Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214819.roa
File: AS214819.roa (raw, json)
Hash identifier: F7lsgLLtyp3menq+LfqDdyZdTpB/bunowZVeMpxHvMI=
Subject key identifier: FB:98:5A:18:72:14:C5:4C:BF:CC:E2:73:CD:83:FD:9F:1E:54:E2:EC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6BE00BCFE7C62B9BAED55254FC613FA93027F0A3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214819.roa
Signing time: Fri 29 Aug 2025 01:52:17 +0000
ROA not before: Fri 29 Aug 2025 01:47:17 +0000
ROA not after: Fri 28 Aug 2026 01:52:17 +0000
asID: 214819
IP address blocks: 2a0f:85c1:d34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e0:0b:cf:e7:c6:2b:9b:ae:d5:52:54:fc:61:3f:a9:30:27:f0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:47:17 2025 GMT
Not After : Aug 28 01:52:17 2026 GMT
Subject: CN=FB985A187214C54CBFCCE273CD83FD9F1E54E2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:7a:73:a6:6a:6d:ea:4a:bf:99:f5:d3:ed:
80:db:88:c1:f8:4d:82:f5:6e:b5:91:e4:aa:62:e2:
33:a2:ea:83:5c:70:c5:fd:8e:13:47:b1:25:e5:34:
98:9f:31:50:58:b4:7c:4d:6d:29:f3:b2:aa:0a:73:
c6:4e:fd:8a:ab:e4:54:62:79:02:8b:2c:da:8b:37:
8a:41:46:39:1b:8e:05:3e:10:14:8e:f1:e2:a0:e7:
50:c8:a4:9b:40:d7:de:23:28:f7:a4:fe:3e:54:7a:
3b:80:37:51:4f:af:cc:0f:ee:7c:06:8b:fb:68:72:
ce:c2:49:04:6c:3a:6e:fa:5e:c2:b8:2c:77:59:83:
0e:1a:f0:e9:2d:7c:33:84:bf:b1:ae:48:49:54:74:
a9:8d:4a:12:f8:60:bd:eb:05:63:f8:89:87:7f:7c:
a1:16:18:59:fb:82:11:38:6b:0a:c6:a5:c0:a9:ba:
8a:a3:af:f2:5a:16:08:8b:b9:2d:10:c1:81:46:84:
53:37:af:4e:99:19:93:73:e9:20:aa:b7:e8:bd:56:
2a:a5:6c:31:10:55:d7:2a:36:a8:15:a5:df:99:cd:
da:f6:61:f1:1e:e0:a3:87:d5:65:89:df:e0:e9:9d:
fb:b7:5d:ea:08:a5:7a:9f:7b:9c:57:dd:c4:a8:a6:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:5A:18:72:14:C5:4C:BF:CC:E2:73:CD:83:FD:9F:1E:54:E2:EC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d34::/48
Signature Algorithm: sha256WithRSAEncryption
c8:64:7e:a0:13:1e:94:c0:02:68:c1:be:bf:6c:40:4a:da:1b:
88:5e:7f:0d:14:3c:c3:24:f7:e4:70:b3:63:d4:97:39:b2:fc:
47:79:98:e1:77:5a:7d:91:f0:7e:ce:41:48:70:ff:1f:6c:3b:
b7:b4:47:eb:ea:c2:60:bf:19:b3:4e:e6:da:4c:90:3a:9d:90:
08:b2:8d:39:1f:71:d7:63:49:05:82:66:2b:70:66:cd:be:f7:
00:e5:fc:39:21:ac:61:c5:2b:7b:cd:41:60:a4:17:bf:de:5f:
9e:0e:d2:54:25:52:f5:5b:f6:4e:31:ea:76:9d:77:f9:02:2c:
02:b3:e4:40:ca:e9:9f:6b:d3:12:74:bd:38:13:4c:40:dd:1b:
39:78:3f:3f:cf:56:01:25:6d:fb:ba:37:bb:87:86:e8:61:35:
16:4c:19:d7:02:ea:53:1f:cb:43:b3:81:17:a4:aa:e2:e4:2a:
6d:1c:35:30:1a:87:79:38:a7:3b:18:69:ae:d4:df:4a:5b:ff:
cc:20:0d:94:95:a8:52:72:10:87:9d:8a:68:82:76:4d:a6:4e:
d4:9e:69:de:f2:9e:cc:d5:72:e1:19:53:b4:8f:ab:dc:b0:df:
20:09:c4:91:13:89:8f:4c:a1:53:85:23:79:de:c1:b0:00:e5:
1e:99:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:58:26 2025 by rpki-client