Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: KiubuiG7gGabQM3y1nSH0wyX40sRcxwM54xo+mSuuzk=
Subject key identifier: 0A:51:BD:8C:85:57:80:82:D5:CF:89:F5:C5:48:D6:A1:33:AD:3A:95
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 600D63B90B8F98EC4BD24051716D9A849A3DDD9D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
Signing time: Tue 21 Oct 2025 02:19:38 +0000
ROA not before: Tue 21 Oct 2025 02:14:38 +0000
ROA not after: Tue 20 Oct 2026 02:19:38 +0000
asID: 214677
IP address blocks: 2a14:7583:a400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0d:63:b9:0b:8f:98:ec:4b:d2:40:51:71:6d:9a:84:9a:3d:dd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 21 02:14:38 2025 GMT
Not After : Oct 20 02:19:38 2026 GMT
Subject: CN=0A51BD8C85578082D5CF89F5C548D6A133AD3A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:86:8f:75:56:99:25:dc:7a:f9:e7:06:15:
3c:9d:9f:ba:0b:ac:b3:53:b2:ea:2b:38:0e:3b:4c:
67:cd:c2:8a:7f:95:cb:e5:6d:1b:90:47:11:ac:e5:
c5:7a:90:43:ac:b6:02:38:c2:5c:19:26:b3:78:90:
69:c3:1a:cd:b3:53:6d:e7:29:0d:9d:65:8c:64:f9:
64:f6:da:90:29:d5:1a:59:7e:4d:78:57:16:9b:20:
2c:ba:58:21:24:72:fb:f5:5c:ff:48:d6:b3:85:0a:
02:2d:8d:27:04:2e:4a:ec:10:6c:1c:63:32:c1:ba:
70:45:41:36:c6:9d:bd:71:31:d8:80:8d:ef:c8:83:
33:6c:64:97:ca:ff:68:25:b9:e9:88:9a:74:1a:cb:
30:51:f0:cb:d8:1b:a8:9b:a3:a1:e9:b4:4f:de:c3:
04:3e:5a:33:a0:18:a0:09:50:73:5f:e8:af:14:45:
78:cd:d3:b3:a4:5b:08:70:46:f4:17:c6:e6:9b:3f:
90:20:e2:95:15:a0:ea:57:2c:a1:da:50:a6:d0:ba:
71:55:9f:ec:fe:54:f6:3d:bf:a0:59:48:a1:60:66:
a3:da:26:4a:cd:c2:a4:c9:e4:c0:13:95:53:b4:12:
e4:82:bb:52:36:d4:d5:0b:a6:d8:e1:7a:82:94:48:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:BD:8C:85:57:80:82:D5:CF:89:F5:C5:48:D6:A1:33:AD:3A:95
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:a400::/38
Signature Algorithm: sha256WithRSAEncryption
3d:59:6c:47:84:21:93:18:a3:5d:8d:3f:90:33:4a:1b:9c:15:
0d:e2:4a:e6:0b:96:60:ae:83:ab:f2:b9:77:d7:76:c7:0e:08:
40:12:31:cb:ff:66:aa:c9:8d:1e:41:c4:e4:d7:cd:64:f8:78:
88:f3:8b:83:68:b9:cc:33:ff:b2:47:c2:50:f0:b1:1a:7d:b8:
24:1a:0c:19:5f:fd:b0:31:f7:cc:26:23:c9:4a:69:8a:b5:b0:
74:fb:a8:37:bd:bf:15:7d:2d:b1:32:f7:19:bc:29:0c:df:f3:
5d:54:c1:dc:60:df:ef:da:03:5f:d5:50:3c:bd:aa:07:33:ab:
6f:3a:7d:4a:9c:43:dc:9c:9f:af:2b:30:23:63:8f:7a:9b:7f:
71:c1:dc:48:86:3f:c3:4a:8a:f2:b4:fa:eb:a9:02:46:57:8c:
da:ab:d1:8c:55:7d:68:49:03:aa:7a:7e:00:32:e0:55:cf:ee:
2d:fb:fa:bc:a0:e8:7c:f2:7a:85:9d:ef:dc:6a:c9:0d:67:d6:
a9:4c:09:2e:f5:ea:48:24:aa:3e:4f:55:f9:ef:a6:31:ef:59:
b5:91:3b:a8:db:8b:11:28:9c:7c:fe:f9:e9:c8:ee:32:5a:db:
9e:9a:8b:45:dc:77:e6:6c:04:18:9a:fc:a9:44:9f:d0:49:25:
dd:c2:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 08:57:08 2025 by rpki-client