Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214641.roa
File: AS214641.roa (raw, json)
Hash identifier: gRiZc6a0XCvVNrmWFWtgS8p0SaYLYyTF3d+MtFZvkKo=
Subject key identifier: D8:02:C1:05:66:98:2E:BF:68:14:CC:3F:9F:E6:5D:6F:D5:D5:28:72
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 66B95E7CF12EEB43BBD92E668003AE3BAD193790
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214641.roa
Signing time: Fri 26 Jun 2026 08:08:47 +0000
ROA not before: Fri 26 Jun 2026 08:03:47 +0000
ROA not after: Fri 25 Jun 2027 08:08:47 +0000
asID: 214641
IP address blocks: 2a0f:85c1:827::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b9:5e:7c:f1:2e:eb:43:bb:d9:2e:66:80:03:ae:3b:ad:19:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:47 2026 GMT
Not After : Jun 25 08:08:47 2027 GMT
Subject: CN=D802C10566982EBF6814CC3F9FE65D6FD5D52872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:d4:86:85:df:79:d9:e2:4a:f2:40:4a:b0:
fc:2a:8d:ea:9e:7c:37:83:71:d0:fd:c6:e6:dc:9b:
d9:66:bc:49:2b:88:05:54:86:a2:91:0e:78:5b:39:
6c:c7:1a:67:c6:f9:43:a4:0d:9e:01:f2:f0:0d:23:
20:69:79:bf:67:c6:b9:59:0a:7f:5f:be:77:da:08:
b2:c8:69:d6:33:77:ca:1b:51:82:40:b1:27:5d:e2:
31:5f:9e:77:42:cb:ec:40:1d:61:28:50:75:38:38:
47:07:d0:8b:9a:c3:5a:7f:e4:91:35:7a:37:99:11:
6f:d2:d0:a1:05:47:b4:3a:fa:47:07:7a:3a:97:0a:
67:32:c2:80:b3:cd:c3:11:ca:e3:a8:49:1f:75:e5:
bf:71:9b:91:9b:e9:35:71:e8:00:41:ac:b4:18:1f:
a3:58:52:47:b6:20:63:89:c9:d5:d8:7c:f6:65:97:
ec:99:13:19:86:30:74:e8:b7:77:1c:22:79:6e:18:
74:a2:28:fc:f2:c1:2f:8d:b3:15:63:2d:ed:72:b5:
dd:9c:a1:f5:a0:5f:8e:d8:99:b2:7e:89:0a:65:29:
fc:b4:5a:97:34:cb:e8:19:1a:3d:d1:5b:01:10:d9:
31:e4:fc:36:38:fd:2e:cd:ac:a3:eb:e9:1d:f1:45:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:02:C1:05:66:98:2E:BF:68:14:CC:3F:9F:E6:5D:6F:D5:D5:28:72
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:827::/48
Signature Algorithm: sha256WithRSAEncryption
98:ec:07:39:7a:a2:3d:0f:ce:15:12:32:48:4c:31:4f:bb:d1:
e7:e1:7d:39:eb:2e:6d:27:b3:37:f9:d8:4d:87:77:82:aa:bf:
ef:a7:29:2d:fd:3f:e1:32:41:05:95:60:32:77:7a:74:7f:49:
00:d9:ca:82:33:20:37:59:6f:ed:99:23:a3:77:a6:e0:56:77:
10:31:06:6f:69:92:8f:dd:77:09:09:e7:88:e1:fb:46:0b:d3:
3f:bc:25:c9:1d:d4:dd:b6:ca:e3:a9:bd:b5:af:35:db:e6:d8:
3c:b3:15:df:0f:ab:6b:ab:12:0c:22:5e:6a:ac:a7:9b:41:c4:
0d:51:36:72:c2:7b:da:be:84:28:e2:70:85:fe:0f:45:aa:2c:
d8:da:47:23:3d:62:b3:cc:ac:95:86:04:27:ef:a8:3c:c0:e1:
83:bd:b7:24:6a:59:b6:b5:e1:ec:ad:12:67:ef:12:06:59:8d:
7a:f0:e0:9f:01:75:c4:41:3c:e9:39:f0:5b:df:45:21:f6:da:
ad:08:6e:c3:c5:09:5e:83:c9:af:0d:fe:27:d1:41:83:14:80:
1f:2e:b4:2b:ca:b5:35:53:03:88:38:02:c8:19:e0:54:99:ae:
0c:82:90:0f:7f:4e:8c:88:20:62:0e:62:0e:95:70:e1:db:0b:
51:da:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:07 2026 by rpki-client