:E5:3A:81:48:6F:47:0D:8D:EF:06:3C:B6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 256CFE51FF7EA6209F379441A436FD8A8840B35E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214634.roa
Signing time: Fri 26 Jun 2026 08:08:39 +0000
ROA not before: Fri 26 Jun 2026 08:03:39 +0000
ROA not after: Fri 25 Jun 2027 08:08:39 +0000
asID: 214634
IP address blocks: 2a0f:85c1:825::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6c:fe:51:ff:7e:a6:20:9f:37:94:41:a4:36:fd:8a:88:40:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:39 2026 GMT
Not After : Jun 25 08:08:39 2027 GMT
Subject: CN=4161CA9A82CEC8D1E53A81486F470D8DEF063CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:f8:92:6d:99:d6:b5:94:63:2c:23:c8:04:
c2:9c:e4:0c:a7:48:25:bf:59:88:f5:71:ad:eb:46:
64:8f:f1:fe:d3:40:e9:2e:27:87:c8:c9:a4:db:56:
6c:35:ab:92:ef:58:df:2e:bf:df:e9:24:46:6d:87:
15:0e:ba:c8:91:3e:8f:ca:78:0b:ae:ee:aa:b1:b6:
a3:6f:1a:4a:6d:c1:fd:58:48:5c:a9:0e:53:7b:91:
25:31:d7:57:5b:b0:71:9a:f5:32:cf:f2:c2:d8:23:
46:9d:da:1f:67:d8:5f:45:d4:60:b9:e5:31:6e:72:
0a:42:09:ba:f4:17:32:c9:81:0e:6e:e6:e6:e5:ab:
a0:20:ac:e0:36:3b:1c:2c:0b:56:61:fb:49:6c:e3:
bb:01:29:a5:aa:c3:34:67:d2:07:32:1a:20:d1:8e:
b4:24:30:08:3e:92:0b:9d:f2:3d:08:21:21:17:c8:
b2:ea:d5:8c:17:5f:4b:42:76:d6:df:c1:01:6b:3a:
8f:db:9c:36:72:ba:5c:6b:f9:ba:89:92:53:e0:cd:
56:4c:f9:80:91:29:a9:0c:42:15:19:4e:1f:f4:fb:
67:22:2a:92:13:be:84:2d:84:0c:71:8f:ed:d1:8a:
eb:c8:c5:6e:73:ad:da:72:b0:2b:83:03:21:9e:02:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:CA:9A:82:CE:C8:D1:E5:3A:81:48:6F:47:0D:8D:EF:06:3C:B6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:825::/48
Signature Algorithm: sha256WithRSAEncryption
e2:a0:aa:0d:e5:3c:e5:ec:ed:d9:47:9e:11:87:5d:fd:c1:8f:
dc:c8:08:40:28:ef:b5:eb:f3:2d:13:b5:4d:a9:7e:e9:eb:6a:
fa:10:5b:06:37:8e:f1:c2:29:8f:7e:06:e2:20:fe:18:78:1d:
a4:b0:f9:33:05:7c:70:06:56:a2:55:6e:7b:36:e8:ee:7b:67:
ea:b7:4b:dd:b1:24:8d:ea:44:b5:15:c1:95:b3:5e:67:05:11:
49:f1:58:e4:b6:7c:29:c9:3c:2a:e2:e2:ae:aa:08:e2:75:08:
69:d6:c9:88:58:90:a8:21:58:36:4f:12:3e:d0:39:76:e6:14:
2b:1f:fa:43:d3:2c:0b:b1:ae:32:e1:c5:6a:c9:bf:46:03:e1:
b6:93:e0:80:56:17:22:a2:f0:77:1a:ed:b4:65:d3:3b:e1:6e:
2e:e4:3f:a9:40:7d:c8:d5:03:a4:3b:8f:13:27:5a:5c:50:9c:
b6:b7:b3:8a:62:36:a8:e6:75:18:a2:9c:3a:69:bc:fd:5c:e9:
b0:43:20:2a:0f:d4:88:9f:85:68:fd:ba:4d:69:02:4b:36:1a:
4b:d8:a4:17:9c:be:5f:68:6b:a0:34:d4:de:56:d1:56:6e:11:
a0:48:c1:51:95:86:47:b6:c5:5a:61:69:db:fc:ab:0d:6b:b9:
52:8d:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:45 2026 by rpki-client