Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214929.roa
File: AS214929.roa (raw, json)
Hash identifier: TG3h3ctIQ2+dajVC70UW225RQvkSq/jY8Yrg3yMWuJc=
Subject key identifier: 19:18:0A:88:85:F1:07:4A:D6:1D:1E:BB:87:0F:F5:86:BF:D8:D2:7D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62069319B41B5209DEF115C278E43179F0AC5D60
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214929.roa
Signing time: Tue 05 Aug 2025 07:07:35 +0000
ROA not before: Tue 05 Aug 2025 07:02:35 +0000
ROA not after: Tue 04 Aug 2026 07:07:35 +0000
asID: 214929
IP address blocks: 2a13:9500:63::/48 maxlen: 48
2a13:9500:96::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:06:93:19:b4:1b:52:09:de:f1:15:c2:78:e4:31:79:f0:ac:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 5 07:02:35 2025 GMT
Not After : Aug 4 07:07:35 2026 GMT
Subject: CN=19180A8885F1074AD61D1EBB870FF586BFD8D27D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:75:2f:4a:f3:e0:a8:e6:6f:0e:40:6f:37:49:
f2:b9:1c:3d:34:21:09:7a:da:dc:9d:9d:e3:b6:dc:
66:b4:bf:c8:26:dd:ac:b2:1f:0c:71:ca:35:a6:1f:
b8:48:f0:b7:27:71:b5:1d:c2:23:dc:fe:c0:53:52:
7c:a4:48:40:0c:5c:78:2d:24:47:8b:fa:f1:86:2e:
90:cd:20:63:7e:81:f6:3b:8e:22:3a:9e:7c:ef:47:
5e:52:fd:63:35:78:1a:d7:1f:06:96:09:06:fc:96:
26:e8:77:cc:91:aa:aa:ec:35:35:a1:ec:73:c4:6d:
eb:df:6d:c9:c8:61:ae:46:01:ea:bc:07:04:42:bb:
8f:bb:c8:c3:c4:bb:39:30:47:34:34:40:ea:f7:f5:
a2:11:66:bb:43:44:37:f9:f6:de:4a:ee:fb:0b:4c:
2c:c1:01:f0:7c:57:2d:d3:c1:d5:1c:e9:dd:17:47:
4d:fb:85:1c:7a:51:97:5b:14:a4:3f:6b:8b:84:16:
6c:37:ce:3b:03:e6:6f:99:67:2f:d9:9e:6f:55:17:
0e:51:61:c1:d6:33:63:a7:7f:03:67:01:6e:9d:82:
4c:e6:bd:a4:3d:73:ea:70:d2:b4:6d:94:1f:c0:cd:
b3:bc:0a:57:d4:5f:ce:42:54:c3:fe:6f:91:22:c9:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:0A:88:85:F1:07:4A:D6:1D:1E:BB:87:0F:F5:86:BF:D8:D2:7D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:63::/48
2a13:9500:96::/48
Signature Algorithm: sha256WithRSAEncryption
01:3e:c5:82:18:a8:77:e3:28:96:d5:80:2b:84:a3:f2:64:9b:
33:1a:d0:0a:87:2d:e9:d2:2c:28:95:fc:b5:25:3e:64:ae:b5:
50:15:de:ff:e2:70:7f:c0:fb:b0:51:f0:cf:be:d8:c4:6a:2f:
ae:a4:c6:6b:31:bb:08:61:e6:d8:55:88:b8:cc:53:b3:68:67:
0e:30:a3:e3:90:03:b5:5b:04:ea:4d:38:4b:25:65:39:24:f0:
1e:e8:4f:80:7e:aa:35:95:51:37:b5:d5:e4:7e:9a:29:a6:ae:
2f:a5:3c:4f:d6:81:a2:3e:bd:12:b2:0d:30:fe:07:65:ae:22:
92:cf:14:30:1d:4e:b1:af:72:cf:34:41:74:0c:d8:b7:ad:c5:
53:1a:07:8c:14:2b:e1:f2:9d:3a:d7:6d:2f:a3:42:0d:94:68:
28:5f:00:ee:e2:c6:8e:7c:07:51:55:af:b6:9f:ac:d1:26:f7:
07:e6:9d:74:f8:73:35:02:23:94:13:0f:98:e8:b4:01:9c:03:
4e:1f:53:72:92:cf:19:bf:04:be:d5:af:14:12:d3:53:f5:b9:
1a:fb:60:fe:50:8d:e1:08:70:c1:40:e8:00:e3:79:ad:a1:7d:
5f:21:a5:21:26:a4:8d:3e:2e:37:50:d0:4f:0b:b1:44:88:b7:
d4:c2:85:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUYgaTGbQbUgne8RXCeOQxefCsXWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA4MDUwNzAyMzVaFw0yNjA4MDQwNzA3MzVaMDMxMTAvBgNV
BAMTKDE5MTgwQTg4ODVGMTA3NEFENjFEMUVCQjg3MEZGNTg2QkZEOEQyN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMdS9K8+Co5m8OQG83SfK5HD00
IQl62tydneO23Ga0v8gm3ayyHwxxyjWmH7hI8LcncbUdwiPc/sBTUnykSEAMXHgt
JEeL+vGGLpDNIGN+gfY7jiI6nnzvR15S/WM1eBrXHwaWCQb8libod8yRqqrsNTWh
7HPEbevfbcnIYa5GAeq8BwRCu4+7yMPEuzkwRzQ0QOr39aIRZrtDRDf59t5K7vsL
TCzBAfB8Vy3TwdUc6d0XR037hRx6UZdbFKQ/a4uEFmw3zjsD5m+ZZy/Znm9VFw5R
YcHWM2OnfwNnAW6dgkzmvaQ9c+pw0rRtlB/AzbO8ClfUX85CVMP+b5EiyfanAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUGRgKiIXxB0rWHR67hw/1hr/Y0n0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0OTI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhOV
AABjAwcAKhOVAACWMA0GCSqGSIb3DQEBCwUAA4IBAQABPsWCGKh34yiW1YArhKPy
ZJszGtAKhy3p0iwolfy1JT5krrVQFd7/4nB/wPuwUfDPvtjEai+upMZrMbsIYebY
VYi4zFOzaGcOMKPjkAO1WwTqTThLJWU5JPAe6E+Afqo1lVE3tdXkfpoppq4vpTxP
1oGiPr0Ssg0w/gdlriKSzxQwHU6xr3LPNEF0DNi3rcVTGgeMFCvh8p06120vo0IN
lGgoXwDu4saOfAdRVa+2n6zRJvcH5p10+HM1AiOUEw+Y6LQBnANOH1Nyks8ZvwS+
1a8UEtNT9bka+2D+UI3hCHDBQOgA43mtoX1fIaUhJqSNPi43UNBPC7FEiLfUwoXv
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:28 2025 by rpki-client