Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214929.roa
File: AS214929.roa (raw, json)
Hash identifier: RNwrK3il8s3yVJ2oXdSTBzIuw3xDyPd1jPlzizPGkDs=
Subject key identifier: AC:FB:67:CC:4D:23:72:CD:B3:EC:2E:2A:57:D3:2E:4B:B8:7E:86:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62A3234FBF2136D45DDFD8A0FDBDEC86815B15EB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214929.roa
Signing time: Tue 07 Jul 2026 07:48:57 +0000
ROA not before: Tue 07 Jul 2026 07:43:57 +0000
ROA not after: Tue 06 Jul 2027 07:48:57 +0000
asID: 214929
IP address blocks: 2a13:9500:63::/48 maxlen: 48
2a13:9500:96::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a3:23:4f:bf:21:36:d4:5d:df:d8:a0:fd:bd:ec:86:81:5b:15:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 07:43:57 2026 GMT
Not After : Jul 6 07:48:57 2027 GMT
Subject: CN=ACFB67CC4D2372CDB3EC2E2A57D32E4BB87E86C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:55:a9:22:fe:dd:a9:39:ef:f6:2e:2b:62:
f8:c6:67:94:8a:20:c9:75:fc:4c:5f:b4:5a:1e:a9:
e6:5f:65:75:60:ea:93:2f:28:65:72:8f:88:36:8f:
65:50:4b:31:b2:ee:2c:2c:6c:f4:a8:90:73:03:9b:
0d:1b:bb:2d:39:98:48:bd:0f:df:a0:8e:3d:51:8f:
7f:ba:66:22:c9:93:c0:d2:71:e6:90:de:96:63:27:
58:c9:43:59:c7:a6:50:c5:89:f6:47:d7:51:29:8e:
c7:97:4d:66:dc:26:31:b6:e0:57:46:7a:e0:8a:f1:
32:1b:06:dd:dd:af:b8:0b:d0:5d:86:06:9b:82:ab:
47:da:ad:12:07:8a:96:ba:6f:79:10:e4:2b:8c:8a:
97:12:13:4a:d3:9b:ce:85:8c:82:8b:1d:de:73:39:
4e:19:1f:4b:60:a6:8c:10:78:3f:6e:04:70:f5:90:
db:64:8d:d5:dc:d7:65:ec:2d:94:00:d9:e7:81:26:
9d:9b:e5:50:4b:46:e9:03:16:0f:d0:21:d3:86:24:
77:61:ed:a5:bb:fc:3c:fb:41:a1:1c:ea:a9:a0:93:
5f:eb:f9:66:df:60:b7:2f:ce:f2:8b:ca:6e:7f:0e:
6c:9e:65:68:35:d3:fc:18:28:b5:cd:3e:dd:3b:ac:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:67:CC:4D:23:72:CD:B3:EC:2E:2A:57:D3:2E:4B:B8:7E:86:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:63::/48
2a13:9500:96::/48
Signature Algorithm: sha256WithRSAEncryption
20:d9:d0:ee:11:0e:ef:7d:67:8f:35:fd:05:fb:a8:c9:5b:2a:
e6:20:60:47:da:97:32:8a:2e:fa:92:5a:7f:48:1b:03:5b:3f:
ac:7b:93:86:ac:ec:f4:22:cc:f8:44:06:db:d4:5f:c6:e3:b4:
7a:48:a2:06:1e:24:33:dd:52:33:0f:40:63:cc:64:f8:69:30:
a4:71:b8:35:39:a4:ae:df:0d:4f:e6:94:5e:75:d5:23:47:e2:
a6:d3:26:83:5b:80:19:95:72:3a:2c:20:23:13:e2:aa:94:f6:
aa:f0:20:c7:5c:82:49:8c:f5:7c:cf:4c:96:df:8a:d4:38:07:
92:45:f0:11:cb:4c:82:f2:95:54:9e:a1:80:3d:97:76:be:52:
5e:f6:e6:04:3f:df:2a:b3:aa:6e:8c:32:2e:6d:d3:49:de:c5:
37:45:10:3c:bd:d3:29:9d:34:98:b2:72:20:67:1c:3a:38:7b:
17:b1:49:3d:65:d9:f5:af:d0:93:8e:72:ea:37:6b:f6:32:d9:
9b:fc:5f:bc:1b:78:49:bc:ad:d8:1b:df:57:2e:f3:08:5d:7f:
55:86:90:ad:f6:a2:36:63:d9:56:e4:b6:ef:fd:26:ef:40:a6:
34:63:ee:a8:d1:68:b2:9b:a0:39:68:cc:b9:1f:09:b6:98:ab:
5a:bb:d2:74
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUYqMjT78hNtRd39ig/b3shoFbFeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MDcwNzQzNTdaFw0yNzA3MDYwNzQ4NTdaMDMxMTAvBgNV
BAMTKEFDRkI2N0NDNEQyMzcyQ0RCM0VDMkUyQTU3RDMyRTRCQjg3RTg2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmFWpIv7dqTnv9i4rYvjGZ5SK
IMl1/ExftFoeqeZfZXVg6pMvKGVyj4g2j2VQSzGy7iwsbPSokHMDmw0buy05mEi9
D9+gjj1Rj3+6ZiLJk8DSceaQ3pZjJ1jJQ1nHplDFifZH11EpjseXTWbcJjG24FdG
euCK8TIbBt3dr7gL0F2GBpuCq0farRIHipa6b3kQ5CuMipcSE0rTm86FjIKLHd5z
OU4ZH0tgpowQeD9uBHD1kNtkjdXc12XsLZQA2eeBJp2b5VBLRukDFg/QIdOGJHdh
7aW7/Dz7QaEc6qmgk1/r+WbfYLcvzvKLym5/DmyeZWg10/wYKLXNPt07rNvBAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUrPtnzE0jcs2z7C4qV9MuS7h+hsQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0OTI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhOV
AABjAwcAKhOVAACWMA0GCSqGSIb3DQEBCwUAA4IBAQAg2dDuEQ7vfWePNf0F+6jJ
WyrmIGBH2pcyii76klp/SBsDWz+se5OGrOz0Isz4RAbb1F/G47R6SKIGHiQz3VIz
D0BjzGT4aTCkcbg1OaSu3w1P5pReddUjR+Km0yaDW4AZlXI6LCAjE+KqlPaq8CDH
XIJJjPV8z0yW34rUOAeSRfARy0yC8pVUnqGAPZd2vlJe9uYEP98qs6pujDIubdNJ
3sU3RRA8vdMpnTSYsnIgZxw6OHsXsUk9Zdn1r9CTjnLqN2v2Mtmb/F+8G3hJvK3Y
G99XLvMIXX9VhpCt9qI2Y9lW5Lbv/SbvQKY0Y+6o0Wiym6A5aMy5Hwm2mKtau9J0
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:08 2026 by rpki-client