Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214442.roa
File: AS214442.roa (raw, json)
Hash identifier: Yh+vEz8I/A+txWrJwHiOujwA/VWeSv7hMvdXaGs5nm4=
Subject key identifier: 5B:BD:43:E9:CA:33:CD:DF:BB:F7:F2:F2:69:03:0B:FD:24:B5:A0:42
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4E55A2C62D14095EE6AFA814CB9ABD11A8AE124C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214442.roa
Signing time: Thu 23 Apr 2026 04:08:33 +0000
ROA not before: Thu 23 Apr 2026 04:03:33 +0000
ROA not after: Thu 22 Apr 2027 04:08:33 +0000
asID: 214442
IP address blocks: 2a0f:85c1:84a::/48 maxlen: 48
2a0f:85c1:c1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:55:a2:c6:2d:14:09:5e:e6:af:a8:14:cb:9a:bd:11:a8:ae:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 23 04:03:33 2026 GMT
Not After : Apr 22 04:08:33 2027 GMT
Subject: CN=5BBD43E9CA33CDDFBBF7F2F269030BFD24B5A042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6f:7e:31:62:56:ad:49:f1:cb:89:d7:75:8c:
0d:66:d7:1a:b9:5c:0e:8c:ea:b8:4b:23:52:bd:b4:
45:51:70:ef:18:02:12:8a:d9:08:fa:4a:a2:fd:22:
4d:cf:ea:2f:e6:05:ca:24:0d:70:92:ea:9f:0f:9c:
a3:a6:45:cc:62:c0:ca:4a:26:0a:ab:70:2b:af:9b:
17:d5:ab:b1:b2:2d:24:52:f9:dc:34:d7:86:2e:5c:
d2:f9:09:38:88:f6:1e:44:dc:7b:81:07:f0:39:8b:
a5:e1:f8:02:03:bf:9e:63:07:36:b8:6a:e1:de:84:
01:55:96:45:20:95:ae:8b:5b:e2:92:6d:73:70:24:
bb:44:04:c7:df:4f:ed:4f:e2:d8:45:45:4f:7d:2a:
2d:e4:fa:16:30:70:46:8c:28:a8:a1:fc:74:22:e9:
e6:8e:0d:e5:7d:93:51:88:0d:51:6e:30:65:4b:23:
96:50:6e:2a:a0:66:49:ff:c5:8b:5b:51:54:45:b6:
da:02:0b:60:a6:9b:74:d6:e7:75:70:6e:63:d3:26:
2b:e0:5c:90:2f:f2:25:d9:94:b6:36:a3:5f:60:71:
88:af:bb:50:99:d3:26:48:c7:dc:5e:06:d4:a2:2a:
1e:bf:32:b6:68:61:6c:85:16:2a:f7:73:4b:cc:b6:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:43:E9:CA:33:CD:DF:BB:F7:F2:F2:69:03:0B:FD:24:B5:A0:42
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214442.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:84a::/48
2a0f:85c1:c1b::/48
Signature Algorithm: sha256WithRSAEncryption
cd:7a:c3:8f:f3:e6:bc:75:5c:64:78:d4:86:80:37:ab:3e:f7:
5a:00:73:a0:4a:6a:25:07:84:87:97:d0:0d:12:a0:51:b5:3c:
6c:f5:70:97:cd:74:79:c3:80:7c:b5:5f:63:6f:6d:8d:7d:d0:
96:89:f3:7b:eb:31:fd:71:e9:c5:41:78:f1:0c:d4:c1:2f:47:
70:1f:31:2c:32:d0:fa:08:eb:15:20:be:56:cc:d6:9f:82:be:
de:90:25:79:63:86:72:7d:b6:46:bc:02:f8:c4:7a:40:fa:64:
54:da:b6:b8:fd:de:b2:86:2f:28:db:50:4c:d5:1b:1f:51:97:
58:88:c6:9f:f0:9c:1f:ee:e2:98:fc:e5:0b:5c:6c:7f:e0:cc:
89:a0:27:29:dd:13:64:44:05:4d:76:6c:31:10:5b:fd:ef:d4:
85:d9:a0:12:27:a3:c8:af:11:ce:3a:cd:05:7d:6e:ae:49:a1:
76:ca:73:9e:bb:5d:78:32:24:78:bf:54:5a:89:95:fc:f7:68:
92:32:40:34:51:9b:6f:a8:a7:e6:9a:fe:02:10:c1:24:68:5b:
79:48:36:79:ed:dc:ee:af:ff:83:e5:74:fb:74:fb:a5:c9:8f:
8b:16:96:73:6a:df:c3:d7:f7:33:1d:9e:e3:20:45:87:cd:d4:
31:80:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:06:54 2026 by rpki-client