Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
File: AS214033.roa (raw, json)
Hash identifier: uTEIa63k6sLVOPuv8VxJXQ4c3e9/4P+xJYU3dMhztIo=
Subject key identifier: 84:0A:F1:66:D5:7F:22:53:E0:45:2B:54:B0:B5:24:A0:E4:3B:45:07
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 33DE8AFC41D07C5E0B564FB1A1944833AF46A2F1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
Signing time: Sat 22 Aug 2026 10:21:43 +0000
ROA not before: Sat 22 Aug 2026 10:16:43 +0000
ROA not after: Sat 21 Aug 2027 10:21:43 +0000
asID: 214033
IP address blocks: 2a14:7581:f80::/44 maxlen: 44
2a14:7583:ef10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:de:8a:fc:41:d0:7c:5e:0b:56:4f:b1:a1:94:48:33:af:46:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 22 10:16:43 2026 GMT
Not After : Aug 21 10:21:43 2027 GMT
Subject: CN=840AF166D57F2253E0452B54B0B524A0E43B4507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:cc:b6:4c:da:57:ea:32:b1:89:63:0d:a2:
37:7c:02:09:70:e5:68:05:f9:d7:3d:0b:ee:86:6c:
65:a8:b3:d4:0c:00:d6:15:b4:09:ad:cf:67:c1:e7:
04:d1:0b:0f:84:77:94:c5:10:08:a8:79:77:8c:ae:
27:71:11:48:2b:ec:1f:a5:7d:7b:cc:0e:30:c6:9a:
2a:c9:a9:21:a1:e7:8d:a9:af:7f:43:88:bf:d6:cc:
96:03:38:db:32:b9:b7:d2:84:98:55:f8:4c:c8:c4:
49:e4:78:5f:8b:7b:05:89:8c:de:8f:75:3a:fd:d4:
58:f5:54:06:32:f5:96:b6:aa:f4:b3:70:30:be:8c:
e8:3f:c8:4a:e1:31:50:9a:1d:cb:86:fb:b0:b8:48:
20:63:03:42:80:f0:21:ef:d1:9d:27:8b:33:15:0b:
e7:70:7c:c0:25:15:21:28:53:40:78:4a:75:07:ce:
29:1b:c4:e6:ee:00:e6:1d:d1:75:cf:8f:45:e0:71:
9e:55:fa:d9:0a:2e:28:8c:9f:92:54:ea:6c:00:e1:
3a:f5:32:66:ca:7c:a3:4c:83:ad:90:de:93:7e:e4:
4d:0b:97:7a:aa:94:c7:6d:da:75:89:59:a9:df:78:
a6:d8:5d:4a:30:95:32:25:26:5b:f3:74:96:ba:71:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:F1:66:D5:7F:22:53:E0:45:2B:54:B0:B5:24:A0:E4:3B:45:07
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f80::/44
2a14:7583:ef10::/44
Signature Algorithm: sha256WithRSAEncryption
7e:0d:7a:5b:09:5b:dd:51:69:1a:a9:d0:19:5b:43:3c:e1:83:
19:d2:64:91:39:51:df:7c:9b:fd:e8:12:82:49:d5:fb:6e:b3:
c6:24:76:fc:80:ea:04:b4:3a:3a:9f:5b:bb:18:07:a4:59:a8:
c0:52:7e:8c:8a:93:03:e6:c1:94:5b:2c:d3:4d:3d:38:84:7e:
a0:ed:24:2b:60:0d:d2:a5:56:8e:c9:b4:2d:39:ee:54:93:27:
10:92:53:36:e9:eb:c3:70:d1:8d:b9:ed:a2:5f:89:1d:a5:6e:
0a:ac:34:ec:9e:49:4f:58:49:aa:29:a8:a5:4d:a2:44:48:ee:
a5:64:20:2e:82:d5:ca:ba:ee:ac:bd:13:66:38:ec:1d:3e:fd:
b3:3e:f1:0c:f8:50:b1:ed:0e:d3:f0:53:30:8e:a5:51:4b:10:
2b:6f:3d:c1:ae:4d:6f:7c:fd:25:ba:02:08:95:3a:7c:90:5d:
8d:4b:f2:23:b0:a1:29:b0:ae:69:1a:a6:c8:d3:df:69:6f:cd:
12:a9:bc:b1:3f:5c:3b:e7:fa:a4:f3:58:b8:f0:e4:73:7d:30:
0f:99:b5:c4:82:2b:4e:bb:82:fa:74:1b:e9:4e:59:f8:90:47:
a1:08:71:71:c7:6a:b0:54:bd:fb:46:83:11:ee:b7:71:c4:39:
3a:d0:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:07:13 2026 by rpki-client