Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214958.roa
File: AS214958.roa (raw, json)
Hash identifier: zrWaKagppFKS7dU26ClFgdOSaxw4Ox7OOaMCcTERsRg=
Subject key identifier: 85:EB:D4:EF:62:E8:A0:24:8E:66:E9:39:CE:64:34:36:B1:8D:3C:BB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 655FD7B195C0A9C6A820115AD00C3BDE53BFC43A
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214958.roa
Signing time: Wed 04 Nov 2026 20:32:49 +0000
ROA not before: Wed 04 Nov 2026 20:27:49 +0000
ROA not after: Wed 03 Nov 2027 20:32:49 +0000
asID: 214958
IP address blocks: 2a0e:8f02:f017::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5f:d7:b1:95:c0:a9:c6:a8:20:11:5a:d0:0c:3b:de:53:bf:c4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:49 2026 GMT
Not After : Nov 3 20:32:49 2027 GMT
Subject: CN=85EBD4EF62E8A0248E66E939CE643436B18D3CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:e1:0b:25:18:04:c9:c1:38:89:cc:c2:c9:
3a:2a:ca:d3:e6:6c:30:c8:ac:4c:a1:35:9a:71:a1:
ee:e2:fe:b5:6f:35:75:ab:d4:63:dd:24:ab:52:e5:
54:37:88:69:8c:9d:d0:e4:42:eb:df:68:03:7e:7b:
99:9c:e4:0c:65:8f:75:e7:39:b1:3b:24:9d:d5:66:
d1:17:58:84:96:44:f6:ef:eb:d8:ab:11:6e:86:94:
e5:7b:29:99:72:e6:b4:21:1c:f3:6a:0b:cc:79:cc:
33:2d:24:68:55:0a:5d:68:a2:3c:08:e3:d9:89:58:
15:e0:4c:5f:7d:49:03:ca:92:5d:bd:08:fd:cd:2c:
b2:6a:e6:66:f6:0c:c2:f1:94:da:52:be:62:ec:85:
bd:06:b8:64:bb:4e:d5:f6:87:d5:32:e2:ae:d2:12:
f1:e5:18:17:6b:19:fe:6e:0e:4e:8e:f1:d0:99:7b:
e9:3b:28:28:6d:4e:db:e6:32:4a:59:ef:27:a9:6e:
2a:ed:cf:7d:2a:7e:b2:54:f7:bd:ef:52:25:07:66:
dc:8f:83:4d:bd:1e:f1:23:55:45:29:8d:7e:34:54:
a2:f3:52:cd:ce:ed:77:6b:6b:c4:fa:e4:e4:35:c8:
5b:5a:02:df:1f:33:d7:57:09:ed:04:04:35:56:6d:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:D4:EF:62:E8:A0:24:8E:66:E9:39:CE:64:34:36:B1:8D:3C:BB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f017::/48
Signature Algorithm: sha256WithRSAEncryption
97:85:fb:26:ef:6c:4a:4f:e6:61:a5:3c:ca:32:95:0c:6b:a4:
70:f9:af:03:1b:12:82:f6:1c:a3:26:87:b1:df:66:d3:16:76:
ea:a4:64:64:75:87:6f:0d:d8:02:72:6e:7c:a9:7f:fc:c5:a3:
12:9d:cd:d0:d9:4a:da:59:f7:c9:ca:c6:e9:a0:14:f1:bd:91:
3c:e2:ac:93:29:8e:72:f3:06:91:18:42:44:0b:2a:5b:73:2a:
f8:56:80:15:88:01:a3:16:98:5f:1d:e0:28:f0:d2:be:f5:d8:
fe:77:9e:c6:e4:f1:8f:59:c8:ae:4a:84:fa:f2:53:17:48:7a:
10:52:8d:cc:95:6c:79:d4:12:31:31:d9:16:d4:b5:6a:7b:e7:
29:ea:b3:7a:b6:48:9b:06:a6:f2:cd:db:2b:43:3a:51:d7:c3:
b9:1f:a1:15:7a:e7:a4:0e:56:95:2d:ca:62:1f:e7:3e:9c:c5:
90:8f:3e:dc:ce:02:cb:af:1c:60:be:5c:de:69:1b:58:b6:c0:
9c:9e:bb:d5:37:59:b7:0f:7f:51:21:93:9c:33:31:c0:cc:f3:
b0:a9:d0:da:e8:a6:13:b5:8f:aa:7c:0d:02:1d:f1:6f:23:cc:
07:2b:d3:ea:47:2f:2e:5d:73:cd:2e:21:a8:7f:85:81:08:55:
0d:74:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:12:38 2026 by rpki-client