Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214984.roa
File: AS214984.roa (raw, json)
Hash identifier: 0xD08U2R1QUAjis/5Dgv+5zuMKOf/GK0S4XwQu8sUBI=
Subject key identifier: 3C:84:EB:FF:37:65:12:70:07:60:87:F1:E7:92:61:15:F2:30:04:D9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3776AF1B65B37CCBC63E379E2379BDFD78D54B24
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214984.roa
Signing time: Fri 26 Jun 2026 08:08:39 +0000
ROA not before: Fri 26 Jun 2026 08:03:39 +0000
ROA not after: Fri 25 Jun 2027 08:08:39 +0000
asID: 214984
IP address blocks: 2a0f:85c1:3d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:76:af:1b:65:b3:7c:cb:c6:3e:37:9e:23:79:bd:fd:78:d5:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:39 2026 GMT
Not After : Jun 25 08:08:39 2027 GMT
Subject: CN=3C84EBFF37651270076087F1E7926115F23004D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:4d:d1:da:fb:4c:90:09:a0:05:c2:5a:41:
71:9a:64:d9:c9:6b:bf:46:ec:84:6e:dc:b1:03:90:
bb:76:f5:84:79:55:76:89:46:0c:76:e6:d9:05:42:
e1:58:bb:cf:39:d9:e2:0b:95:9c:05:00:af:d7:57:
0b:67:4e:ed:de:e4:ad:60:dd:76:2b:e6:0a:45:c4:
04:24:62:74:45:cd:ab:83:a5:31:ae:10:30:41:c2:
41:9a:ab:1c:b7:04:36:46:79:16:90:55:09:6a:85:
2a:af:08:46:c0:02:ac:9f:ab:5d:c2:13:31:f1:68:
eb:0e:c6:3f:07:b4:87:fd:2f:47:bd:58:87:34:7b:
c2:fa:34:e3:d6:2d:85:cf:7e:42:6b:62:83:0d:4a:
db:65:3a:84:08:f9:9c:64:58:b4:67:44:72:54:76:
b7:84:71:a4:8b:58:be:1a:fb:40:e5:32:fd:7d:c9:
46:e6:b4:2e:86:ec:86:9e:30:fd:8f:97:38:76:ba:
0a:79:d2:56:59:46:ca:0d:61:9a:46:9b:2a:08:8b:
3d:ee:62:2f:b7:a2:03:e0:3c:8e:bd:d0:63:2b:7c:
4e:10:d9:98:0e:0f:d7:2c:88:a1:11:84:f5:0c:8b:
ad:2a:d7:43:4c:9e:3e:ef:c6:3c:78:a4:81:98:cf:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:EB:FF:37:65:12:70:07:60:87:F1:E7:92:61:15:F2:30:04:D9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d2::/48
Signature Algorithm: sha256WithRSAEncryption
c2:77:72:77:9a:71:15:5d:bc:57:3e:41:0b:85:e9:82:66:5e:
58:61:d9:f6:1a:a2:d3:ca:bf:36:56:ac:51:7e:8f:e1:33:68:
18:62:67:cd:0d:90:fc:59:6e:09:7b:53:f1:6a:aa:5c:5b:be:
ba:31:68:eb:ac:f2:2f:da:c8:c6:d2:60:d1:8b:ed:a8:8c:07:
92:f9:1a:a2:3f:e5:94:e9:a1:09:78:64:f5:95:4d:2a:6a:47:
e5:98:0e:9a:8a:66:ed:13:2c:ef:b1:88:79:27:04:1e:17:84:
45:01:5a:ca:f8:04:41:b6:d9:f3:7d:f8:42:3d:9d:04:dd:f7:
24:a4:d8:78:b0:b4:b1:da:d9:b9:1e:6e:bc:37:ea:74:1f:6e:
50:65:96:30:1f:37:74:f1:de:8b:a5:09:ab:da:47:27:20:dc:
17:cf:4a:4c:2f:10:2e:2d:fd:c8:12:0e:66:58:33:e3:4a:47:
34:b9:45:e6:b6:a9:fa:e9:8f:6f:cc:8c:ca:c5:2d:b9:19:95:
1e:f9:55:17:a1:d0:35:4e:8b:8c:88:30:87:f7:b3:41:e7:ca:
89:74:25:3a:b8:8f:02:a1:15:bb:d0:62:60:bd:05:f2:51:d1:
9c:f0:55:0a:7e:aa:47:4e:fb:69:c6:d1:9b:3e:da:6d:57:b5:
1d:0f:87:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUN3avG2WzfMvGPjeeI3m9/XjVSyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzMzlaFw0yNzA2MjUwODA4MzlaMDMxMTAvBgNV
BAMTKDNDODRFQkZGMzc2NTEyNzAwNzYwODdGMUU3OTI2MTE1RjIzMDA0RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Fk3R2vtMkAmgBcJaQXGaZNnJ
a79G7IRu3LEDkLt29YR5VXaJRgx25tkFQuFYu8852eILlZwFAK/XVwtnTu3e5K1g
3XYr5gpFxAQkYnRFzauDpTGuEDBBwkGaqxy3BDZGeRaQVQlqhSqvCEbAAqyfq13C
EzHxaOsOxj8HtIf9L0e9WIc0e8L6NOPWLYXPfkJrYoMNSttlOoQI+ZxkWLRnRHJU
dreEcaSLWL4a+0DlMv19yUbmtC6G7IaeMP2Plzh2ugp50lZZRsoNYZpGmyoIiz3u
Yi+3ogPgPI690GMrfE4Q2ZgOD9csiKERhPUMi60q10NMnj7vxjx4pIGYz2h1AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUPITr/zdlEnAHYIfx55JhFfIwBNkwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0OTg0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQPSMA0GCSqGSIb3DQEBCwUAA4IBAQDCd3J3mnEVXbxXPkELhemCZl5YYdn2GqLT
yr82VqxRfo/hM2gYYmfNDZD8WW4Je1PxaqpcW766MWjrrPIv2sjG0mDRi+2ojAeS
+RqiP+WU6aEJeGT1lU0qakflmA6aimbtEyzvsYh5JwQeF4RFAVrK+ARBttnzffhC
PZ0E3fckpNh4sLSx2tm5Hm68N+p0H25QZZYwHzd08d6LpQmr2kcnINwXz0pMLxAu
Lf3IEg5mWDPjSkc0uUXmtqn66Y9vzIzKxS25GZUe+VUXodA1TouMiDCH97NB58qJ
dCU6uI8CoRW70GJgvQXyUdGc8FUKfqpHTvtpxtGbPtptV7UdD4c7
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:43 2026 by rpki-client