Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214498.roa
File: AS214498.roa (raw, json)
Hash identifier: OTL8OhinfAfqrejMQ8GgSbOh53P9lShvO4S4z4Ldpug=
Subject key identifier: 9A:3A:7C:EC:00:3A:3D:E7:A0:14:90:37:09:4E:FB:2E:74:81:4F:6E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1B09E1AFD1EF109A1B61AF45A293CB0206ADC62E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214498.roa
Signing time: Sun 21 Sep 2025 14:51:14 +0000
ROA not before: Sun 21 Sep 2025 14:46:14 +0000
ROA not after: Sun 20 Sep 2026 14:51:14 +0000
asID: 214498
IP address blocks: 195.200.20.0/24 maxlen: 24
2a0f:85c1:32a::/48 maxlen: 48
2a0f:85c1:b70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:09:e1:af:d1:ef:10:9a:1b:61:af:45:a2:93:cb:02:06:ad:c6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 21 14:46:14 2025 GMT
Not After : Sep 20 14:51:14 2026 GMT
Subject: CN=9A3A7CEC003A3DE7A0149037094EFB2E74814F6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:af:77:e3:aa:fd:64:be:a5:30:41:2e:c6:
5e:4c:dd:f1:72:e0:f2:4b:41:7e:70:d3:de:7d:a2:
2a:a2:01:6c:7a:d1:b1:71:a3:15:9b:1a:d0:28:94:
62:a9:78:41:11:f2:bf:f6:0d:2d:8b:59:11:6c:c6:
f8:42:e7:df:c8:0a:ea:05:4b:e5:13:51:1e:3b:65:
d2:05:17:ff:30:23:9b:59:8a:a6:17:61:25:73:92:
4f:c1:19:b0:02:48:06:b8:21:06:fc:d0:17:13:e3:
be:13:04:8a:57:e9:59:1f:39:89:97:f1:94:8e:1f:
59:4d:56:39:09:5e:d0:70:b1:a7:7f:2f:a6:c8:2c:
b0:e3:ce:0d:d7:6f:c8:30:ce:af:bb:6a:bd:3a:ae:
59:e1:3b:e4:f7:3b:07:f4:ea:4d:22:9c:8b:98:d7:
22:4e:b2:b5:df:c1:f9:71:e4:9b:f6:b8:c5:26:6e:
ba:55:ec:0b:cb:b2:3e:c5:63:52:68:c7:5b:76:5f:
37:88:1d:45:75:6c:9a:c6:17:9c:47:48:52:0c:9d:
3b:75:da:55:2e:eb:2f:f6:d1:ba:1e:32:77:7e:29:
b2:af:b9:08:f4:1b:6b:29:f0:9b:83:40:49:e1:4e:
b5:07:4b:74:e4:87:5c:5d:1f:b4:f0:92:ab:5d:43:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:7C:EC:00:3A:3D:E7:A0:14:90:37:09:4E:FB:2E:74:81:4F:6E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214498.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.20.0/24
IPv6:
2a0f:85c1:32a::/48
2a0f:85c1:b70::/48
Signature Algorithm: sha256WithRSAEncryption
b5:85:8f:39:ce:29:5b:d4:5e:95:2f:13:35:62:fb:97:0c:f1:
0c:c0:ba:49:64:a8:52:5d:10:6e:7b:30:ab:66:74:39:64:17:
c6:83:c5:72:f9:72:f8:a3:5d:67:53:e4:e0:73:ab:78:df:ef:
22:3b:8f:ed:43:ed:9a:87:d2:99:48:3c:a8:f0:59:83:c6:4d:
f7:02:1e:d9:b4:8c:6c:57:fb:83:0a:bc:d6:ba:39:f2:bb:24:
4b:7e:2d:ce:2f:73:f0:b4:8e:f9:5e:e6:c1:3b:d5:8c:2c:24:
c4:46:8a:79:ef:7d:98:d0:47:56:92:31:b5:23:10:2b:8e:f7:
db:65:e5:09:59:6c:65:48:97:c2:39:6c:30:02:4c:8c:4b:50:
12:b2:ac:80:04:ce:d0:f1:cd:1f:15:72:d7:6b:cd:88:ac:5e:
96:88:fe:b4:72:73:23:2c:13:b2:97:86:2e:79:44:c4:8e:e6:
4c:c7:fb:dc:0c:2d:2f:ef:61:9e:aa:4e:3e:a3:62:17:27:79:
97:83:d0:ea:2a:2a:a1:d2:ea:da:c1:11:0b:b6:8b:4f:7a:aa:
ec:90:1e:6e:75:d1:a5:5f:0d:15:eb:4a:52:cb:a1:61:6d:f0:
04:5a:84:eb:7f:88:c0:85:4f:be:6d:87:69:4c:f2:b3:d1:b7:
cc:a0:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:30 2025 by rpki-client