Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
File: AS214818.roa (raw, json)
Hash identifier: OPgN4Ga/dbz8GyafVL13CWyIJ5kxiNpT17bnuNZxkL0=
Subject key identifier: 6E:E5:86:2F:A7:07:2D:7E:67:86:50:C3:9A:A4:79:32:46:19:53:6F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 201B15BB4485034D0FA872AB9D2557DDD7D833E2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
Signing time: Fri 26 Jun 2026 08:08:45 +0000
ROA not before: Fri 26 Jun 2026 08:03:45 +0000
ROA not after: Fri 25 Jun 2027 08:08:45 +0000
asID: 214818
IP address blocks: 2a0f:85c1:808::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1b:15:bb:44:85:03:4d:0f:a8:72:ab:9d:25:57:dd:d7:d8:33:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:45 2026 GMT
Not After : Jun 25 08:08:45 2027 GMT
Subject: CN=6EE5862FA7072D7E678650C39AA479324619536F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:73:56:66:f6:fe:00:f5:b2:aa:9c:fb:4d:
70:0a:50:b7:ec:f9:ac:36:51:4d:e2:82:15:d3:3b:
8a:22:99:7f:cc:47:18:d1:50:ef:30:a3:49:2d:c5:
8c:2b:00:7f:6e:b9:7c:fe:59:84:70:71:98:c7:10:
ca:b9:18:b7:d2:8b:56:49:b8:33:ca:28:ae:60:05:
37:da:da:3a:fe:e7:e0:f3:7b:90:26:7b:7c:9e:26:
0a:2e:e7:8a:e1:40:6f:b6:38:00:c2:d9:c8:cd:9f:
fc:6d:2c:e1:4d:b0:d4:10:9e:7e:df:f5:d8:44:ad:
1c:35:55:71:da:d7:9d:b8:e9:d3:27:86:28:ca:ca:
1c:08:2c:12:dc:eb:a3:c3:c3:d2:3c:ce:ed:75:44:
36:9e:98:49:a1:85:58:35:07:e3:8c:c8:dc:75:15:
09:8c:11:55:f0:5e:00:dc:69:47:62:d6:f6:7c:d2:
16:96:be:8c:52:55:a0:fd:65:df:a2:f6:32:88:3e:
83:55:f4:15:e1:7a:13:6b:d1:46:b2:5b:47:d4:84:
3d:9d:71:40:f2:34:b6:80:1f:dd:5a:3d:5b:17:82:
17:09:79:af:a3:57:69:a4:27:63:16:d6:f6:3b:ac:
27:0d:28:5b:13:b1:85:d8:6c:a0:c3:48:1c:3b:23:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:86:2F:A7:07:2D:7E:67:86:50:C3:9A:A4:79:32:46:19:53:6F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:808::/48
Signature Algorithm: sha256WithRSAEncryption
20:d5:6d:03:1e:cc:3f:5e:b2:7e:20:c4:8f:be:39:57:fb:bb:
5f:e3:7a:47:32:a3:96:a3:97:61:46:50:44:a9:59:b9:12:6a:
7f:d1:3c:32:46:d3:ec:64:59:d2:79:fb:e6:3d:88:43:1e:34:
19:41:24:c9:55:03:7d:db:bc:8e:09:e9:2d:a9:bd:a2:fc:13:
d9:f8:9b:3b:18:94:98:16:8d:1a:ea:ba:e6:29:d1:36:8c:65:
bf:5c:a6:5b:82:fd:d1:f7:d1:9c:5d:5f:7e:dc:3f:e5:a2:23:
69:f4:6f:e8:53:77:d8:c9:88:93:00:d7:d2:26:0d:7c:65:63:
58:a6:7b:15:68:72:d2:ff:70:36:b0:d7:72:89:5a:1d:af:7d:
09:be:0e:33:75:88:12:6b:d0:83:e4:10:8f:7f:45:88:7f:de:
1d:1a:40:b5:3d:59:be:bf:b6:dd:ff:39:cc:5a:6f:61:ba:da:
56:fe:40:1e:8f:c9:50:fe:9c:15:b8:91:b8:56:24:b0:c6:ff:
6f:2a:c6:63:c1:b0:66:6d:f4:a6:f1:f3:16:16:1d:b2:8e:d4:
dd:13:a6:94:fd:86:d9:ce:34:20:e6:7a:12:e5:c2:bb:f5:e0:
a1:87:e3:4e:86:8c:4b:e6:74:ae:d4:f1:e9:83:07:62:f5:88:
32:f6:1f:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUIBsVu0SFA00PqHKrnSVX3dfYM+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDVaFw0yNzA2MjUwODA4NDVaMDMxMTAvBgNV
BAMTKDZFRTU4NjJGQTcwNzJEN0U2Nzg2NTBDMzlBQTQ3OTMyNDYxOTUzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXnNWZvb+APWyqpz7TXAKULfs
+aw2UU3ighXTO4oimX/MRxjRUO8wo0ktxYwrAH9uuXz+WYRwcZjHEMq5GLfSi1ZJ
uDPKKK5gBTfa2jr+5+Dze5Ame3yeJgou54rhQG+2OADC2cjNn/xtLOFNsNQQnn7f
9dhErRw1VXHa15246dMnhijKyhwILBLc66PDw9I8zu11RDaemEmhhVg1B+OMyNx1
FQmMEVXwXgDcaUdi1vZ80haWvoxSVaD9Zd+i9jKIPoNV9BXhehNr0UayW0fUhD2d
cUDyNLaAH91aPVsXghcJea+jV2mkJ2MW1vY7rCcNKFsTsYXYbKDDSBw7I1WLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUbuWGL6cHLX5nhlDDmqR5MkYZU28wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0ODE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgIMA0GCSqGSIb3DQEBCwUAA4IBAQAg1W0DHsw/XrJ+IMSPvjlX+7tf43pHMqOW
o5dhRlBEqVm5Emp/0TwyRtPsZFnSefvmPYhDHjQZQSTJVQN927yOCektqb2i/BPZ
+Js7GJSYFo0a6rrmKdE2jGW/XKZbgv3R99GcXV9+3D/loiNp9G/oU3fYyYiTANfS
Jg18ZWNYpnsVaHLS/3A2sNdyiVodr30Jvg4zdYgSa9CD5BCPf0WIf94dGkC1PVm+
v7bd/znMWm9hutpW/kAej8lQ/pwVuJG4ViSwxv9vKsZjwbBmbfSm8fMWFh2yjtTd
E6aU/YbZzjQg5noS5cK79eChh+NOhoxL5nSu1PHpgwdi9Ygy9h/t
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:36 2026 by rpki-client