Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: +lfRKp1F2U4pvrksa4mzeA+G/ffwZlyTsE63vv4HqEs=
Subject key identifier: CE:74:ED:5F:36:32:37:66:E1:3E:08:30:6F:4A:81:4F:E2:4E:E8:9D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6162D9C551BEFEBF2E6A47F94460DA55052D3F70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214481.roa
Signing time: Thu 06 Aug 2026 16:42:45 +0000
ROA not before: Thu 06 Aug 2026 16:37:45 +0000
ROA not after: Thu 05 Aug 2027 16:42:45 +0000
asID: 214481
IP address blocks: 2a14:7583:ff2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:62:d9:c5:51:be:fe:bf:2e:6a:47:f9:44:60:da:55:05:2d:3f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 6 16:37:45 2026 GMT
Not After : Aug 5 16:42:45 2027 GMT
Subject: CN=CE74ED5F36323766E13E08306F4A814FE24EE89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:2c:fb:32:dd:ee:57:28:be:8d:6c:88:5c:
8f:06:aa:3d:da:7a:f7:d1:76:09:7d:52:28:a8:73:
25:bb:27:fe:cd:28:96:61:8d:09:21:7c:f6:1b:28:
a2:85:08:d9:77:4c:a9:e4:dc:08:a5:32:a0:79:4f:
b2:01:6a:97:ae:66:d8:68:ba:2b:64:af:0e:7c:05:
97:7d:3e:de:0a:de:c2:39:91:58:42:95:8d:13:4b:
0d:28:fb:c0:d3:fa:92:55:ec:34:e9:bb:80:47:0b:
ff:4f:86:24:d5:c8:84:0b:99:14:0a:57:38:f6:8d:
8c:da:61:98:53:0e:06:14:79:3a:fd:3f:a3:d4:48:
46:63:05:1b:32:65:91:7e:18:5f:ea:71:01:8f:bf:
20:e3:1f:52:36:75:c4:40:13:6f:5a:81:cd:4d:88:
ec:65:bc:40:40:d3:3c:f4:37:1e:87:82:46:fe:79:
05:ba:3c:8f:f3:31:87:ec:6f:ad:eb:59:ae:03:91:
b2:40:35:da:3a:bd:86:1b:58:03:7d:ba:19:57:42:
d7:f1:6a:1f:ed:e4:c9:7b:45:b0:98:b9:9f:a9:01:
7f:82:c6:4e:ce:79:49:6a:6b:ca:97:6a:3d:46:a3:
cc:44:34:5b:38:c2:5b:01:d5:34:84:36:a6:f1:0c:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:ED:5F:36:32:37:66:E1:3E:08:30:6F:4A:81:4F:E2:4E:E8:9D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ff2c::/48
Signature Algorithm: sha256WithRSAEncryption
38:5b:20:f0:57:93:22:1f:98:33:7f:cb:3c:e8:02:a2:a1:3a:
91:c4:b3:4b:51:64:b7:77:1b:df:7c:3d:59:64:13:51:4b:0e:
08:65:91:f2:f5:7a:9d:2e:38:2b:cf:e7:98:32:3a:34:fd:6c:
48:9f:81:f4:b4:e1:ea:59:18:ae:65:62:9d:56:15:79:47:3c:
64:6c:f3:40:58:fa:f2:db:85:4f:3c:9e:ab:a5:e1:84:73:a1:
d0:c5:d0:b6:67:d2:bb:dd:e3:8e:03:f8:f3:54:73:d5:e6:e6:
a6:7d:41:3f:bb:58:a7:0e:be:de:1a:f0:3e:6d:8f:0f:6c:b0:
48:05:fe:aa:cc:15:0d:68:55:3c:31:aa:eb:5a:29:5c:5b:aa:
86:45:49:2c:ea:3b:31:64:8a:80:32:f7:35:0f:7a:90:82:8b:
fd:cb:bf:ca:f8:c6:3f:8b:f1:4f:e3:22:6b:51:1f:dc:b9:48:
f7:f8:0a:90:76:23:1f:36:06:a1:60:c1:da:45:69:5e:c3:4e:
4c:f8:4e:64:e2:ed:3e:96:cf:8b:e4:80:98:3b:fe:2d:46:d4:
de:ef:dd:18:0e:c3:c9:9c:69:60:f0:e9:3b:3f:73:d7:65:16:
80:e1:23:80:6f:21:60:d7:c6:fd:e0:80:76:8a:9c:9d:fe:4a:
21:98:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:04 2026 by rpki-client