Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214832.roa
File: AS214832.roa (raw, json)
Hash identifier: T7JC2gx+vPacFwIqSTT54p+g/iSNgBLx4FATUTz6laY=
Subject key identifier: 58:F6:3F:A5:70:9B:92:98:B3:0E:BC:A4:4B:E8:47:C4:3A:61:44:7A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 371D16EC1F246778069C6A85BC67A3A4C85CFE71
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214832.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 214832
IP address blocks: 2a0f:85c1:805::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1d:16:ec:1f:24:67:78:06:9c:6a:85:bc:67:a3:a4:c8:5c:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=58F63FA5709B9298B30EBCA44BE847C43A61447A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:38:ec:e7:eb:fc:57:72:4c:10:65:49:10:
75:9b:8a:e6:21:fd:d7:c1:8b:86:f0:e9:19:83:18:
34:33:07:1d:17:00:bc:cc:f9:c7:54:61:4c:3d:4e:
56:6c:83:c6:68:f2:ed:34:89:4e:ee:be:e8:e0:96:
1a:a5:e8:7f:07:f3:31:68:78:58:bc:1e:65:54:60:
7f:18:2f:74:16:c8:27:6c:7b:ec:7d:30:79:59:d6:
9d:78:ca:89:9b:f1:9c:cf:7b:11:ea:3b:5f:96:8d:
8c:69:97:37:ac:92:05:cf:ab:e3:d5:e4:37:72:95:
71:c6:f3:62:61:8d:2e:24:87:6f:22:b5:aa:24:e1:
0a:32:2d:d0:cc:87:92:b8:34:ab:ed:f0:af:8f:71:
1f:f2:0f:2a:5f:0a:33:c1:10:73:b4:ae:5b:d7:8f:
67:40:e5:29:60:28:f2:16:89:a9:4c:34:fc:4b:1e:
ed:e2:d3:57:dc:d4:cd:06:d8:6b:05:ef:dc:9b:2b:
f4:0b:10:a6:ab:72:f7:06:9e:93:de:97:7d:68:8c:
13:c2:cd:2f:a2:d9:bb:19:ec:61:fa:ac:3a:40:65:
6b:d3:0d:56:84:a8:45:1e:7b:c9:fa:28:97:ac:cc:
dd:85:54:a7:8f:cd:34:6d:9d:78:9f:d7:71:07:78:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:3F:A5:70:9B:92:98:B3:0E:BC:A4:4B:E8:47:C4:3A:61:44:7A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:805::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f4:69:8d:ed:f4:2f:27:a2:e4:05:d0:59:30:13:4f:f9:b6:
84:e5:f8:c4:87:4a:48:d3:02:03:57:f4:f1:6d:20:e5:f6:dd:
f3:a9:6a:aa:72:04:44:a5:53:b8:28:bc:53:a8:60:81:db:7a:
41:34:23:fe:5e:74:42:08:9f:45:cc:74:82:9f:29:81:56:0f:
b3:3f:b4:1d:d7:46:91:9f:5d:4b:1f:e1:db:63:81:4b:b5:75:
50:18:9a:7c:60:24:72:0f:12:71:e9:c7:a3:08:dd:34:18:1c:
0f:be:e3:99:72:80:af:68:c5:c6:9b:62:c0:87:cf:7d:8c:d5:
1a:bf:33:a4:ae:8f:d2:a0:bf:79:a6:75:78:f9:09:64:76:ee:
36:5e:62:ab:a5:a0:19:d7:9d:d7:68:82:61:18:dd:3f:a4:48:
f5:b2:d8:c1:a7:ff:e0:fe:eb:6f:2f:e3:3e:c8:8e:97:b5:a4:
bb:a4:77:17:39:51:82:09:ff:52:c4:d9:bf:94:9c:36:5e:80:
ba:05:53:47:14:43:86:26:8c:44:99:99:da:2d:fa:f6:3e:d3:
5d:e8:51:c4:23:68:65:dc:7f:dd:3e:a0:d2:ab:b1:6f:8a:a5:
15:b6:cf:00:a5:d6:c5:2a:61:53:d3:c2:03:06:2b:b7:b3:0a:
9c:fb:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:39 2026 by rpki-client