Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214989.roa
File: AS214989.roa (raw, json)
Hash identifier: Y+xq9fRW5bV1Ytbu+2kBkq3c3lP3a5maRwz1Mhf6IlQ=
Subject key identifier: 93:78:77:BA:8B:49:00:BC:A4:44:D1:5B:92:23:FF:E0:C8:CC:35:B5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 042929FC036FE46EBF1FDD8A5E1805C3034F6F35
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214989.roa
Signing time: Fri 26 Jun 2026 08:08:43 +0000
ROA not before: Fri 26 Jun 2026 08:03:43 +0000
ROA not after: Fri 25 Jun 2027 08:08:43 +0000
asID: 214989
IP address blocks: 2a0f:85c1:3cf::/48 maxlen: 48
2a0f:85c1:3e0::/44 maxlen: 44
2a0f:85c1:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:29:29:fc:03:6f:e4:6e:bf:1f:dd:8a:5e:18:05:c3:03:4f:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:43 2026 GMT
Not After : Jun 25 08:08:43 2027 GMT
Subject: CN=937877BA8B4900BCA444D15B9223FFE0C8CC35B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:3c:b4:29:f0:bd:3e:ae:7a:49:56:56:8c:
ed:d5:46:88:2c:19:0c:aa:de:e1:c5:ee:e0:a1:67:
51:d7:8d:cf:f3:a5:a8:63:1e:5b:da:b0:04:dc:3c:
b9:e5:9c:c6:57:9b:8b:4a:5a:f5:4a:e8:5c:ec:08:
84:ca:15:9a:f9:bc:ed:28:ad:d6:21:6c:5c:85:85:
03:01:5d:22:1b:c2:aa:5e:89:d4:f9:1e:e3:62:1d:
c6:8b:d0:e4:98:37:59:1d:25:65:63:ae:f1:d1:f7:
fb:cf:a3:99:5a:df:ad:a4:c5:b6:d3:7f:b2:df:1b:
02:3f:15:ff:c1:62:3a:b4:49:ea:29:ff:1e:4d:95:
28:6d:36:37:7f:60:f9:bb:41:28:7f:42:f6:61:99:
ca:19:a2:41:4b:4f:20:da:96:d7:8b:c5:bd:5e:3f:
c5:78:1c:2b:54:62:e7:b3:93:70:33:8e:ee:9a:6b:
2f:b2:79:3a:98:3c:9c:a4:fa:ba:ee:78:f4:be:ac:
50:0d:f7:9b:b4:e2:4f:7f:39:f0:21:24:f1:01:70:
d5:6b:27:43:95:2e:c6:74:66:a0:52:a1:29:b2:e2:
35:62:2b:30:92:19:2a:bd:2a:cf:d6:ae:08:4d:b2:
2f:ea:a1:c6:c9:a5:1d:ce:af:3a:54:b2:15:2b:55:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:77:BA:8B:49:00:BC:A4:44:D1:5B:92:23:FF:E0:C8:CC:35:B5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3cf::/48
2a0f:85c1:3e0::/44
2a0f:85c1:500::/40
Signature Algorithm: sha256WithRSAEncryption
01:bb:f0:d4:b4:ff:5d:b4:cc:1a:64:fc:d2:7c:5f:70:f4:c6:
4c:0d:9f:71:03:94:04:36:5f:e1:c5:0a:e9:b2:38:42:e6:2c:
3d:cf:c3:3a:7d:b3:1b:4f:3f:8d:4e:ce:48:a4:8d:62:24:3a:
93:de:d1:91:1e:fa:09:36:22:79:0b:47:e5:5d:5b:f7:04:e2:
40:03:6e:d0:cb:7b:47:a4:4c:2f:7f:fc:fa:62:30:d4:14:7e:
48:1f:e2:0b:70:ab:90:93:2a:9b:2d:03:3e:a6:f0:e4:7c:2d:
83:53:42:ad:77:80:ef:e7:00:8a:c4:77:34:2a:9b:a0:8f:bc:
d5:59:c7:08:8b:7d:aa:26:57:06:aa:c7:53:ed:45:5d:6d:60:
33:23:20:34:c0:c3:f8:ed:c6:2b:2d:fa:e3:74:1c:cc:5e:03:
60:03:0c:d5:d7:76:9a:ba:bc:b2:61:05:74:73:66:5a:52:76:
83:42:4c:da:37:a9:7e:a5:49:eb:ac:b8:c9:5c:f8:b5:c9:39:
17:7b:6a:f1:71:01:57:5c:a4:95:5a:f5:75:af:4e:e2:bc:63:
96:80:c6:93:72:c4:63:6c:1e:13:2d:e5:c9:d2:e6:da:f0:6c:
ab:a7:87:5e:80:be:77:dc:6b:44:95:ee:4f:6d:71:92:86:25:
db:7c:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:59:25 2026 by rpki-client