Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214825.roa
File: AS214825.roa (raw, json)
Hash identifier: /zVX2rpxiHTeiF1kilxAo+aexuh5+UaaR2yDgmjtBzQ=
Subject key identifier: C3:E0:EB:F5:A1:D7:26:28:37:50:66:AE:84:65:9D:0F:7C:3E:7D:3C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 666B649333DE9788B22D16586030E39F44F3A299
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214825.roa
Signing time: Fri 31 Jul 2026 02:08:58 +0000
ROA not before: Fri 31 Jul 2026 02:03:58 +0000
ROA not after: Fri 30 Jul 2027 02:08:58 +0000
asID: 214825
IP address blocks: 2a0f:85c1:cec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6b:64:93:33:de:97:88:b2:2d:16:58:60:30:e3:9f:44:f3:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:58 2026 GMT
Not After : Jul 30 02:08:58 2027 GMT
Subject: CN=C3E0EBF5A1D72628375066AE84659D0F7C3E7D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:70:a8:11:e4:69:53:28:eb:ea:71:7d:a4:
07:66:02:e4:f4:14:44:af:91:86:4f:07:af:f9:6a:
c9:77:a4:ca:72:aa:56:66:66:22:24:11:81:b6:b9:
12:0c:68:a5:5c:96:9e:18:d6:bc:8f:5e:4a:da:27:
83:d1:67:8e:2e:33:9d:77:3f:43:fb:a4:b7:27:19:
96:6c:a5:b0:cf:a7:42:73:bd:f4:e7:c8:dc:07:cf:
42:47:95:88:73:f3:e1:fa:b6:56:c8:0e:94:b7:9e:
72:d2:2e:b9:8a:74:6a:23:a5:96:9f:7a:94:f4:6f:
30:19:32:a7:46:4b:ee:a6:03:f7:58:64:49:b6:2c:
1f:67:b8:ba:f2:6b:82:71:db:4e:96:83:e2:44:14:
5f:fb:9b:e3:9f:67:f6:e2:3b:aa:ed:63:e3:74:a9:
e8:0e:fd:4b:95:5e:62:70:2c:ef:c2:30:36:75:a2:
20:6f:26:95:2b:d7:a5:92:8d:db:92:a8:81:ae:51:
f8:45:9e:20:09:0a:4e:bc:27:fa:cc:d4:57:39:d6:
f2:2d:c2:ba:76:4f:32:96:62:91:ce:e6:45:87:05:
4f:e9:14:f4:03:64:bb:72:91:c8:98:40:70:fc:61:
2d:6c:b4:d0:ae:83:f0:94:a6:96:be:24:07:01:97:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:EB:F5:A1:D7:26:28:37:50:66:AE:84:65:9D:0F:7C:3E:7D:3C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cec::/48
Signature Algorithm: sha256WithRSAEncryption
34:4d:c1:c8:c6:04:56:69:0a:ca:6a:83:0f:b3:9d:51:dc:e7:
fc:08:a2:56:ed:00:52:65:55:41:54:c7:a9:af:b2:05:b2:13:
8a:9b:b5:fb:57:bd:48:8c:29:6a:93:27:75:54:fa:27:f1:07:
bb:9d:71:1a:3f:74:63:05:e9:02:cd:25:8b:ef:ec:1f:88:b8:
6a:60:c4:3b:c3:98:c1:b1:8e:ce:75:e7:1d:e1:69:af:2b:d1:
f2:54:7c:3a:01:b4:5e:fc:1a:c1:f0:18:d5:1d:ad:83:20:76:
18:08:28:1a:ac:9c:ff:5f:e0:d4:3f:4e:b7:c8:9b:61:2c:4f:
b4:01:86:56:17:10:54:59:32:39:15:6b:ad:5a:94:4a:2c:ad:
bb:09:89:15:3f:b0:d9:24:ab:f0:df:d9:1b:52:5f:15:16:f0:
d5:e5:aa:10:b8:2c:00:76:93:39:b2:c2:d1:0c:d7:9f:98:50:
b8:a0:6e:61:89:75:76:3a:47:46:19:4a:8e:b3:a2:d0:7d:3a:
f9:f5:e5:77:00:14:f0:f3:ee:91:f1:d5:fe:95:5e:e1:7f:c5:
50:e7:9b:7a:17:80:e5:4b:e4:7e:a2:0e:ce:10:93:3b:e0:4e:
95:fe:d2:ed:cc:b3:59:1d:5b:e0:eb:ba:6f:f4:bf:cc:1e:78:
7d:19:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:57 2026 by rpki-client