Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
File: AS214675.roa (raw, json)
Hash identifier: 7Kx1mqRqySGDJ7dZsVxUHfEkRoiGJAaohO8bCD7KsEw=
Subject key identifier: 37:C1:7A:39:77:B1:89:87:51:42:C3:DF:F0:89:62:53:F1:14:CE:0B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 342AB83EC6825F5402A99DD37414DF36DB65A3F9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 214675
IP address blocks: 2a0f:85c1:3fa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2a:b8:3e:c6:82:5f:54:02:a9:9d:d3:74:14:df:36:db:65:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=37C17A3977B189875142C3DFF0896253F114CE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:fe:c0:44:02:63:71:92:54:56:1e:76:91:
84:ed:fa:06:c2:92:9c:65:b3:23:48:26:ef:e4:d8:
67:53:0f:b6:9a:0b:ac:ed:c0:aa:18:95:24:7f:6b:
82:49:1a:03:3d:9d:be:15:f4:2a:b7:bf:cc:b7:4b:
4a:f3:62:81:65:d9:8b:02:b0:32:2b:b9:67:c9:1e:
f2:b5:ca:d6:76:3b:76:07:fa:42:0d:cf:5a:19:dd:
ae:3b:89:60:15:0d:4a:25:a9:ca:57:14:03:a8:b4:
a6:2c:3b:f2:23:33:f9:fe:a8:b3:e7:35:44:fe:38:
09:48:b8:9a:e4:60:20:0f:cb:ad:88:89:bc:dd:5c:
6e:70:ef:83:61:54:f5:df:0f:a9:91:31:63:84:00:
c6:37:74:71:b9:70:79:1c:5e:92:fe:dd:67:c2:43:
5e:80:b5:26:91:b0:68:e2:9f:3f:c7:da:da:89:97:
75:83:8a:d7:7d:1b:55:3b:29:49:82:4b:4c:d6:12:
1e:62:1c:43:fb:df:d9:97:3d:f6:b6:df:e8:ec:d8:
e9:8f:ed:49:8b:1d:1b:30:d4:6b:00:c5:0e:36:3d:
3c:6b:22:62:6b:42:df:93:19:31:f3:b1:9d:c7:25:
fb:22:29:4d:63:ec:40:fc:19:4d:3a:7d:7e:4d:ee:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:7A:39:77:B1:89:87:51:42:C3:DF:F0:89:62:53:F1:14:CE:0B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3fa::/48
Signature Algorithm: sha256WithRSAEncryption
a6:15:76:e6:e9:65:96:41:ee:51:74:29:70:0c:86:b6:7c:b5:
54:ae:6d:87:83:44:92:ca:33:8f:3c:ee:8d:f7:22:a4:ba:13:
4e:55:0e:f7:05:0a:88:1e:a4:ad:f4:c3:08:d4:34:a2:79:8c:
e7:44:37:15:e6:0c:f5:32:df:73:d2:52:fc:6e:96:c5:7d:58:
b0:b7:4f:7f:91:e0:6b:8f:f3:3a:84:64:b6:10:0e:86:11:69:
b7:68:48:a4:0e:30:a0:2d:fc:d9:da:c8:c0:6b:1c:1e:e6:2c:
dd:f7:b8:7f:f2:0d:df:4b:55:a7:d4:fa:43:fd:07:a0:49:36:
5b:d4:7e:bf:4b:df:7b:b3:5e:e0:d7:12:c2:30:32:65:92:99:
08:92:aa:02:b9:14:3a:38:6c:67:f8:d9:05:26:94:16:eb:28:
24:df:9a:49:cc:9b:4c:f4:f4:97:ea:01:ac:60:cd:74:b8:a6:
18:fc:8e:bc:b2:4e:bf:d2:10:5f:02:d7:4b:fe:42:34:ae:e2:
fe:91:64:91:09:b1:bd:93:dd:40:46:50:7f:da:71:cf:d8:47:
a6:5b:35:e2:62:d5:0e:03:62:e4:fe:f1:9d:8a:78:55:26:ae:
53:93:10:fd:da:da:19:3c:f6:80:7b:db:60:ff:16:eb:62:07:
0b:b2:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:37 2026 by rpki-client