Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214681.roa
File: AS214681.roa (raw, json)
Hash identifier: 4nXKOAMQty6TpRBhJfNBSG/UrjayQfUtPqUcNSSM2RY=
Subject key identifier: 48:92:7D:C1:D3:89:17:BF:76:21:09:C9:BC:EF:80:47:55:7F:FF:69
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0E79F90D82FE1A4667C611AF731EE61102CC207C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214681.roa
Signing time: Fri 26 Jun 2026 08:08:40 +0000
ROA not before: Fri 26 Jun 2026 08:03:40 +0000
ROA not after: Fri 25 Jun 2027 08:08:40 +0000
asID: 214681
IP address blocks: 2a0f:85c1:81e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:79:f9:0d:82:fe:1a:46:67:c6:11:af:73:1e:e6:11:02:cc:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:40 2026 GMT
Not After : Jun 25 08:08:40 2027 GMT
Subject: CN=48927DC1D38917BF762109C9BCEF8047557FFF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:50:6b:85:a1:ed:ee:6b:c9:06:65:44:f4:
65:b0:2c:bf:b8:1e:d0:e5:83:1f:a5:4c:fb:92:5a:
de:2a:5d:7e:7a:04:50:17:ba:57:c9:bc:50:e6:57:
19:84:9d:57:46:5f:74:35:dc:7d:33:49:b7:91:59:
78:a3:9d:94:2b:18:0d:5a:84:56:6e:05:b6:39:53:
31:c4:67:2a:7f:1e:9b:6b:5f:05:ee:05:20:92:e9:
f6:23:ec:3a:4c:22:cf:f3:10:fe:43:31:8b:e2:a7:
21:e4:ae:80:d9:51:f0:0b:65:f4:25:77:1b:d1:41:
43:c2:bd:0c:e0:cc:1f:22:c4:90:b3:7e:e1:74:b4:
7b:93:37:7c:6c:76:d4:93:04:81:d3:39:ea:c6:94:
8a:78:a3:73:30:4a:cd:bd:d9:74:19:e4:d5:89:fe:
77:d8:76:94:cd:3b:f6:49:c1:7a:42:d0:f0:c4:aa:
9a:d4:9d:10:f3:93:da:6c:30:fe:9d:91:91:38:a2:
73:6c:39:e3:92:33:b7:4e:2b:d3:e3:3e:f9:10:a4:
ce:c8:c9:56:9b:93:83:ab:cd:97:e0:50:58:3d:30:
46:35:f0:b5:f9:52:64:0a:d4:88:c2:50:54:d6:a7:
fd:6d:fa:45:f3:93:57:c1:4b:79:9d:61:f9:fe:ee:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:7D:C1:D3:89:17:BF:76:21:09:C9:BC:EF:80:47:55:7F:FF:69
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:81e::/48
Signature Algorithm: sha256WithRSAEncryption
4b:89:d4:b2:dc:b7:1d:e5:ae:41:d2:c2:6d:d5:4b:c3:fc:52:
45:3a:57:64:4a:6b:87:54:73:8e:57:9a:b2:a8:45:08:fa:18:
01:db:f8:c8:62:67:c9:80:a4:c9:9d:87:49:1d:2a:27:c7:7f:
27:73:28:71:a1:74:9e:ed:c1:05:e8:f8:24:2a:45:a2:62:4d:
35:df:db:94:b4:93:0a:7d:fe:29:86:02:fd:c0:43:cd:08:00:
23:52:cb:fb:a6:dd:a8:e2:8e:df:0c:09:be:33:e5:8e:aa:e7:
44:53:67:b8:ac:df:dd:45:0a:a6:01:dc:37:7a:36:eb:5b:ac:
67:16:75:67:a1:7f:96:cf:3f:d5:72:ff:3f:a5:b4:22:35:76:
c4:a5:38:71:e6:f6:0f:e6:5a:35:1e:79:59:94:dd:7f:d0:61:
f5:d2:bb:9b:88:0a:7b:89:d0:fb:fb:99:05:72:4c:b9:72:f6:
29:7f:39:0e:c0:c7:84:d4:8b:fb:47:fb:b3:a2:0d:fb:f3:e8:
75:3b:9d:ae:ac:4d:a1:53:ce:73:8b:8a:6a:34:28:8f:d6:7c:
d3:3a:c3:92:56:86:c6:7b:67:e7:6e:2f:9c:53:fa:de:53:98:
32:e9:aa:ba:c6:e7:5d:86:df:6e:3d:5c:6d:6d:f4:06:c2:18:
b8:ca:5f:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUDnn5DYL+GkZnxhGvcx7mEQLMIHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDBaFw0yNzA2MjUwODA4NDBaMDMxMTAvBgNV
BAMTKDQ4OTI3REMxRDM4OTE3QkY3NjIxMDlDOUJDRUY4MDQ3NTU3RkZGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TlBrhaHt7mvJBmVE9GWwLL+4
HtDlgx+lTPuSWt4qXX56BFAXulfJvFDmVxmEnVdGX3Q13H0zSbeRWXijnZQrGA1a
hFZuBbY5UzHEZyp/HptrXwXuBSCS6fYj7DpMIs/zEP5DMYvipyHkroDZUfALZfQl
dxvRQUPCvQzgzB8ixJCzfuF0tHuTN3xsdtSTBIHTOerGlIp4o3MwSs292XQZ5NWJ
/nfYdpTNO/ZJwXpC0PDEqprUnRDzk9psMP6dkZE4onNsOeOSM7dOK9PjPvkQpM7I
yVabk4OrzZfgUFg9MEY18LX5UmQK1IjCUFTWp/1t+kXzk1fBS3mdYfn+7kONAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUSJJ9wdOJF792IQnJvO+AR1V//2kwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NjgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgeMA0GCSqGSIb3DQEBCwUAA4IBAQBLidSy3Lcd5a5B0sJt1UvD/FJFOldkSmuH
VHOOV5qyqEUI+hgB2/jIYmfJgKTJnYdJHSonx38ncyhxoXSe7cEF6PgkKkWiYk01
39uUtJMKff4phgL9wEPNCAAjUsv7pt2o4o7fDAm+M+WOqudEU2e4rN/dRQqmAdw3
ejbrW6xnFnVnoX+Wzz/Vcv8/pbQiNXbEpThx5vYP5lo1HnlZlN1/0GH10rubiAp7
idD7+5kFcky5cvYpfzkOwMeE1Iv7R/uzog378+h1O52urE2hU85zi4pqNCiP1nzT
OsOSVobGe2fnbi+cU/reU5gy6aq6xuddht9uPVxtbfQGwhi4yl9b
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:45 2026 by rpki-client