Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214931.roa
File: AS214931.roa (raw, json)
Hash identifier: nKJ5x9Wdw2MGs9x+SrnW59eNNLY/8smA0b/rJrj8vdM=
Subject key identifier: 2F:2D:6F:87:03:72:E7:6F:93:03:E8:65:7D:3A:62:A6:5C:10:0C:A7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 08E6B963A10DF87B5FA67581500B62941B89B8A3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214931.roa
Signing time: Tue 02 Sep 2025 16:37:22 +0000
ROA not before: Tue 02 Sep 2025 16:32:22 +0000
ROA not after: Tue 01 Sep 2026 16:37:22 +0000
asID: 214931
IP address blocks: 2a0f:85c1:3f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e6:b9:63:a1:0d:f8:7b:5f:a6:75:81:50:0b:62:94:1b:89:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 2 16:32:22 2025 GMT
Not After : Sep 1 16:37:22 2026 GMT
Subject: CN=2F2D6F870372E76F9303E8657D3A62A65C100CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:e5:59:50:a7:c4:bb:91:38:6b:bb:0e:66:
78:e9:2b:c0:0a:cd:04:be:73:e1:d3:de:b9:0d:bf:
cc:5c:6f:8c:60:8c:d5:fa:08:f0:04:21:80:1e:19:
95:2d:23:95:5d:ba:3e:57:3c:d3:72:77:8c:fe:6d:
17:8b:a4:c4:9f:1d:c1:40:20:80:71:75:9e:c5:3c:
c7:46:d4:ab:01:cd:96:12:99:a3:e8:c3:ff:ce:ff:
cf:42:5a:0b:95:92:0c:07:21:b1:a8:00:d2:14:72:
e2:91:1a:f3:98:31:6b:9e:7f:b7:4d:d6:2c:01:b0:
55:12:9e:c1:e6:f9:a5:43:bb:95:84:cd:07:9f:f0:
71:a9:05:09:8f:02:bc:15:bf:9c:b7:b7:85:f5:98:
3e:6d:4f:06:70:4a:6b:1c:21:9f:4d:77:44:de:91:
eb:23:36:c7:9f:71:4f:b9:96:d3:29:2c:e0:18:57:
36:2b:af:c1:1e:57:ac:6e:64:57:fa:1a:b4:f9:97:
45:49:1b:75:13:b8:95:a0:87:82:21:3b:8b:f0:b4:
8a:a3:6f:20:26:16:71:47:20:3b:2b:bf:75:9a:2c:
8d:fc:f1:b6:0a:d4:d5:dc:3f:cf:f1:e1:a6:4c:a9:
de:78:9a:e7:1e:fc:34:26:02:6a:95:9f:e3:20:43:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:6F:87:03:72:E7:6F:93:03:E8:65:7D:3A:62:A6:5C:10:0C:A7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f0::/48
Signature Algorithm: sha256WithRSAEncryption
ca:0e:63:6e:b4:9c:6f:f3:9f:90:6b:22:9c:7a:b5:99:d9:38:
0d:a8:32:7b:97:79:9b:15:1e:c5:32:f8:c2:77:46:89:0e:16:
c1:a2:39:53:f4:5f:f9:cf:e0:8f:f7:95:57:33:a6:47:61:19:
25:6f:8a:75:90:99:e9:4b:52:16:a6:b1:55:a2:3a:7c:76:f9:
0d:08:5c:68:3d:71:51:8e:3f:fb:e0:54:33:96:b1:09:98:59:
2b:77:47:d2:63:05:9f:0a:85:c8:97:c9:b4:a1:7f:08:89:bc:
16:ae:39:6a:12:5a:44:ed:41:15:fc:fb:61:0b:1b:75:c5:eb:
89:77:69:ad:08:e4:49:d4:8e:8a:7b:97:7c:bb:de:91:85:93:
22:37:60:db:7b:e9:32:b9:44:b0:f1:39:8c:73:2d:9a:ae:22:
19:d3:f3:80:36:d7:04:f8:12:0b:e9:1f:a5:39:3a:6c:28:6e:
a0:23:26:9c:7e:db:9c:38:68:df:a9:f1:4a:71:bf:5f:3e:73:
b9:5f:6e:01:1a:fa:2f:9d:52:a5:3d:e4:8d:db:38:4a:2e:04:
40:5c:7c:94:94:80:01:bc:b5:2f:b3:85:a4:87:dc:0d:3c:5d:
5f:db:94:6f:5e:4b:cf:7a:67:f5:8b:d6:80:e5:79:b5:e5:a4:
e8:fe:82:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:04:54 2025 by rpki-client