Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214456.roa
File: AS214456.roa (raw, json)
Hash identifier: rPbkEXYoJUadfM3KLo768wl63Z0lRi+q97g5Q0i7MDU=
Subject key identifier: 69:77:BA:3E:47:6E:BA:52:FA:04:49:7C:98:DA:52:CA:40:0F:73:B7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0D97A7A682F2AD08ED03B9F8BE51A9DC0BEEFE11
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214456.roa
Signing time: Mon 13 Jul 2026 13:05:43 +0000
ROA not before: Mon 13 Jul 2026 13:00:43 +0000
ROA not after: Mon 12 Jul 2027 13:05:43 +0000
asID: 214456
IP address blocks: 2a14:7581:300::/40 maxlen: 48
2a14:7581:c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:97:a7:a6:82:f2:ad:08:ed:03:b9:f8:be:51:a9:dc:0b:ee:fe:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 13 13:00:43 2026 GMT
Not After : Jul 12 13:05:43 2027 GMT
Subject: CN=6977BA3E476EBA52FA04497C98DA52CA400F73B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:1a:71:e7:33:0d:b3:b1:6b:41:d9:4e:4c:
31:77:28:b0:52:63:d0:70:55:93:1d:48:c8:f3:8f:
5c:c8:10:18:b1:67:5c:45:50:eb:67:a1:1a:09:4f:
f3:72:87:34:da:a4:ae:51:90:7b:ed:bb:3b:82:72:
00:1a:d9:67:24:24:88:5a:d7:7e:01:63:99:60:2f:
e5:6c:9a:88:27:75:77:53:17:99:4c:b8:06:0f:1c:
93:4a:1a:37:06:a9:39:86:81:4f:82:51:16:6c:aa:
31:03:1f:1c:aa:c3:7d:58:7f:08:99:21:b2:73:60:
5a:3a:86:9e:fc:96:10:07:6c:e6:bd:2d:94:9e:fd:
27:42:45:14:17:6b:5a:d9:cd:a1:5d:84:a5:40:b7:
b6:d1:52:12:05:36:21:09:93:67:68:36:77:ac:17:
56:86:28:49:58:38:11:bb:3e:7c:12:fc:73:77:ce:
1a:86:50:65:28:30:98:79:3d:db:d8:48:02:a0:21:
a2:a3:53:10:a9:45:a0:8a:90:47:aa:76:2f:88:58:
da:74:16:08:b0:14:6c:5d:ab:e6:e7:67:5d:5f:6e:
5a:07:46:67:11:bd:23:34:17:ca:88:9e:d1:6f:c7:
7c:87:a4:cd:8b:04:f8:70:60:ee:85:73:c9:3c:16:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:BA:3E:47:6E:BA:52:FA:04:49:7C:98:DA:52:CA:40:0F:73:B7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:300::/40
2a14:7581:c00::/40
Signature Algorithm: sha256WithRSAEncryption
75:4f:69:f9:62:db:9c:8e:5c:94:45:31:66:91:2e:0d:92:16:
d3:14:80:86:f7:ac:c7:7e:d5:ef:d1:86:b8:4e:43:b5:c5:42:
cf:db:26:92:a1:a8:97:23:bc:00:c5:c1:c1:63:1c:df:4c:09:
99:e6:10:92:d3:b9:7b:fe:34:b7:bd:6b:cd:5f:bc:89:b7:b2:
61:c7:eb:8c:95:45:8a:ed:60:db:b9:d2:41:5a:01:f5:49:a9:
7b:00:19:c1:ce:fa:d6:ef:22:d6:e4:90:b9:cf:aa:c5:89:fc:
64:66:0d:3c:02:bd:3a:92:da:79:b1:01:f6:ac:5a:2c:27:ae:
2a:a4:7e:9a:c0:31:51:38:45:92:4e:e0:bc:08:a6:9a:19:c1:
22:13:17:3e:3e:68:76:c3:62:41:0b:87:9d:32:ec:3e:7e:4e:
ed:5a:65:bd:23:ff:20:19:c0:29:35:0c:bc:62:b0:0d:8d:f3:
3e:82:f5:d4:9e:65:e5:b2:20:67:c7:c2:58:0e:ab:cb:6f:72:
84:5f:b7:1c:79:10:6c:45:95:38:ea:68:e9:12:ba:00:34:a4:
2e:bc:92:a2:66:13:d4:e5:8e:48:72:bd:95:de:32:e9:10:a7:
01:7b:28:21:d1:ac:a3:52:0c:44:0b:51:a6:26:7c:51:5a:ed:
62:3d:c8:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:30:24 2026 by rpki-client