Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214862.roa
File: AS214862.roa (raw, json)
Hash identifier: 8gWc5+of3m7CiiRqjc+duhYori9VQ7Tt3fK5Fkou8/Q=
Subject key identifier: 5B:53:D9:7C:96:72:90:7B:C6:68:D7:E6:7F:3D:CE:EE:02:9F:C5:DD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3DE249B3B8D049846F97F9ECF7332342FF1CB3CB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214862.roa
Signing time: Fri 26 Jun 2026 08:08:47 +0000
ROA not before: Fri 26 Jun 2026 08:03:47 +0000
ROA not after: Fri 25 Jun 2027 08:08:47 +0000
asID: 214862
IP address blocks: 2a0f:85c1:3fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e2:49:b3:b8:d0:49:84:6f:97:f9:ec:f7:33:23:42:ff:1c:b3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:47 2026 GMT
Not After : Jun 25 08:08:47 2027 GMT
Subject: CN=5B53D97C9672907BC668D7E67F3DCEEE029FC5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:ee:9c:36:cd:0e:90:52:d0:bd:ec:a6:88:
21:dc:48:15:44:c2:a3:7e:8e:92:09:88:ea:13:da:
3f:1f:83:97:3a:69:2c:66:0e:62:cc:58:cd:4b:c1:
7c:df:c6:e1:42:eb:c8:c6:21:8b:a0:fe:06:8c:64:
6a:d8:c9:1c:ea:b6:08:39:9b:20:cf:d9:32:a9:b5:
f5:b0:78:a3:02:2d:f4:6f:9d:55:e5:c1:df:f6:48:
0c:cf:81:53:98:31:23:31:74:61:1d:52:2d:2c:ce:
4d:1d:ec:a2:ea:5c:ac:81:e6:f7:f9:3d:b9:ef:02:
2b:74:7c:d4:ae:00:af:6c:b8:ea:a0:5a:aa:97:a4:
46:00:ad:0c:a6:00:8c:ad:7e:15:de:ef:a4:f8:41:
97:f5:f8:dd:69:1d:d2:c9:e0:4d:d9:3d:9e:61:58:
df:b2:d0:c7:c0:54:d2:2f:fe:38:3c:c2:40:a5:ec:
8c:51:9f:2c:f6:b0:b4:9a:4f:c3:8c:37:6e:5d:8e:
c5:33:34:09:da:d3:73:6a:0d:1a:49:36:43:96:9e:
af:85:dd:0d:d2:12:e8:ad:72:dc:ef:99:3e:c9:da:
67:ce:bf:0b:1f:e9:6c:25:c4:0c:55:7d:d0:f9:d4:
25:b9:5a:54:f1:66:89:24:51:cf:08:b1:f8:ff:8c:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:D9:7C:96:72:90:7B:C6:68:D7:E6:7F:3D:CE:EE:02:9F:C5:DD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3fb::/48
Signature Algorithm: sha256WithRSAEncryption
a5:bf:f8:45:b8:67:6e:01:3f:3e:30:a4:68:43:d0:c5:31:9f:
0b:aa:8a:62:64:21:d7:93:93:33:d5:0c:72:e8:db:78:b1:65:
6f:ec:23:1f:e2:7c:84:e6:eb:32:0e:90:a2:40:32:9f:fd:49:
43:63:67:76:df:02:58:78:63:bc:98:f2:e5:4e:8a:a0:35:33:
81:75:e0:55:3a:e9:2f:c4:dd:d7:d4:c4:ba:6d:cf:3e:0c:a8:
9c:a7:af:eb:27:07:b6:3b:4e:f7:2e:9a:e7:b7:c9:f1:4a:a6:
2f:f8:e8:85:4b:8b:0e:84:8d:26:e3:a1:30:56:15:92:e5:ed:
50:0b:4d:16:1f:47:b4:ae:d4:47:a5:d0:64:0e:03:26:0e:86:
d9:0e:cf:b0:96:4a:34:d0:3e:df:94:67:e0:23:29:67:e3:39:
77:c3:18:69:94:6f:6d:d0:ff:3c:a0:f6:30:5f:38:ae:f6:b9:
2f:8e:94:08:0c:5f:42:9b:bc:39:a3:89:51:cd:7e:bd:4c:79:
fe:ed:ac:c5:36:40:8c:af:b2:c5:34:48:5b:6e:cb:f3:a6:83:
30:37:05:d6:53:8a:5c:b6:4c:24:7b:85:3e:aa:0f:4a:8f:95:
4a:8c:95:17:1c:1b:e5:7b:75:da:cf:37:b9:37:87:e1:28:79:
97:24:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:39 2026 by rpki-client