Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214825.roa
File: AS214825.roa (raw, json)
Hash identifier: 1o6YmV6WJcZIZL5tZdq/1L/0EJ0RpYDBjrhTxgw86A0=
Subject key identifier: 0E:EB:0F:E7:7C:A1:EF:9F:24:76:3D:68:17:96:D0:28:3F:ED:50:25
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4F1329FBE98245C80D0FBF8D1450FCFA39AD739C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214825.roa
Signing time: Fri 29 Aug 2025 01:52:03 +0000
ROA not before: Fri 29 Aug 2025 01:47:03 +0000
ROA not after: Fri 28 Aug 2026 01:52:03 +0000
asID: 214825
IP address blocks: 2a0f:85c1:cec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:13:29:fb:e9:82:45:c8:0d:0f:bf:8d:14:50:fc:fa:39:ad:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 29 01:47:03 2025 GMT
Not After : Aug 28 01:52:03 2026 GMT
Subject: CN=0EEB0FE77CA1EF9F24763D681796D0283FED5025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:22:95:4e:ef:d1:b0:b6:05:c0:ce:7c:79:
80:b8:4f:f3:5e:0e:c4:25:47:db:de:c0:c1:4f:ca:
1d:61:1a:00:e8:3e:05:49:2a:f5:00:45:1a:30:42:
5e:9d:12:fa:c5:e5:dc:b6:2b:5b:f5:19:d2:4a:61:
20:6c:8c:bc:8c:d0:a7:f6:19:86:3e:11:10:e6:b2:
d7:71:ea:f0:2c:13:71:6d:03:21:55:16:39:28:16:
f3:b5:04:d0:8b:5e:c7:60:79:98:89:8b:81:3c:57:
fc:5c:80:5b:6d:1a:14:06:af:f7:25:47:61:cc:8c:
0a:62:42:99:2c:8f:c7:ad:76:a9:5e:03:d4:a5:2d:
ac:22:fe:e9:53:27:fe:9b:be:5d:aa:97:96:3c:80:
b3:7a:0d:10:dd:29:37:83:52:ab:2c:36:c7:9b:39:
e4:9c:41:be:90:bb:2d:9f:d3:4e:b2:12:4b:f0:19:
68:60:27:eb:c8:a1:5a:6c:23:f0:da:66:83:57:a7:
aa:39:d6:81:fb:ec:db:3a:47:a6:be:d2:84:c8:88:
6d:78:3b:a2:ba:86:6d:28:32:bf:90:99:87:39:e5:
b5:58:35:fb:6d:c1:e1:ac:f9:99:34:35:53:7c:18:
c3:5c:f6:f2:55:b0:f3:ea:c8:b3:f7:de:81:65:95:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:0F:E7:7C:A1:EF:9F:24:76:3D:68:17:96:D0:28:3F:ED:50:25
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cec::/48
Signature Algorithm: sha256WithRSAEncryption
7c:7b:39:ba:7a:f8:09:f5:a2:33:78:58:45:db:4e:af:fe:1a:
98:09:70:2e:8e:4c:c9:7d:0c:03:a4:83:a0:30:5b:3c:16:c1:
2b:2d:bb:4b:a4:fc:83:9e:1f:fc:3c:03:16:dc:dc:eb:ed:5f:
77:15:ea:09:09:ff:09:b3:ad:bc:a1:5c:92:f4:74:47:4e:d8:
d9:eb:d4:db:b8:45:3a:ba:69:09:55:5f:52:95:60:84:ad:2c:
53:a2:32:31:2f:cc:e4:88:53:fb:61:00:f9:06:63:a5:e7:ac:
cf:d9:d1:fd:6c:09:41:f6:d8:03:6b:0c:c8:36:ea:48:46:af:
ef:42:d6:4d:21:da:ee:ea:3a:ff:cf:e7:88:1c:fa:bb:5a:ab:
e4:45:45:1a:35:42:a5:92:da:6f:e3:6c:f4:b4:70:38:69:7a:
43:95:ca:21:1e:53:f8:3f:93:e4:42:ce:76:3e:2c:a1:43:2d:
14:54:05:8f:51:52:9c:55:6c:8e:cb:12:8d:3b:f8:79:83:d7:
cd:0a:3b:28:ae:04:25:94:3c:43:ad:38:ff:78:4f:b0:c9:cc:
5c:06:08:b1:c9:f5:75:a6:d8:a6:98:84:e4:45:92:e1:c3:4a:
14:f2:7f:78:d4:d0:1e:76:4a:7c:97:f0:ba:6d:83:ba:93:fc:
0d:b4:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:00:47 2025 by rpki-client