Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: WAJ33Ns2ijpZHaHeKm6QgKh7jlHaa4GxLdeGsyf1AOU=
Subject key identifier: 1C:17:07:38:66:AF:3A:81:93:6B:12:D9:6E:EB:CA:B3:6D:AB:B2:7E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5D65FEE72211AB8117CC07C48D57E17D3D1E6EB2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
Signing time: Mon 10 Aug 2026 10:38:20 +0000
ROA not before: Mon 10 Aug 2026 10:33:20 +0000
ROA not after: Mon 09 Aug 2027 10:38:20 +0000
asID: 214677
IP address blocks: 2a14:7583:ff2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:65:fe:e7:22:11:ab:81:17:cc:07:c4:8d:57:e1:7d:3d:1e:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 10 10:33:20 2026 GMT
Not After : Aug 9 10:38:20 2027 GMT
Subject: CN=1C17073866AF3A81936B12D96EEBCAB36DABB27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:55:cc:bc:0a:14:26:e9:ab:3d:b3:2e:06:
a7:af:9a:12:06:0c:57:18:86:26:3e:ba:29:8b:74:
0a:66:07:a2:34:cc:c8:23:96:b9:db:e7:a7:d9:81:
58:26:c9:3f:4a:e5:f4:c6:69:ec:5d:49:f9:d2:c9:
88:f5:e7:45:ff:1a:a5:c6:21:44:1f:5c:72:5f:85:
16:bd:33:93:51:7b:c8:80:c8:a8:ca:6b:2a:bc:92:
f2:69:4a:f6:3b:8c:b1:46:d5:a2:4e:2f:7d:d7:2f:
e4:fc:99:e5:06:8e:9b:9a:8b:ea:2d:19:e7:51:d5:
52:c9:19:08:89:3a:a9:28:2a:e9:8b:c5:ab:d2:fa:
e9:aa:43:bb:6e:10:73:3d:19:1d:48:82:b5:dd:dd:
4e:61:1a:77:33:57:30:55:5b:02:36:e9:98:97:42:
04:e4:a7:30:0b:16:90:ef:50:61:3a:88:7d:1b:80:
ec:39:74:4e:a5:ce:aa:90:87:94:c3:14:0a:46:a8:
61:bd:ad:23:09:b9:23:b2:9c:0d:98:50:bb:c9:cc:
d5:c1:ce:4b:b0:70:30:8d:67:88:99:de:57:de:1e:
db:61:39:52:3d:8e:23:e1:6e:b7:fa:db:aa:c2:b4:
3e:3e:dd:3f:a8:83:80:f3:42:53:8e:2b:43:01:21:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:07:38:66:AF:3A:81:93:6B:12:D9:6E:EB:CA:B3:6D:AB:B2:7E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ff2a::/48
Signature Algorithm: sha256WithRSAEncryption
9b:c8:6f:88:a4:c0:9d:6c:5c:69:f3:28:0c:20:7b:72:90:a4:
b9:f7:71:8f:77:8c:79:b0:e5:5f:36:8e:d2:8b:c9:bf:8c:dc:
17:51:fe:af:50:35:0e:ed:54:5b:3c:ed:e2:8a:c8:40:ef:80:
00:01:44:9b:8f:fa:48:ca:33:f9:e8:e7:4b:3b:af:f4:bc:00:
d6:33:c0:b0:f3:5b:b3:fe:0e:e2:a8:4b:0d:b7:20:d1:43:37:
57:3a:57:50:34:c5:c2:54:a9:7a:b6:ca:11:1f:31:df:95:75:
cf:67:91:96:6b:f8:2e:0c:82:09:59:ac:e9:94:ba:2f:1f:c3:
ff:db:0d:bd:30:b6:d4:83:91:41:e3:9a:b5:cb:be:9f:ef:be:
b3:7b:7f:16:c5:b7:a8:c9:6a:1d:95:78:31:39:3e:f2:25:cc:
ce:a9:82:45:e8:27:77:a3:4c:d1:a1:e7:f2:52:03:61:1d:bb:
e5:a1:34:63:14:63:db:7c:6d:e3:2f:60:fe:f9:ec:20:6c:7e:
7d:0d:81:7d:02:fa:8a:fd:3f:bb:71:01:42:31:f5:1d:f4:85:
73:e9:78:7c:9d:7a:13:0e:da:8f:3a:3f:46:04:26:be:a2:d4:
eb:d5:58:d8:52:ff:1f:17:86:9d:59:b6:85:30:35:e0:74:75:
8a:b1:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:51:13 2026 by rpki-client