Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214642.roa
File: AS214642.roa (raw, json)
Hash identifier: 3un0wv9WfOiCqQn3iYLrEn2F2I/LkakSe/0k3LnclEc=
Subject key identifier: FE:05:C9:4A:60:E0:84:5D:41:C0:06:8E:9F:0C:13:80:8A:40:5C:02
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 35C8DC1D6751FE94560ACF5CCBB22A9165C56D7D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214642.roa
Signing time: Fri 26 Jun 2026 08:08:48 +0000
ROA not before: Fri 26 Jun 2026 08:03:48 +0000
ROA not after: Fri 25 Jun 2027 08:08:48 +0000
asID: 214642
IP address blocks: 2a0f:85c1:826::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c8:dc:1d:67:51:fe:94:56:0a:cf:5c:cb:b2:2a:91:65:c5:6d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:48 2026 GMT
Not After : Jun 25 08:08:48 2027 GMT
Subject: CN=FE05C94A60E0845D41C0068E9F0C13808A405C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:c5:67:31:fe:d1:9a:9f:c5:a6:23:80:9f:
cc:b6:96:50:06:44:96:af:53:15:e7:5b:0b:1e:d9:
4f:79:2e:81:14:34:5d:83:86:c9:b5:9c:0a:fb:04:
35:d0:fe:7b:a2:cd:e6:f4:26:3a:20:24:60:5e:bd:
b4:23:60:a2:0a:f5:6c:28:4a:dc:75:b2:b4:5f:69:
97:fb:b3:c4:2d:36:c3:5b:87:cd:5b:e2:5a:ee:8e:
fc:3a:bb:75:f5:b3:7f:08:ea:2b:5a:03:a4:12:ef:
16:83:06:ca:ba:7e:af:12:64:c2:b8:7a:eb:b8:f4:
61:e4:a9:15:15:fc:0d:40:d7:53:96:06:3e:df:70:
b8:c2:eb:08:fb:fe:e9:3e:17:aa:e0:c6:67:be:b0:
da:2d:17:4d:0e:07:bd:91:2f:33:51:a8:ea:6b:f0:
f9:de:1d:a1:e4:f3:87:71:86:16:66:50:56:55:69:
20:de:a3:41:2a:1c:3c:1c:3f:7e:e3:ee:48:a2:2d:
57:bd:c1:49:98:0e:e0:f1:02:39:10:b6:61:5c:28:
21:14:fd:f1:5e:0b:e9:e2:f3:0e:2f:f2:3b:79:00:
1a:66:e1:06:de:8b:c2:76:8d:4c:67:21:6e:a9:1e:
e6:c5:a6:91:80:e4:94:c3:f5:1b:d2:31:b4:28:80:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:C9:4A:60:E0:84:5D:41:C0:06:8E:9F:0C:13:80:8A:40:5C:02
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:826::/48
Signature Algorithm: sha256WithRSAEncryption
cc:40:30:39:06:c2:76:1d:c0:8c:e9:18:f1:cf:4f:65:08:a5:
cd:1e:c7:1f:8f:ee:a3:21:fe:4e:7d:4d:e2:36:92:9f:f4:f1:
03:d3:32:6b:93:d5:6e:2d:30:db:3a:fe:81:e6:87:de:a3:87:
b2:24:b9:ae:5a:a0:65:33:fb:a6:f6:75:54:01:99:e7:39:a7:
74:65:79:37:16:1b:0b:b7:18:1f:6c:5e:a3:d6:e4:f2:5a:df:
92:12:9b:79:12:74:6d:e1:ee:aa:77:6e:e4:6c:f2:0e:0d:25:
97:22:21:07:ac:a0:b3:c6:9a:9e:9a:83:00:5e:58:15:9e:b5:
93:44:6c:2d:d1:6b:6d:65:87:e0:2b:77:ff:af:ec:79:85:e2:
ba:77:1d:9c:04:95:e8:55:02:b2:0d:13:e2:52:7d:68:ac:a5:
7b:6e:bc:74:c8:7e:76:e4:be:f0:7e:6a:43:ba:4a:06:62:a1:
4b:b8:81:d8:c9:79:c2:18:81:aa:e4:7e:5e:0f:45:61:68:7b:
48:b8:1e:dc:9e:51:35:f3:8f:03:30:e6:0b:d5:24:7b:d5:96:
05:9e:88:3e:af:58:18:d1:0a:b5:df:15:63:c3:a9:2b:33:4e:
a8:d9:ac:bb:a7:1b:cd:ac:07:ce:97:da:1a:f8:5e:2e:3e:be:
7f:51:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:04 2026 by rpki-client