Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
File: AS214676.roa (raw, json)
Hash identifier: 8p/h1Xl3tkfO0gCYQ/JQNcj6jGE18k16d1DSL0m8458=
Subject key identifier: 04:EC:C9:45:DD:35:ED:69:53:CF:0D:0F:96:FF:B2:B0:31:D1:5D:F3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5590BF0CD7D06974AB0FB75C4048B0C64D35E8F8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 214676
IP address blocks: 2a0f:85c1:81b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:90:bf:0c:d7:d0:69:74:ab:0f:b7:5c:40:48:b0:c6:4d:35:e8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=04ECC945DD35ED6953CF0D0F96FFB2B031D15DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:3e:7e:60:47:46:aa:7e:92:19:d9:fb:6e:
31:c6:87:f5:ba:85:e4:16:63:b4:92:d7:27:87:14:
dd:01:de:fc:aa:c9:8c:7e:d5:16:e8:38:8c:5a:61:
30:53:fa:8c:45:04:af:09:d5:d5:f0:58:65:a4:2c:
0e:ce:67:2f:c0:5c:8a:7d:5b:62:a6:47:d8:40:02:
39:1b:ec:44:42:79:96:92:23:23:68:68:1b:1e:e5:
a7:2f:39:27:46:aa:b5:fe:81:96:e6:ba:19:48:11:
94:44:1c:c3:d3:35:02:c3:6a:84:9f:d0:e5:ef:89:
aa:83:a4:7f:8c:ab:47:96:00:b9:a7:09:28:18:b2:
7f:f0:34:f9:e1:a1:25:83:fa:d1:0c:dd:6e:ad:ff:
fe:23:92:6b:3b:6d:0d:9c:15:35:07:b4:72:d8:0e:
7e:10:ad:ae:c5:ab:d8:c3:e4:77:79:de:66:8a:aa:
30:7c:21:69:cf:69:af:b5:bd:b4:d1:43:5a:39:bb:
91:10:95:7a:ad:48:a2:c8:84:4c:22:b6:f3:0b:54:
b7:dc:70:5c:32:35:01:31:51:a1:1b:1a:9f:d6:b5:
e4:01:0c:0e:79:26:c2:d2:e3:58:b0:a9:d2:ed:7c:
e4:b9:9f:ec:48:ee:f4:40:fa:07:ef:ba:e0:26:e4:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:C9:45:DD:35:ED:69:53:CF:0D:0F:96:FF:B2:B0:31:D1:5D:F3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:81b::/48
Signature Algorithm: sha256WithRSAEncryption
d4:f5:33:f1:f9:ee:37:00:ee:64:55:43:99:08:df:6e:83:8f:
f0:0c:df:50:55:74:9e:02:3e:21:94:c2:e4:bf:14:09:96:22:
96:2f:48:e8:b6:cf:44:c4:92:3b:cf:cb:57:36:4d:b8:7f:70:
34:c1:77:fd:0d:68:1c:43:f9:40:51:55:31:53:d8:ab:31:61:
dd:a4:aa:59:68:09:bf:59:6b:06:b1:71:30:a1:11:9c:ef:a2:
53:15:46:d0:a3:03:bd:5e:78:2c:9b:3c:dd:d0:cd:7c:bc:58:
0a:29:4b:48:ab:3f:f1:91:4c:3d:b8:87:27:38:30:29:00:fe:
51:8c:85:89:94:e9:67:82:2d:c9:b1:ee:fb:c9:8e:fa:ba:1c:
a0:8f:85:3e:76:10:69:5b:1a:e1:fd:64:0e:8d:41:89:1d:14:
7c:56:f4:ad:a9:37:74:27:45:27:3a:9b:4a:e7:16:f4:a3:b5:
54:b0:fe:ba:25:3e:77:69:4f:d8:d1:7d:db:90:6e:b5:a1:ea:
09:cd:78:38:d0:0c:5f:a1:4f:7b:cd:69:7e:ba:10:47:41:91:
b0:c4:62:f3:df:9f:21:68:ac:dd:6b:f5:fd:b2:72:13:5f:97:
00:5d:0d:2e:6b:7a:ae:41:8f:5a:93:09:6c:5b:e3:d7:d2:45:
e6:56:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:41:47 2026 by rpki-client