Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214819.roa
File: AS214819.roa (raw, json)
Hash identifier: FFPWVX9Vqf7OwapR2gY4+gz9FS8NNOwBqAOa+9TeQak=
Subject key identifier: BB:C0:1C:93:B8:F7:33:60:27:DA:15:05:09:0D:EF:8E:73:3C:B9:A5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1EB14D78D49E88E57EA1E979574A3C7354B08310
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214819.roa
Signing time: Fri 31 Jul 2026 02:08:59 +0000
ROA not before: Fri 31 Jul 2026 02:03:59 +0000
ROA not after: Fri 30 Jul 2027 02:08:59 +0000
asID: 214819
IP address blocks: 2a0f:85c1:d34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b1:4d:78:d4:9e:88:e5:7e:a1:e9:79:57:4a:3c:73:54:b0:83:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:59 2026 GMT
Not After : Jul 30 02:08:59 2027 GMT
Subject: CN=BBC01C93B8F7336027DA1505090DEF8E733CB9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:09:47:43:88:ed:2b:ff:86:4d:8f:22:dd:
e4:c7:65:15:50:a8:79:ef:10:24:ec:47:99:87:e5:
fb:95:ac:07:16:a2:05:b1:b3:ed:c8:d0:eb:97:90:
49:6c:47:76:e5:f8:4a:ae:1c:17:63:b4:c0:49:3b:
b2:4a:9f:8a:e9:cb:6d:1c:2e:e6:32:e4:09:c6:36:
54:d6:19:f6:5b:49:c3:75:70:b7:b5:19:f5:04:ba:
09:72:59:38:cb:bc:ca:ec:1c:5e:ff:c5:1b:75:cf:
10:55:5b:15:53:cb:e6:6d:bd:93:66:4e:9c:c2:e7:
d9:cd:7e:bb:0b:e2:d7:2c:50:27:2f:d9:41:ad:00:
64:ae:9c:9e:2d:35:e0:b9:d5:ea:92:6b:60:30:b2:
eb:f3:17:9e:7d:91:5f:32:de:54:af:55:72:34:7b:
70:19:5a:35:ee:58:07:3f:7b:21:85:30:bd:64:61:
0d:09:70:b3:3e:57:ec:f0:c0:62:43:ac:a7:11:65:
5e:9d:9c:2c:91:9a:9e:c9:65:2d:13:c6:9b:46:2a:
d9:c4:d4:d6:b7:6d:2e:2d:8b:5d:d3:df:30:36:dd:
e8:3e:a9:4d:df:f4:4f:f2:3b:d5:78:aa:20:3e:e4:
09:e2:87:00:e5:f8:8c:6b:dc:61:84:0e:83:09:1f:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:1C:93:B8:F7:33:60:27:DA:15:05:09:0D:EF:8E:73:3C:B9:A5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d34::/48
Signature Algorithm: sha256WithRSAEncryption
88:f9:67:13:02:ee:ca:c8:f7:4f:bc:d2:aa:83:0d:97:43:fd:
a6:fa:a6:60:1c:29:56:20:9a:1a:f5:d2:e3:6d:c4:96:73:8f:
98:54:0b:fb:cb:70:a4:f7:e0:a5:e7:a0:04:50:f6:08:32:9a:
8e:ca:b0:ae:6d:e2:db:43:64:06:77:46:21:c5:6c:48:d4:24:
f7:86:fb:8c:df:be:89:37:58:98:c0:17:b6:fd:00:3f:f5:3e:
8d:72:c6:01:2b:0e:2b:07:32:4c:eb:7e:76:c4:de:69:33:32:
85:18:53:af:58:e0:1f:e4:58:3e:26:3a:44:4b:cc:81:45:1c:
81:f6:b6:8b:e8:b1:36:3b:35:86:0e:4d:f3:87:0c:62:99:82:
65:d3:b5:2f:cf:65:75:fc:2c:3e:fb:08:dc:06:0e:77:67:77:
90:39:fc:de:c1:0e:79:37:3f:5b:25:25:ea:4f:27:77:bd:fd:
48:94:95:c8:2b:38:94:91:de:55:33:7c:6c:a1:99:ff:58:f3:
a7:f1:57:50:6d:89:5f:10:9a:8d:c2:f0:44:7a:9b:44:be:63:
79:a5:77:82:7d:12:9b:e6:4b:63:52:6a:91:97:e4:58:62:0e:
50:a8:c5:46:b1:eb:dd:89:06:5e:fa:93:38:13:e8:c2:71:80:
7b:7e:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:51 2026 by rpki-client