Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214223.roa
File: AS214223.roa (raw, json)
Hash identifier: Gv8UXSnzkYd3pOA/+t9Dud1FYjiL8XtUKjNhHUxkew0=
Subject key identifier: 0A:A0:60:1E:6C:3B:85:A3:8D:9F:C0:04:85:90:A7:AD:7D:37:0F:C0
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3A674534683F1172AB8E317F78D3016A613186B7
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214223.roa
Signing time: Thu 20 Aug 2026 21:55:30 +0000
ROA not before: Thu 20 Aug 2026 21:50:30 +0000
ROA not after: Thu 19 Aug 2027 21:55:30 +0000
asID: 214223
IP address blocks: 2a14:7582::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:67:45:34:68:3f:11:72:ab:8e:31:7f:78:d3:01:6a:61:31:86:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 20 21:50:30 2026 GMT
Not After : Aug 19 21:55:30 2027 GMT
Subject: CN=0AA0601E6C3B85A38D9FC0048590A7AD7D370FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:43:49:41:35:3a:d8:84:0a:70:0f:f0:5f:
48:22:43:79:87:1d:e9:df:5d:79:73:6b:a0:0d:71:
52:f5:18:c4:94:90:94:4f:f1:89:9d:ba:ab:7f:20:
68:ca:5e:99:b2:c3:3b:40:cd:e5:2d:10:08:69:59:
cb:f4:a9:d0:2d:9f:1a:fa:6c:61:17:09:82:05:87:
16:3c:4f:54:a3:db:37:d6:ea:77:55:5e:cb:14:cc:
1e:b6:cf:e8:45:04:4c:e5:63:9e:c2:15:a2:55:db:
6c:9a:ff:6d:bf:87:ff:39:7e:b6:60:cd:4c:69:3d:
18:7b:33:47:76:25:cc:3b:28:3c:a0:51:2c:b3:f6:
5c:cf:36:65:74:09:7e:1f:6f:d3:5c:3c:1d:70:91:
f3:80:00:71:01:3f:a8:da:03:8f:16:f2:cf:22:5e:
6b:2f:3c:39:5e:7d:9d:e6:41:cb:33:e2:a5:35:16:
a7:c4:23:52:fe:5d:03:a2:cb:6d:9f:7f:21:86:69:
26:66:aa:cb:a8:e4:75:45:f9:1b:47:29:8f:fb:91:
3b:73:fb:91:07:c1:c1:76:45:27:6c:a7:97:b2:6c:
7a:24:f4:18:d7:9c:cb:ce:e9:51:84:ce:08:cc:ea:
ba:7b:bf:dd:43:1d:da:1d:f6:48:1f:2d:23:34:cc:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A0:60:1E:6C:3B:85:A3:8D:9F:C0:04:85:90:A7:AD:7D:37:0F:C0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582::/36
Signature Algorithm: sha256WithRSAEncryption
0d:72:5e:77:01:d3:17:9e:a6:2e:62:2e:7f:ed:5a:3f:86:93:
70:d8:a2:6b:30:b8:a3:33:62:92:48:86:ca:85:58:94:ea:b1:
b3:be:5a:d3:f4:6e:09:5f:fc:6d:31:8f:96:e5:ac:72:ea:a0:
36:03:00:50:61:1f:dc:6c:f3:c4:fd:78:ff:b5:27:fd:2d:55:
3c:3a:75:1b:58:a7:8b:a8:a7:72:cd:73:9b:53:3b:38:1c:65:
33:05:4a:f0:75:bf:6a:78:64:41:98:c7:93:1c:b2:cb:da:69:
eb:10:c5:93:2e:24:5c:bf:6a:ef:35:59:67:72:da:01:9d:f5:
67:39:0f:56:37:76:80:84:25:58:e1:d0:41:34:da:6c:11:e5:
f0:4f:66:b2:43:96:1e:68:d4:7c:74:03:d0:d1:5a:33:70:ac:
f3:64:86:65:d7:fa:a1:98:29:9c:9d:09:33:f6:0a:aa:fc:bb:
17:00:20:02:3d:09:03:a2:8d:d4:47:9c:11:0f:23:02:1f:f9:
51:f3:39:8a:61:a1:e5:bb:88:57:86:2e:42:bc:e4:b9:df:94:
12:ba:78:5a:04:09:b2:22:cf:a0:2f:f5:df:9d:a0:63:ea:ff:
ed:87:c9:52:05:d8:70:45:67:2d:32:6c:e8:36:57:72:c9:1d:
85:9f:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:47:28 2026 by rpki-client