Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
File: AS214906.roa (raw, json)
Hash identifier: RNtEKOaGxvhuN4mjQt5Ck5st9K54gn0T/F4Uap4gZKw=
Subject key identifier: 93:98:95:29:4B:54:DF:2C:D9:F9:E2:5E:0A:B1:59:15:55:D7:C1:AD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3ED13AE6F70CE92F3A7E197657A8C604CDF21D87
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
Signing time: Fri 26 Jun 2026 08:08:39 +0000
ROA not before: Fri 26 Jun 2026 08:03:39 +0000
ROA not after: Fri 25 Jun 2027 08:08:39 +0000
asID: 214906
IP address blocks: 2a0f:85c1:3f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d1:3a:e6:f7:0c:e9:2f:3a:7e:19:76:57:a8:c6:04:cd:f2:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:39 2026 GMT
Not After : Jun 25 08:08:39 2027 GMT
Subject: CN=939895294B54DF2CD9F9E25E0AB1591555D7C1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:95:64:c2:82:fa:46:ea:d8:8d:16:f6:09:3c:
92:7b:88:0a:2d:b2:99:c3:66:e7:a1:66:25:ae:fc:
a4:ee:5d:56:6e:d0:0d:1e:9c:7b:d7:c0:6f:69:82:
48:f2:75:38:7b:09:9e:c4:54:ff:45:d6:18:1c:f3:
5e:6e:c0:16:62:f2:77:d5:96:fc:c3:65:8f:ce:26:
4c:8d:88:24:2e:43:c3:ba:47:3b:f2:36:63:ef:38:
e6:5f:38:27:4a:55:8b:7e:1a:24:f7:50:92:14:ca:
b6:06:67:69:96:3d:7e:43:3f:49:69:da:30:d4:f0:
fb:35:0f:48:17:48:c1:28:3c:b9:36:77:d6:f0:80:
b6:56:04:dc:56:54:b1:37:9b:d7:43:5e:d9:17:f8:
18:95:7f:e3:9f:4b:c4:e6:34:39:76:c9:67:8f:c9:
a0:21:c9:a5:7d:9d:27:d3:7e:a0:e6:4b:0e:45:8f:
5d:7f:ad:e7:10:e4:c8:55:50:14:53:7f:d9:81:c8:
80:8f:da:9f:24:df:04:87:55:b7:b1:7c:96:28:4f:
8e:c0:c0:d3:dd:ca:04:1d:ce:eb:7c:98:7f:02:48:
29:fc:db:ac:4b:e7:fb:87:b1:97:4b:a1:e2:2d:08:
3e:be:ac:52:b1:66:1a:44:34:91:6d:a0:ae:b0:fe:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:98:95:29:4B:54:DF:2C:D9:F9:E2:5E:0A:B1:59:15:55:D7:C1:AD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f2::/48
Signature Algorithm: sha256WithRSAEncryption
85:7b:e9:46:10:c6:35:02:b6:9c:bf:d8:d9:1e:4f:4a:5f:f0:
c3:55:72:ef:ae:92:ca:59:a2:ab:d6:4e:a7:9c:65:0f:98:81:
70:9f:c3:64:27:63:75:1c:21:e1:4c:68:6b:1f:7a:0e:a1:b5:
1d:72:9d:c1:85:3b:50:d6:6f:06:ea:1f:72:94:d4:a1:73:26:
89:39:37:62:81:20:03:a2:5e:4b:aa:bd:ed:0d:37:93:8f:2f:
92:39:c3:59:08:25:c5:94:44:c6:7b:c9:cd:eb:e2:61:59:19:
35:2c:f4:e5:15:0a:a6:85:6e:93:a5:bf:f9:cb:5b:9f:29:af:
2c:de:40:bb:eb:0c:05:ec:95:bf:a7:99:26:ee:21:9b:e8:b4:
e3:5c:5d:3f:ef:3f:75:a8:c7:05:b3:78:2d:bd:56:49:a5:6d:
a7:76:e5:17:ef:a8:66:64:f9:92:65:49:af:9b:74:f9:0b:e1:
bd:a8:17:5a:19:0e:2b:ad:c0:39:a9:b1:62:c9:fd:46:94:98:
ad:0e:23:ba:77:d1:a6:27:bf:44:b2:4e:8f:30:63:01:cb:2d:
e1:e7:4e:ab:e7:a5:e2:16:20:98:50:3e:f9:ae:b3:83:c3:d7:
d8:69:c6:3c:eb:3d:27:4d:67:54:c7:98:ff:d7:df:60:bb:28:
03:66:b9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:40 2026 by rpki-client