Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214763.roa
File: AS214763.roa (raw, json)
Hash identifier: 113FhXHW6K9dCUIT5TjT8ZF5LHXdsqTTKpJK7iLqH8U=
Subject key identifier: C4:4F:5B:57:9F:4E:71:9C:21:D7:A4:26:44:DA:63:42:31:0B:D3:A0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5ACE3DB036F503579E4ACE9A3FB9770287D39CE1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214763.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 214763
IP address blocks: 2a0f:85c1:811::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ce:3d:b0:36:f5:03:57:9e:4a:ce:9a:3f:b9:77:02:87:d3:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=C44F5B579F4E719C21D7A42644DA6342310BD3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:db:28:3b:8f:73:69:c7:50:2c:84:9a:7d:
61:48:5c:a0:b1:51:da:b9:d1:d7:a7:6b:a2:f5:2f:
1b:0e:d1:df:a6:b3:43:98:bf:95:bc:27:06:a4:5b:
de:bf:e2:b3:fa:fd:d2:b4:82:09:23:9d:ee:4f:d5:
57:82:80:99:91:9d:df:96:3d:6c:79:89:e1:ce:f1:
47:b0:13:ce:d4:10:ca:37:d1:64:dd:a9:e1:11:9c:
5e:e6:a8:d2:42:c0:2a:6c:73:2f:09:36:97:7f:de:
5c:c8:0f:18:dd:bf:e5:8b:5d:55:9f:68:67:db:2c:
31:60:26:cc:78:17:01:06:26:a4:6f:2e:cd:c3:94:
95:fb:3c:a1:65:26:eb:98:bd:88:1a:8f:ba:ce:9f:
58:b3:fe:41:1d:1a:38:73:d4:0b:e2:ec:29:bb:0d:
9b:de:d7:94:e5:49:a4:41:15:34:0e:06:1c:da:a5:
3e:fc:f7:00:83:8c:d8:fd:ec:a9:eb:6b:13:d9:d3:
cc:be:d9:28:b5:5e:52:f2:61:1f:8a:80:bb:87:98:
63:d1:1b:3b:5d:1b:72:d9:d1:3f:1c:29:1a:d5:d5:
fb:e8:15:c4:6d:d7:bd:de:34:69:57:2e:85:67:58:
19:a0:e2:5d:b9:09:df:2d:8c:99:06:7a:a0:d0:29:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4F:5B:57:9F:4E:71:9C:21:D7:A4:26:44:DA:63:42:31:0B:D3:A0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214763.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:811::/48
Signature Algorithm: sha256WithRSAEncryption
17:d9:f4:7e:98:73:2d:b8:f1:da:c4:34:d0:ff:ed:9f:da:ca:
d0:2c:ed:a8:c9:fb:02:f1:bb:3c:14:59:30:f3:0e:0a:94:ca:
8e:80:6e:2d:19:bc:95:b4:46:d0:db:43:75:80:de:70:95:50:
62:29:09:6e:2a:8b:7a:d7:18:71:a6:36:9b:17:68:b3:66:0a:
c9:14:91:c2:ee:11:69:d8:29:51:fb:f4:2e:f2:ae:f3:da:7b:
b0:7b:de:ae:b2:67:8b:bd:df:80:ad:29:02:5e:30:3e:c3:1d:
bf:6f:32:46:56:4f:e6:4f:95:79:fc:96:6c:58:b2:da:26:8e:
00:bf:ee:bc:2a:57:47:93:cd:11:8c:e0:71:f3:84:0d:07:f7:
62:51:ea:03:20:4a:80:d5:44:8f:d3:f8:82:f5:ca:54:19:6f:
07:8b:31:a3:d2:67:19:5d:52:b4:05:53:35:4f:73:f7:6e:ec:
b9:d1:ff:4b:3e:4c:15:fb:b8:a7:18:96:42:8d:da:24:16:71:
f0:c4:cc:be:2b:a6:50:7e:ba:0a:72:99:ed:7a:72:57:c1:6e:
36:7e:fc:02:e0:fc:50:c2:d7:c0:6f:eb:18:99:41:4e:e5:af:
50:43:78:83:f0:7a:8c:04:b3:ac:c7:b5:ba:45:00:2c:b3:e4:
98:6c:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:04 2026 by rpki-client