Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
File: AS214033.roa (raw, json)
Hash identifier: SKwDsOvFyT6KL/sWasyQUD5CWq4lJQ0rsxEKZ6nPQWk=
Subject key identifier: 81:AA:2D:A9:1C:B5:3E:36:96:53:0D:2B:67:32:9E:C7:F7:E3:41:5C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 75D4D417F6BEBAA6614AFC3983203696F4E9295F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
Signing time: Sun 24 May 2026 10:42:59 +0000
ROA not before: Sun 24 May 2026 10:37:59 +0000
ROA not after: Sun 23 May 2027 10:42:59 +0000
asID: 214033
IP address blocks: 2a14:7581:f80::/44 maxlen: 64
2a14:7583:ef10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d4:d4:17:f6:be:ba:a6:61:4a:fc:39:83:20:36:96:f4:e9:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 24 10:37:59 2026 GMT
Not After : May 23 10:42:59 2027 GMT
Subject: CN=81AA2DA91CB53E3696530D2B67329EC7F7E3415C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:4e:cb:cc:61:41:db:71:c9:ae:a6:80:40:
5b:ee:de:37:24:89:e2:f5:96:9c:fb:7a:f1:77:dd:
f0:41:08:c2:2c:21:52:78:32:ea:fe:b9:74:10:ec:
9d:79:91:60:76:e2:dc:d3:ba:f7:f6:10:34:ef:2e:
5c:48:5b:f7:e6:61:b0:57:e1:d5:93:84:43:a0:06:
67:17:d7:ac:6f:7a:d8:99:0e:6f:8d:37:41:95:db:
93:69:3e:72:ea:22:4a:58:6a:ae:ae:5c:ed:7b:e8:
28:37:a4:74:74:70:1d:b6:5f:0a:17:19:92:a3:f2:
83:0c:2d:66:31:b2:55:ae:f1:1d:2f:66:0f:00:25:
6d:5c:11:93:54:99:33:8c:ae:c4:31:17:cc:bc:5a:
c7:42:89:a3:98:ae:5c:f0:55:1d:4a:05:df:b5:ce:
66:c8:80:c6:91:10:f6:e7:12:0d:75:19:5a:d7:8f:
dc:de:fc:ee:72:e2:3d:ca:18:23:af:68:4a:75:49:
3d:c0:88:c6:be:2e:d7:dd:f6:cf:a2:c7:98:b8:98:
b5:c5:ea:86:17:d3:5b:51:d0:84:29:b2:92:64:95:
47:80:ca:97:05:b1:6e:e9:c7:6e:dc:7b:38:0a:30:
de:98:6d:b1:38:74:5d:6f:bb:dd:0a:4d:3d:9b:d8:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:2D:A9:1C:B5:3E:36:96:53:0D:2B:67:32:9E:C7:F7:E3:41:5C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f80::/44
2a14:7583:ef10::/44
Signature Algorithm: sha256WithRSAEncryption
48:4f:31:c5:d5:d0:13:a2:42:21:21:45:96:1f:0c:7c:6c:98:
5b:a0:33:69:48:ac:a3:15:c5:26:51:39:f8:de:92:a5:ed:f2:
14:da:59:06:20:ac:88:b8:93:55:f1:df:43:ce:13:04:e9:ba:
eb:36:69:97:6a:25:0b:40:5c:00:b4:4f:c4:e3:e8:6d:0a:81:
2a:81:df:3a:c4:c5:e7:a5:2c:c8:96:a3:dc:e5:b7:b6:01:ba:
aa:c2:15:81:12:be:7b:a2:4a:f2:72:17:75:52:11:d3:8c:12:
c1:41:fa:6a:e5:12:e4:e2:16:51:54:67:ef:a5:a6:55:39:12:
82:4c:0d:14:64:b3:d8:74:10:72:74:87:24:58:a5:e0:60:aa:
a4:5d:bb:19:24:75:e6:fb:04:09:96:20:47:ae:c2:b3:d1:08:
c1:ed:1d:53:0f:a4:79:00:f7:8a:97:47:d4:b4:e7:fa:db:3f:
56:74:5f:49:21:50:31:47:34:7c:1a:c8:22:03:8e:cc:c9:a7:
bc:ca:6c:34:5d:22:7e:78:00:62:11:30:15:6e:9d:32:68:7b:
b1:4d:af:30:a2:ae:53:b5:30:3c:5d:c4:cc:99:1c:a2:07:3d:
68:cd:f9:2f:78:5a:06:f6:26:e5:4a:d9:76:59:30:14:40:5a:
ba:4b:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:14:23 2026 by rpki-client