Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214182.roa
File: AS214182.roa (raw, json)
Hash identifier: vAsm8I3LVWCGdF75VGEajpPDO60z93NVlbhhuwF4bQY=
Subject key identifier: 0A:FD:B9:50:BB:4D:09:8B:8D:CA:FF:FE:B1:2F:3D:19:E6:3D:FF:6D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 74275A11338C20D38AD8E7E5D75143A129B65A04
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214182.roa
Signing time: Wed 17 Sep 2025 03:07:52 +0000
ROA not before: Wed 17 Sep 2025 03:02:52 +0000
ROA not after: Wed 16 Sep 2026 03:07:52 +0000
asID: 214182
IP address blocks: 2a0f:85c1:89e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:27:5a:11:33:8c:20:d3:8a:d8:e7:e5:d7:51:43:a1:29:b6:5a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 03:02:52 2025 GMT
Not After : Sep 16 03:07:52 2026 GMT
Subject: CN=0AFDB950BB4D098B8DCAFFFEB12F3D19E63DFF6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:c8:76:c3:44:d0:4b:4c:91:35:ae:ab:82:
c2:52:9f:f2:50:d1:bb:de:9d:b3:1e:72:3f:a7:3b:
96:67:51:4e:a9:91:96:86:d3:79:a1:b1:72:29:d7:
e4:86:81:f7:50:5f:19:03:e5:4f:f7:83:db:83:80:
f4:b4:3b:69:89:16:7e:e5:b4:df:c1:39:21:8f:0c:
d1:b2:eb:5e:85:87:92:9e:3e:f5:16:f8:41:fd:b2:
8a:ee:1f:83:a5:80:0e:00:20:99:00:7a:e3:fa:8d:
57:61:58:89:26:c7:0b:12:c1:98:3b:a2:92:bb:e3:
cd:a4:ac:45:8b:1e:0b:7f:6d:88:3a:30:d3:62:23:
30:a3:ed:69:3f:9e:02:76:97:b4:f5:2a:3f:0c:b8:
aa:dd:9a:e5:7d:a3:48:e7:d3:9d:bd:20:65:70:2e:
5b:a2:e5:fc:45:e6:09:e4:22:29:2f:22:fc:09:f8:
52:1a:63:f8:64:4f:a1:0d:46:0d:64:c4:e3:bf:bc:
81:bf:f2:95:cf:b8:c8:ed:cf:b6:6b:90:10:c6:fd:
a0:3c:ce:04:34:28:67:ee:6d:4d:40:20:05:34:33:
7e:cd:42:50:74:b2:5b:8d:d1:d2:89:6d:1e:42:34:
bb:18:90:47:50:69:b0:00:35:46:0e:36:89:9f:bd:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:B9:50:BB:4D:09:8B:8D:CA:FF:FE:B1:2F:3D:19:E6:3D:FF:6D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:89e::/48
Signature Algorithm: sha256WithRSAEncryption
1a:ea:64:0a:8e:7f:36:9f:b7:69:cd:74:f4:1c:c3:09:1b:b5:
a4:8d:72:7c:5c:b8:0a:1f:f5:d3:7f:5c:c5:d9:d3:41:e7:3d:
25:4c:8d:7e:b5:36:f2:5f:de:db:82:0b:eb:94:38:03:5b:ae:
0e:15:d5:ad:e3:0c:41:0f:27:aa:89:a4:29:56:90:8a:43:d6:
d7:36:24:81:6e:2e:fd:98:a9:ea:60:9d:20:c4:8b:3b:29:95:
df:ac:07:3a:4e:bb:0b:5e:b0:7d:6f:82:ba:bf:0e:9c:d4:b1:
2f:1a:d6:01:4f:92:4f:37:47:21:4a:bd:d8:20:13:40:f7:e6:
07:2c:5f:6e:3a:f1:63:02:df:28:73:d2:e1:16:1e:d3:4c:06:
4a:a9:f2:24:5f:21:4d:ab:ae:fa:32:c6:36:5e:ac:bd:16:7a:
ee:7e:6c:9a:8c:1e:d4:29:31:9c:ed:21:63:14:28:47:25:14:
11:83:f5:73:19:b5:5a:21:d5:7a:b2:20:eb:6f:f9:41:76:1f:
18:0b:35:20:4f:3d:24:5c:31:bb:16:75:be:b7:6b:2c:f1:c4:
ae:8c:ed:94:9e:30:8b:a2:89:d1:75:8f:ca:53:68:4f:38:80:
d6:dd:c2:45:f0:7f:cc:70:52:00:97:8a:66:e6:bf:d5:f6:9b:
28:99:35:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUdCdaETOMINOK2Ofl11FDoSm2WgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA5MTcwMzAyNTJaFw0yNjA5MTYwMzA3NTJaMDMxMTAvBgNV
BAMTKDBBRkRCOTUwQkI0RDA5OEI4RENBRkZGRUIxMkYzRDE5RTYzREZGNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVV8h2w0TQS0yRNa6rgsJSn/JQ
0bvenbMecj+nO5ZnUU6pkZaG03mhsXIp1+SGgfdQXxkD5U/3g9uDgPS0O2mJFn7l
tN/BOSGPDNGy616Fh5KePvUW+EH9soruH4OlgA4AIJkAeuP6jVdhWIkmxwsSwZg7
opK7482krEWLHgt/bYg6MNNiIzCj7Wk/ngJ2l7T1Kj8MuKrdmuV9o0jn0529IGVw
Llui5fxF5gnkIikvIvwJ+FIaY/hkT6ENRg1kxOO/vIG/8pXPuMjtz7ZrkBDG/aA8
zgQ0KGfubU1AIAU0M37NQlB0sluN0dKJbR5CNLsYkEdQabAANUYONomfvdhNAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUCv25ULtNCYuNyv/+sS89GeY9/20wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0MTgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQieMA0GCSqGSIb3DQEBCwUAA4IBAQAa6mQKjn82n7dpzXT0HMMJG7WkjXJ8XLgK
H/XTf1zF2dNB5z0lTI1+tTbyX97bggvrlDgDW64OFdWt4wxBDyeqiaQpVpCKQ9bX
NiSBbi79mKnqYJ0gxIs7KZXfrAc6TrsLXrB9b4K6vw6c1LEvGtYBT5JPN0chSr3Y
IBNA9+YHLF9uOvFjAt8oc9LhFh7TTAZKqfIkXyFNq676MsY2Xqy9FnrufmyajB7U
KTGc7SFjFChHJRQRg/VzGbVaIdV6siDrb/lBdh8YCzUgTz0kXDG7FnW+t2ss8cSu
jO2UnjCLoonRdY/KU2hPOIDW3cJF8H/McFIAl4pm5r/V9psomTUC
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:58 2025 by rpki-client