Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
File: AS214751.roa (raw, json)
Hash identifier: yZi+UrMU7lgA2FXStWv+aXXdNxOz+cBjUI4mS01U8Co=
Subject key identifier: 08:F4:69:5E:1C:3A:80:69:9C:E3:36:A6:7A:2D:45:8A:93:78:5D:F8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 61BBE4B9FE0BBA43DFD9EEFFF6C67E0A8BB44F11
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
Signing time: Fri 26 Jun 2026 08:08:42 +0000
ROA not before: Fri 26 Jun 2026 08:03:42 +0000
ROA not after: Fri 25 Jun 2027 08:08:42 +0000
asID: 214751
IP address blocks: 2a0f:85c1:813::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bb:e4:b9:fe:0b:ba:43:df:d9:ee:ff:f6:c6:7e:0a:8b:b4:4f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:42 2026 GMT
Not After : Jun 25 08:08:42 2027 GMT
Subject: CN=08F4695E1C3A80699CE336A67A2D458A93785DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:60:95:ce:0f:0f:6b:0c:7f:87:5d:5a:50:
0a:ea:2a:67:30:26:d2:32:91:4b:5b:54:6e:7f:52:
8c:54:5e:2a:b3:01:71:9b:fc:e2:0c:dc:70:71:fe:
36:4d:f8:1e:dd:c9:a9:6b:44:e0:a3:9e:53:12:78:
de:9a:8f:84:20:ae:02:b8:a9:d4:23:cf:0c:12:dc:
29:fc:9e:5c:0d:56:67:66:87:09:d0:81:9c:f0:f6:
ab:82:c1:e0:c4:f0:bb:ac:56:7d:c3:38:99:70:bb:
33:ce:23:5c:08:df:98:c7:e3:ad:12:b0:45:9c:18:
ff:a6:9b:d5:72:1d:b5:47:a6:d8:1d:ff:b9:ad:e3:
4b:35:bf:d0:5e:70:22:63:42:13:03:9b:1d:e4:40:
c5:78:43:c7:13:18:16:4e:80:cd:bc:bf:e6:65:3a:
44:c7:75:5a:f0:37:9c:cb:20:6d:a0:97:23:aa:ab:
52:34:84:ac:db:71:d0:d7:c3:09:38:92:ec:f9:cc:
a0:5e:b0:b9:05:98:c6:3e:97:28:37:9c:9f:9c:46:
3f:8a:b0:35:0b:e9:16:d7:6b:07:ab:6e:a0:a9:63:
65:86:97:79:08:a7:77:67:4d:bb:8d:e0:9f:bc:d4:
20:80:66:39:2b:7c:f9:72:5e:e2:36:b3:30:db:1f:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:69:5E:1C:3A:80:69:9C:E3:36:A6:7A:2D:45:8A:93:78:5D:F8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:813::/48
Signature Algorithm: sha256WithRSAEncryption
57:12:d9:1e:70:9f:15:d7:0e:52:f7:3c:d8:24:93:a2:74:46:
0f:50:a8:8f:b7:56:2a:1f:c0:73:ef:c3:97:0b:22:a1:5c:92:
00:9c:a6:82:9d:b2:bc:c9:02:95:44:f3:aa:5c:6e:73:74:bf:
50:4e:3e:cc:db:34:e8:02:f7:39:c9:34:1a:57:77:ed:37:9d:
bf:fb:26:f6:66:6f:71:19:20:27:3f:7d:de:18:0b:d5:92:f9:
9e:fc:35:25:c2:d3:17:28:e7:59:ba:fe:80:38:32:0b:e3:d1:
17:9f:3a:7d:f5:d3:26:3f:2a:6f:bc:33:d8:fd:3f:66:ce:d5:
45:65:d5:0c:7d:48:9c:2d:dc:66:00:a2:bb:8d:13:55:b8:7d:
6e:20:be:22:a7:5c:46:7e:f9:ff:50:03:54:10:2c:a5:d8:1d:
1f:22:28:56:7f:f6:de:8f:dc:bb:13:08:9b:6b:dc:f3:a9:62:
76:bc:08:47:d8:eb:11:6a:73:79:74:c4:e9:dc:54:ee:67:ff:
cd:16:de:ea:3e:a7:f7:5f:ec:2b:e9:93:fa:37:1b:4c:a7:a2:
9b:aa:2e:37:1d:2f:85:82:63:30:eb:ea:fc:71:78:eb:46:3b:
33:23:10:61:26:95:c0:ce:87:3c:d0:1d:01:96:2b:c2:46:06:
24:e0:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:07 2026 by rpki-client