Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214931.roa
File: AS214931.roa (raw, json)
Hash identifier: dgwFsfp6eY6jUHGYPnTFvAWwhznS+08iyn3gP+aoqPg=
Subject key identifier: DE:2C:C5:06:5D:56:F9:96:6D:48:A9:F2:AA:92:4B:33:9E:03:79:01
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 62D29DCD51438E62A0338736CE03C30B0C496CE9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214931.roa
Signing time: Tue 04 Aug 2026 17:09:00 +0000
ROA not before: Tue 04 Aug 2026 17:04:00 +0000
ROA not after: Tue 03 Aug 2027 17:09:00 +0000
asID: 214931
IP address blocks: 2a0f:85c1:3f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d2:9d:cd:51:43:8e:62:a0:33:87:36:ce:03:c3:0b:0c:49:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 4 17:04:00 2026 GMT
Not After : Aug 3 17:09:00 2027 GMT
Subject: CN=DE2CC5065D56F9966D48A9F2AA924B339E037901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:e1:a2:40:be:03:b0:bc:f5:e7:25:e2:26:
a4:e4:91:31:c9:8b:5d:76:f1:a4:f4:a5:f2:ec:cb:
fa:11:56:03:29:9f:11:05:a9:80:3b:46:ba:f0:03:
77:d2:2c:c7:dd:67:6f:54:be:b4:9c:13:db:55:11:
5e:8d:60:18:03:81:52:fc:1d:c5:a5:66:eb:40:10:
26:e5:5f:50:87:c9:1a:2b:aa:da:cb:3b:69:ee:e6:
01:47:70:6b:9f:67:e6:df:76:c6:83:54:17:ee:b6:
72:d4:b1:ea:91:52:12:b9:64:6c:ed:78:fe:71:b0:
8f:96:4d:c5:5c:48:dd:54:4a:aa:68:26:7b:f8:91:
7c:84:7b:76:b8:30:a1:1a:be:ca:f1:bc:af:f6:2d:
e4:c9:5b:4b:06:0d:c4:19:30:8b:7c:93:0c:6b:a8:
21:e5:b3:85:56:2f:be:62:5c:2f:0d:0e:fd:58:95:
0c:95:67:34:a1:6e:de:fc:17:3e:ad:92:55:83:c4:
6d:63:63:f6:84:d2:97:eb:03:d6:d8:05:50:15:eb:
97:5e:bc:b1:55:15:de:dc:88:82:fe:80:d1:35:72:
ad:f0:f2:f8:86:f3:fb:23:10:5e:83:8d:13:5d:4d:
2c:ad:f1:f3:79:46:8e:f2:ab:24:ec:a6:ec:81:1a:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:C5:06:5D:56:F9:96:6D:48:A9:F2:AA:92:4B:33:9E:03:79:01
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:06:bb:99:8c:c1:10:ac:7a:47:aa:9d:ec:20:e4:b7:1f:38:
a2:40:cc:c1:03:30:07:0e:41:b0:d5:67:a2:a5:d4:15:ba:91:
c6:44:58:cf:e2:2f:92:16:0b:e3:db:92:7c:af:07:42:03:73:
05:87:13:b5:b6:fd:90:93:79:5c:6a:83:4d:50:3d:93:45:b6:
e5:da:a3:8b:0b:4f:42:bf:b2:dc:3b:cf:55:7f:ad:ca:9b:c3:
18:ff:30:4d:86:82:14:53:f6:c9:47:05:ae:3a:75:2e:cb:41:
0c:99:0d:9f:ae:e0:c4:51:c8:80:d6:ac:84:09:e3:cc:45:fe:
2c:35:fd:2b:0a:60:34:12:2b:1f:4a:58:b9:42:bd:97:7e:3b:
1d:85:d6:26:af:f3:d9:de:22:4b:45:67:6d:59:e8:b0:5e:0f:
04:45:2d:d9:7d:d8:42:87:27:fb:ee:c9:a3:12:0e:6a:8f:e8:
10:28:ab:53:37:1c:b5:fa:8a:3d:0c:8b:d1:bc:58:b2:ee:e6:
29:2d:2c:20:39:94:53:c0:e1:3b:ef:08:99:3d:6d:ca:aa:95:
e9:1f:3f:e6:0e:00:76:eb:3c:6e:dd:11:d5:c4:71:53:09:8f:
91:fb:d3:c0:0a:72:75:7b:92:79:0b:26:10:28:93:0d:1f:f9:
2b:f9:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:13:28 2026 by rpki-client