Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214762.roa
File: AS214762.roa (raw, json)
Hash identifier: O3WQ17qAjukcIfuZw1QeK/ZsIxKjuHMJ/n1kiVGEQ+g=
Subject key identifier: CA:68:67:0A:C1:37:D4:F4:2C:80:B4:D9:2D:C2:37:3A:86:78:6D:B6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 17FBD85A85C381E846D20B5E473FF642B9A5C949
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214762.roa
Signing time: Tue 23 Jun 2026 11:03:51 +0000
ROA not before: Tue 23 Jun 2026 10:58:51 +0000
ROA not after: Tue 22 Jun 2027 11:03:51 +0000
asID: 214762
IP address blocks: 2a14:7580:ff9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fb:d8:5a:85:c3:81:e8:46:d2:0b:5e:47:3f:f6:42:b9:a5:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 23 10:58:51 2026 GMT
Not After : Jun 22 11:03:51 2027 GMT
Subject: CN=CA68670AC137D4F42C80B4D92DC2373A86786DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:b3:29:07:8b:78:88:ea:0d:be:f7:e8:03:
d0:73:d9:3e:f5:7e:17:bc:f1:fc:7c:1c:26:2a:c9:
8b:b0:53:26:5d:0c:b9:63:c8:bf:e7:1e:e3:2b:6f:
22:ec:86:99:9e:96:57:81:c4:5b:17:a5:aa:e2:8a:
a8:56:f9:09:ee:57:f8:2a:0e:63:ea:27:01:d1:66:
e4:17:68:37:53:be:b7:2b:b1:14:37:cf:32:0d:8f:
a7:ad:5b:30:08:ef:53:c0:54:e4:dc:0a:8c:08:ea:
0a:c9:c6:ee:4a:0c:87:ef:79:5d:e2:49:fd:bd:1e:
9d:3a:68:57:8f:44:69:46:60:2f:8e:b8:2e:08:9d:
df:94:0d:4c:dd:c1:b2:67:f8:fc:f6:8c:fb:77:40:
94:7e:25:fe:d3:20:6f:31:28:f4:be:85:b2:17:d0:
27:6f:90:21:09:f8:66:ce:eb:b1:df:42:2f:68:dc:
77:59:55:94:83:72:68:01:85:33:17:2a:f9:73:1b:
2b:49:b5:e5:02:fe:d5:6b:60:20:14:01:2b:cf:d4:
b6:ff:eb:3b:71:04:d2:06:10:70:3b:bd:4e:ed:cb:
1b:c9:76:a0:2f:54:f7:a1:d8:58:e4:bd:bb:2a:22:
58:39:24:e1:6d:af:5a:10:22:61:63:ef:eb:1d:90:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:67:0A:C1:37:D4:F4:2C:80:B4:D9:2D:C2:37:3A:86:78:6D:B6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9c::/48
Signature Algorithm: sha256WithRSAEncryption
4e:5e:e5:8d:9d:ee:a6:29:19:fa:aa:b8:27:c4:0e:d3:20:77:
71:4d:31:f3:b2:71:6c:e5:07:47:0d:d5:2f:63:b0:50:9d:e2:
58:00:96:6d:fc:d5:c7:c8:f0:74:59:72:13:a0:93:d3:30:ed:
2b:6e:3c:14:08:66:79:20:13:2e:e1:41:5c:62:89:ef:08:6d:
f2:e2:7c:b0:af:af:0c:3e:40:f7:a3:80:61:da:e6:99:7d:9e:
6c:49:a6:f1:7d:45:46:64:70:95:f0:8c:ad:d2:7d:6b:b2:41:
24:f7:0a:3e:92:12:68:5e:30:57:b4:f5:d9:0b:c5:3e:9a:88:
0e:03:ce:b1:68:c6:3b:ad:ec:91:0e:04:d3:4b:2c:1f:ff:75:
b5:84:92:2c:f8:cf:e0:17:e1:43:c8:05:b1:16:66:10:0f:61:
92:ea:0f:14:07:99:8d:f7:a5:8f:1d:78:80:f9:9d:71:fa:39:
a1:ad:90:fd:a2:66:e7:b4:ce:ce:64:ff:d3:05:e1:ab:7c:db:
33:d8:bf:71:75:cf:ed:04:bf:e9:a3:b8:44:93:5b:03:57:a6:
ac:1f:0f:98:20:00:3e:5b:b1:8d:a0:58:45:32:88:11:42:df:
99:8e:68:7c:3d:c8:93:6a:b0:3c:ce:06:84:61:af:ce:01:51:
c5:be:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:02:01 2026 by rpki-client