Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214768.roa
File: AS214768.roa (raw, json)
Hash identifier: r8EOqnbfR140vj7hafE8K8+HCTx8fNcLBM5Y4SYELwY=
Subject key identifier: FD:A3:9D:DA:57:21:F7:E0:9D:92:B7:7B:84:18:3F:81:9A:63:B7:40
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5B5782E500027378C067F8D9641BEFB69CDEDF02
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214768.roa
Signing time: Fri 26 Jun 2026 08:08:39 +0000
ROA not before: Fri 26 Jun 2026 08:03:39 +0000
ROA not after: Fri 25 Jun 2027 08:08:39 +0000
asID: 214768
IP address blocks: 2a0f:85c1:3f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:57:82:e5:00:02:73:78:c0:67:f8:d9:64:1b:ef:b6:9c:de:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:39 2026 GMT
Not After : Jun 25 08:08:39 2027 GMT
Subject: CN=FDA39DDA5721F7E09D92B77B84183F819A63B740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:4c:10:08:a1:36:47:17:ec:82:12:da:fc:
9e:f6:60:ce:82:db:69:58:06:e5:6c:8b:c0:0e:40:
f0:b8:6d:a3:67:c8:29:9c:e4:be:cf:f4:d6:29:f8:
6c:b7:a4:87:28:1c:24:28:de:be:d9:d9:1f:60:1e:
64:f2:0f:c8:61:31:ea:a3:e9:f0:70:c8:cb:5e:a7:
9b:11:90:a3:6f:34:d7:ad:9f:b1:85:87:d7:60:f2:
eb:76:d3:3e:26:2b:18:3b:56:af:cf:f9:d0:a6:8c:
64:d9:4e:48:71:f2:89:ea:1e:58:93:6f:a7:11:f6:
5c:1d:07:8a:18:63:03:e2:28:cb:92:25:fb:72:66:
2a:11:2e:e9:b6:5c:d6:28:d0:96:82:07:39:d8:23:
d7:16:ff:2a:49:75:03:a1:c4:b8:a5:87:fd:1e:3e:
e7:5f:89:83:d3:d6:31:e8:12:95:96:0e:77:0c:a0:
29:eb:fb:84:99:3e:ac:fd:43:fc:19:0b:98:65:88:
e7:47:aa:70:0e:ba:e3:15:a2:1d:48:38:e9:ab:cd:
54:f8:b5:da:fd:fe:3b:87:1e:8c:38:86:6c:61:b0:
b3:e3:7b:71:fe:7d:f0:41:68:dd:d3:36:ea:43:19:
b6:1c:1a:5e:ca:38:99:7f:a6:07:93:58:8d:ca:1f:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:9D:DA:57:21:F7:E0:9D:92:B7:7B:84:18:3F:81:9A:63:B7:40
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f1::/48
Signature Algorithm: sha256WithRSAEncryption
af:e3:c2:5a:8e:f0:e6:03:84:d9:18:ee:35:c7:02:70:8f:d6:
0c:d0:32:31:84:59:52:8b:ab:10:67:c6:80:60:fe:59:81:b7:
56:39:ce:18:04:fe:07:9a:6c:3e:a0:d1:20:75:18:32:c3:e0:
a9:c4:cd:8d:a4:6b:da:28:21:31:7a:79:88:4f:f6:ce:a8:2a:
65:81:2e:82:5f:ff:6b:0d:c6:b2:96:88:d3:9d:46:98:20:50:
26:18:ed:c3:84:66:ba:63:63:a2:38:b3:3d:09:c1:32:f4:38:
49:7e:c9:4b:cf:41:23:86:5b:34:ec:27:78:91:c1:38:bb:d9:
cd:6e:13:48:c9:33:d5:0e:d2:64:c6:38:a9:c7:a1:83:d9:87:
e3:07:1e:d3:99:41:00:6d:da:28:2f:00:d7:bc:c3:ff:6c:ad:
a2:48:07:68:50:4a:be:03:97:a4:9d:1e:e3:9f:51:1e:cf:12:
91:ae:ad:0f:e8:e1:ff:c8:d5:9c:11:66:32:36:5e:77:25:68:
ef:53:20:dc:60:5d:49:ce:73:60:d3:ae:36:77:6a:f1:b7:5b:
6b:bc:a0:f4:b9:1a:54:98:35:28:3f:54:a3:85:3b:1e:e0:ff:
90:fa:51:08:6e:d0:35:dc:34:48:1a:11:4e:8d:83:7d:21:4d:
d3:f7:20:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUW1eC5QACc3jAZ/jZZBvvtpze3wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzMzlaFw0yNzA2MjUwODA4MzlaMDMxMTAvBgNV
BAMTKEZEQTM5RERBNTcyMUY3RTA5RDkyQjc3Qjg0MTgzRjgxOUE2M0I3NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+O0wQCKE2RxfsghLa/J72YM6C
22lYBuVsi8AOQPC4baNnyCmc5L7P9NYp+Gy3pIcoHCQo3r7Z2R9gHmTyD8hhMeqj
6fBwyMtep5sRkKNvNNetn7GFh9dg8ut20z4mKxg7Vq/P+dCmjGTZTkhx8onqHliT
b6cR9lwdB4oYYwPiKMuSJftyZioRLum2XNYo0JaCBznYI9cW/ypJdQOhxLilh/0e
PudfiYPT1jHoEpWWDncMoCnr+4SZPqz9Q/wZC5hliOdHqnAOuuMVoh1IOOmrzVT4
tdr9/juHHow4hmxhsLPje3H+ffBBaN3TNupDGbYcGl7KOJl/pgeTWI3KH+MPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU/aOd2lch9+Cdkrd7hBg/gZpjt0AwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NzY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQPxMA0GCSqGSIb3DQEBCwUAA4IBAQCv48JajvDmA4TZGO41xwJwj9YM0DIxhFlS
i6sQZ8aAYP5ZgbdWOc4YBP4Hmmw+oNEgdRgyw+CpxM2NpGvaKCExenmIT/bOqCpl
gS6CX/9rDcaylojTnUaYIFAmGO3DhGa6Y2OiOLM9CcEy9DhJfslLz0Ejhls07Cd4
kcE4u9nNbhNIyTPVDtJkxjipx6GD2YfjBx7TmUEAbdooLwDXvMP/bK2iSAdoUEq+
A5eknR7jn1EezxKRrq0P6OH/yNWcEWYyNl53JWjvUyDcYF1JznNg0642d2rxt1tr
vKD0uRpUmDUoP1SjhTse4P+Q+lEIbtA13DRIGhFOjYN9IU3T9yBd
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:38 2026 by rpki-client