Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214451.roa
File: AS214451.roa (raw, json)
Hash identifier: j8xJ20URKhveJaPwlwXrnlGfxkWqmVQpCNbn2rai2Lw=
Subject key identifier: C2:D9:59:A2:0D:FF:B4:17:EA:3B:70:77:E4:0D:18:F6:13:43:C2:6B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4B3DC5BB68F8B30DCB2B3ABFE75BDEF61DB999E9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214451.roa
Signing time: Thu 07 Aug 2025 10:16:27 +0000
ROA not before: Thu 07 Aug 2025 10:11:27 +0000
ROA not after: Thu 06 Aug 2026 10:16:27 +0000
asID: 214451
IP address blocks: 2a0f:85c1:846::/48 maxlen: 48
2a0f:85c1:870::/44 maxlen: 48
2a0f:85c1:c80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3d:c5:bb:68:f8:b3:0d:cb:2b:3a:bf:e7:5b:de:f6:1d:b9:99:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 7 10:11:27 2025 GMT
Not After : Aug 6 10:16:27 2026 GMT
Subject: CN=C2D959A20DFFB417EA3B7077E40D18F61343C26B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:16:c1:a5:de:49:a1:8f:30:1d:aa:c0:fe:
e0:ef:1f:90:5b:be:a9:85:91:c3:ce:25:a0:34:a8:
c0:ce:dc:68:c9:f4:cc:d2:82:c1:f9:95:ac:ff:da:
50:39:2d:3a:0b:e5:75:f1:c4:32:11:43:ae:02:10:
af:dd:9a:7f:13:07:88:0a:f0:69:d4:8d:40:83:24:
fe:9b:b3:ef:ef:17:f0:b3:7b:33:56:b2:16:6d:53:
e4:ff:61:5f:b8:04:23:eb:17:67:0e:fb:fb:c5:06:
57:f5:17:29:0f:05:24:62:5f:d2:57:7d:39:53:52:
59:e2:23:59:ce:53:6b:f1:2c:20:fb:74:68:fa:59:
7a:91:da:4e:72:0f:f8:6e:a7:b3:77:f8:8c:55:4f:
f4:15:1c:e9:47:4c:09:02:59:3f:dd:60:62:f9:1c:
64:fc:c4:c8:2e:0e:51:e4:89:91:ea:2c:37:80:0b:
f9:a5:f5:a5:02:93:55:c7:40:c9:8b:94:26:4c:6f:
37:5e:64:39:21:c3:26:96:fc:3a:e3:40:aa:31:76:
83:de:8a:37:57:69:1f:f3:eb:30:08:0e:f2:33:55:
14:ac:9a:99:34:c8:ff:ba:d6:21:09:d7:6d:10:e0:
a7:02:63:21:38:9a:36:78:8b:9b:85:fe:86:4e:d8:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:59:A2:0D:FF:B4:17:EA:3B:70:77:E4:0D:18:F6:13:43:C2:6B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:846::/48
2a0f:85c1:870::/44
2a0f:85c1:c80::/44
Signature Algorithm: sha256WithRSAEncryption
1b:17:42:ee:39:e6:29:5b:a6:e6:d3:06:7c:4f:8d:45:3c:90:
25:43:d9:fa:e6:3c:13:3e:92:50:e1:6e:59:83:5c:4a:21:22:
02:4a:d5:f4:a8:f2:e1:b3:f5:bd:33:c8:e5:62:35:25:5e:05:
31:ec:3b:0b:d5:33:f0:df:4a:3d:f7:3c:d4:db:85:4b:20:67:
c3:85:28:1b:93:29:69:b8:c1:1c:dc:f2:56:e7:8e:b9:e0:af:
88:0a:78:7c:c7:87:86:42:77:98:0a:f4:29:2f:1a:df:f2:c6:
c8:88:54:b7:93:ea:6e:69:42:7f:35:eb:78:d7:c9:bd:fe:68:
14:d6:3e:18:5d:f1:b9:91:61:2a:d4:57:62:72:14:24:d6:d1:
0f:59:e3:9e:4c:12:50:58:2b:b2:60:cf:f8:43:e0:4b:b7:49:
f4:45:ff:a3:ed:4b:a4:17:65:94:08:6d:f9:e0:45:1a:2b:8b:
87:a9:e9:cc:d2:85:6a:d3:a3:72:ca:c7:dd:a7:90:39:dd:fd:
5d:6b:e2:6b:62:78:73:14:87:7d:14:09:b3:09:a2:6c:ac:f1:
af:6c:48:ef:5f:4a:ee:84:87:dc:f3:6a:27:23:4d:80:9a:44:
54:3d:fc:df:9d:01:9f:54:97:a5:69:d4:53:de:5c:ea:18:46:
fd:01:e2:e8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUSz3Fu2j4sw3LKzq/51ve9h25mekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MDcxMDExMjdaFw0yNjA4MDYxMDE2MjdaMDMxMTAvBgNV
BAMTKEMyRDk1OUEyMERGRkI0MTdFQTNCNzA3N0U0MEQxOEY2MTM0M0MyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4BbBpd5JoY8wHarA/uDvH5Bb
vqmFkcPOJaA0qMDO3GjJ9MzSgsH5laz/2lA5LToL5XXxxDIRQ64CEK/dmn8TB4gK
8GnUjUCDJP6bs+/vF/CzezNWshZtU+T/YV+4BCPrF2cO+/vFBlf1FykPBSRiX9JX
fTlTUlniI1nOU2vxLCD7dGj6WXqR2k5yD/hup7N3+IxVT/QVHOlHTAkCWT/dYGL5
HGT8xMguDlHkiZHqLDeAC/ml9aUCk1XHQMmLlCZMbzdeZDkhwyaW/DrjQKoxdoPe
ijdXaR/z6zAIDvIzVRSsmpk0yP+61iEJ120Q4KcCYyE4mjZ4i5uF/oZO2KQrAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUwtlZog3/tBfqO3B35A0Y9hNDwmswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NDUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg+F
wQhGAwcEKg+FwQhwAwcEKg+FwQyAMA0GCSqGSIb3DQEBCwUAA4IBAQAbF0LuOeYp
W6bm0wZ8T41FPJAlQ9n65jwTPpJQ4W5Zg1xKISICStX0qPLhs/W9M8jlYjUlXgUx
7DsL1TPw30o99zzU24VLIGfDhSgbkylpuMEc3PJW54654K+ICnh8x4eGQneYCvQp
Lxrf8sbIiFS3k+puaUJ/Net418m9/mgU1j4YXfG5kWEq1FdichQk1tEPWeOeTBJQ
WCuyYM/4Q+BLt0n0Rf+j7UukF2WUCG354EUaK4uHqenM0oVq06Nyysfdp5A53f1d
a+JrYnhzFId9FAmzCaJsrPGvbEjvX0ruhIfc82onI02AmkRUPfzfnQGfVJeladRT
3lzqGEb9AeLo
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:27 2025 by rpki-client