Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214394.roa
File: AS214394.roa (raw, json)
Hash identifier: AATpMkHBhX75BQyMClDmSRlmGIbVSkpEyj9R9Foy7gw=
Subject key identifier: E8:86:A1:81:09:23:B1:98:55:8C:33:21:8B:D1:F2:CE:84:3F:20:1B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0CFAA1B8E3FD290685C7E56BCD07A688ACB70B94
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214394.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 214394
IP address blocks: 2a0f:85c1:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:fa:a1:b8:e3:fd:29:06:85:c7:e5:6b:cd:07:a6:88:ac:b7:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=E886A1810923B198558C33218BD1F2CE843F201B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:0a:a6:e9:bb:34:b4:a9:7c:46:cf:dd:27:
86:c7:0a:99:1b:60:ed:e1:57:6c:d5:31:e9:e3:fb:
66:85:10:9f:d4:1d:7d:c9:93:6d:ec:b4:e1:c5:7c:
3e:63:0f:61:7f:45:c3:62:d4:94:3e:ea:39:d1:bf:
64:cc:a8:27:4b:79:be:b8:8e:5e:21:53:41:ab:9b:
8e:69:85:0d:fd:0d:96:7c:fd:d3:83:07:97:f7:8b:
af:9f:3b:2e:4b:02:e2:72:46:77:39:9e:bb:e3:bb:
3f:74:a8:a1:bb:d0:88:86:f0:d1:d9:f3:fc:3e:f3:
8d:0b:f6:db:29:90:f4:13:32:07:a6:71:dd:ec:a9:
41:dc:44:5e:7a:5d:6a:b5:30:ca:73:6d:bb:b5:53:
8c:f9:4e:ec:1c:bc:6f:4c:de:d7:2d:04:38:40:b3:
60:a0:e1:98:5c:c2:74:2f:60:bb:91:b9:9c:9b:05:
ef:7a:06:9a:c7:d9:b6:f7:22:00:59:b8:3c:dc:a6:
6d:0c:27:dd:23:92:ea:2e:71:4f:10:c2:01:22:93:
55:1e:f8:73:a4:2a:d0:f1:a8:d0:36:ab:14:fe:de:
e4:02:73:84:ed:0f:06:1e:f9:c2:ec:65:3c:40:ec:
da:83:a2:09:63:0c:db:9f:26:3a:d0:fc:1c:8a:de:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:A1:81:09:23:B1:98:55:8C:33:21:8B:D1:F2:CE:84:3F:20:1B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:880::/48
Signature Algorithm: sha256WithRSAEncryption
61:b5:06:c1:69:91:f4:64:e3:dc:da:60:a8:24:04:c3:dc:c5:
ef:99:b0:10:b5:d2:ce:d6:e3:74:2a:7b:a7:ad:e0:dc:29:a0:
81:25:0f:23:ee:41:96:f1:9e:32:64:d0:86:8b:98:4c:c5:4c:
86:91:a1:fe:42:5a:36:cd:79:fd:68:51:e9:0c:d2:0c:f7:8d:
18:94:80:ef:42:35:f7:7b:a3:e5:95:9f:45:23:bc:42:fc:f6:
a1:ba:f5:b6:91:ab:56:cf:8c:f3:3c:4a:1d:37:9d:46:16:70:
4c:57:32:88:2b:d1:fb:8e:ba:e1:66:73:a3:0f:de:0a:61:1f:
f8:ab:d4:ae:dc:3a:75:0c:41:0f:88:76:75:46:3f:09:63:f2:
ec:32:f2:cf:af:b9:2e:3a:6b:1a:c9:73:c3:cd:ef:ec:1a:68:
ff:05:b2:a9:4a:eb:4a:e4:76:1f:c2:0c:ab:12:e7:37:12:ac:
bc:5e:95:e4:93:c5:b9:96:5a:29:72:0a:db:5e:1e:d7:82:84:
09:8d:df:5e:10:a7:dc:1c:4d:50:0c:9b:cd:97:68:62:15:86:
55:98:2c:58:78:35:11:82:c0:64:61:32:5e:00:0f:18:0a:d6:
9e:af:9c:77:29:4e:de:60:fd:75:22:d1:b1:37:d1:3a:34:b7:
a8:c5:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:27 2025 by rpki-client