Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: 5fx5tskX2fpxlXE37JChkQPe7XjIo1aw4Gv2a3u4V2w=
Subject key identifier: B9:76:E6:B1:DD:13:74:6D:0A:6F:68:C8:59:99:F8:A5:3F:6C:E0:9A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 64BB3E35898A9CEF3896E117A54F020A28D9DC56
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
Signing time: Sun 24 May 2026 15:48:27 +0000
ROA not before: Sun 24 May 2026 15:43:27 +0000
ROA not after: Sun 23 May 2027 15:48:27 +0000
asID: 214677
IP address blocks: 2a14:7583:ff2a::/48 maxlen: 48
2a14:7584:e900::/44 maxlen: 44
2a14:7584:e910::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bb:3e:35:89:8a:9c:ef:38:96:e1:17:a5:4f:02:0a:28:d9:dc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 24 15:43:27 2026 GMT
Not After : May 23 15:48:27 2027 GMT
Subject: CN=B976E6B1DD13746D0A6F68C85999F8A53F6CE09A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:88:b9:c1:d2:23:39:b2:08:95:d8:87:23:
d4:3a:53:2e:35:92:03:b5:64:82:d5:10:db:7b:27:
95:cc:20:85:50:76:fb:47:96:87:a4:fc:4c:84:ef:
b8:a8:8e:d7:3c:3a:3b:fb:cf:7c:ce:86:0b:1b:fd:
8f:d4:5b:10:6d:7e:a6:0a:dc:7a:59:f0:57:9b:d9:
76:3b:ee:39:8e:a0:9c:73:6c:27:f0:ae:bf:20:5c:
d2:09:16:66:0f:e8:85:aa:b8:00:57:d9:97:c1:3d:
1c:6a:63:54:7c:96:92:93:60:4e:58:b9:c2:e3:ca:
72:a1:4d:ac:9f:57:03:ac:42:5c:b1:c4:ab:42:b5:
6d:bd:f2:15:44:3c:ce:46:98:3c:29:13:61:cf:08:
33:87:0a:b3:83:76:e2:3b:f3:0e:8d:f5:be:89:e2:
d0:3f:34:f0:b4:eb:bc:09:6c:2e:56:3f:25:66:8b:
40:bd:b4:d9:ae:49:1d:26:d0:10:bb:24:07:9f:b5:
bc:78:86:a3:7a:3c:67:75:64:05:7f:3e:9b:99:ae:
b1:53:cb:d3:2d:fb:37:e2:45:0a:64:1b:7a:5a:ca:
7e:cc:b1:4a:ec:2c:a0:ae:e2:17:e0:55:38:f1:da:
d4:83:d3:22:84:97:6a:37:96:89:95:61:a0:6a:99:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:76:E6:B1:DD:13:74:6D:0A:6F:68:C8:59:99:F8:A5:3F:6C:E0:9A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ff2a::/48
2a14:7584:e900::/43
Signature Algorithm: sha256WithRSAEncryption
11:0f:6e:22:17:5d:fd:bd:f3:c3:61:63:60:6a:00:92:f3:dc:
42:b3:a1:b8:bf:0a:ca:a4:a2:02:75:cd:4f:ae:c2:df:e2:9d:
c9:6a:d7:31:f0:4e:eb:7c:85:f9:84:fe:e5:b6:8e:c4:b5:f1:
98:05:e7:79:d6:97:6f:68:08:ab:d8:e7:1a:b2:48:ee:de:c0:
0c:22:de:40:12:24:be:71:b7:6c:5a:7a:a5:21:99:e3:75:17:
68:6a:67:00:34:63:25:0d:64:6c:f4:e4:df:1c:f6:4f:0c:6c:
99:d9:10:0f:ba:2e:e9:52:f0:ee:a9:a7:10:83:a5:29:2c:cb:
b0:c3:f1:eb:c3:b6:a1:10:dd:f6:89:76:27:94:08:b9:d5:89:
f1:46:e6:b6:e6:9c:76:8e:0a:0d:64:44:09:90:d7:22:ba:b2:
07:2b:74:7a:e7:b2:18:92:c2:9e:06:6b:7b:51:35:34:ee:0c:
a0:f8:89:92:52:b6:c5:aa:f6:e4:2e:c5:94:16:be:06:23:f8:
dc:d9:7a:07:7d:24:3b:85:1e:5b:31:87:47:10:f7:fe:5e:11:
7e:ba:95:b8:45:6c:03:30:9f:f5:ef:c1:59:b3:d4:39:32:8f:
cb:f3:24:ff:24:77:6e:4e:46:34:21:7c:85:40:66:06:3a:18:
c5:f5:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:41:31 2026 by rpki-client