Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214936.roa
File: AS214936.roa (raw, json)
Hash identifier: XreU7BNIbXYQ9mMx1L7ZynvoH40I3e2Z45PDWJXjDBA=
Subject key identifier: 0B:A1:75:60:F1:F0:0D:5D:4A:DC:83:BF:98:B9:E6:43:F2:47:45:4B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 14F374B1356C2AE8A60937BC7879F6724764154E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214936.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 214936
IP address blocks: 2a0f:85c1:3dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f3:74:b1:35:6c:2a:e8:a6:09:37:bc:78:79:f6:72:47:64:15:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=0BA17560F1F00D5D4ADC83BF98B9E643F247454B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:4b:1d:58:94:59:66:bc:7a:6b:75:e9:74:
b5:83:77:37:0f:de:ed:42:ef:4d:4d:c1:9a:78:95:
ac:89:e8:79:77:9c:cd:31:1d:bb:c4:61:20:15:13:
d7:80:88:e4:30:5f:51:8f:d6:64:13:b3:13:97:62:
38:62:a1:a1:03:27:bf:c1:6d:69:3a:13:3f:fd:67:
b3:b1:3a:11:ab:25:40:c4:f8:be:bf:af:5b:be:0d:
d6:da:f8:f3:7b:a4:29:c8:4b:68:db:8f:ac:88:10:
47:8a:2d:a5:a4:82:2a:c8:ef:06:79:fb:de:4d:c5:
dd:dd:25:c7:d7:4e:0f:7f:d4:d4:c3:8c:30:56:c9:
fa:0b:c4:4e:62:4c:f6:06:6d:b6:ff:1d:47:7f:ea:
d0:8a:6d:a1:cb:92:bc:ea:70:ee:39:18:34:9a:bb:
3f:bc:6f:f2:d5:c1:36:4a:7b:1e:12:50:97:11:06:
0c:7d:79:12:8f:fb:fe:d7:1d:13:17:eb:f9:b2:56:
11:17:a7:17:e0:51:f0:3b:96:04:bc:5b:e1:57:a9:
7b:1c:8a:99:0e:08:6c:83:a4:b8:ca:18:a8:f0:bb:
35:63:07:aa:4d:e4:1a:00:0d:97:7f:e8:b7:f8:6c:
5e:e0:d6:7f:e4:17:a2:e5:00:9e:00:ff:ae:ec:92:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:75:60:F1:F0:0D:5D:4A:DC:83:BF:98:B9:E6:43:F2:47:45:4B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3dc::/48
Signature Algorithm: sha256WithRSAEncryption
9a:68:ea:47:5d:4d:48:9a:af:2a:c6:a5:c3:af:a1:24:66:02:
64:ca:fc:b2:2e:a4:8c:ed:69:90:10:e4:4c:24:a0:9a:6e:3c:
dd:98:d3:96:98:54:47:27:04:bc:7f:c5:0d:94:17:9b:40:ad:
b5:73:17:e3:36:27:e0:a4:a7:26:b8:d3:ab:cf:16:c8:da:60:
44:de:de:a8:af:de:63:79:3d:e0:ea:08:9c:a1:44:bd:fd:32:
25:09:a2:2f:fb:cf:36:28:09:1f:4f:e3:d4:04:b7:ed:78:11:
1c:68:8b:d9:ff:bd:8d:69:be:72:eb:a5:3e:c9:c9:98:83:a9:
e9:44:26:32:c6:94:27:b2:d9:ce:b7:7e:23:f0:b7:dc:7a:71:
0c:47:94:cb:13:20:7b:bd:d6:c9:d3:7f:af:8e:8f:16:47:b8:
d1:88:34:d8:f7:66:a9:f6:97:5b:9e:43:7c:ab:92:68:92:4b:
eb:aa:7e:63:da:8c:d4:d2:72:ce:13:45:2e:f3:c9:6e:41:f5:
42:b0:05:16:66:ef:77:eb:16:b7:b3:93:45:44:d0:a7:74:6c:
38:c1:53:09:c0:90:8b:99:a9:b6:0c:9a:2c:7b:52:93:49:e0:
b1:ec:f1:11:00:c7:9a:4e:c7:ef:22:b7:44:95:0e:39:2f:ab:
fc:ba:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:59 2026 by rpki-client