Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214501.roa
File: AS214501.roa (raw, json)
Hash identifier: NYGToCr7DYS/0AsOuox5y9ptvNIfd/B3ZxiDYyMtCCM=
Subject key identifier: 70:01:74:A7:B9:05:D2:40:8B:AE:B6:ED:83:9A:A3:0F:63:80:EF:DC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7CE7C1EEADED8D8CFC7D956B9AE694C0FAAEA8F8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214501.roa
Signing time: Thu 16 Oct 2025 17:07:57 +0000
ROA not before: Thu 16 Oct 2025 17:02:57 +0000
ROA not after: Thu 15 Oct 2026 17:07:57 +0000
asID: 214501
IP address blocks: 2a0f:85c1:83b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e7:c1:ee:ad:ed:8d:8c:fc:7d:95:6b:9a:e6:94:c0:fa:ae:a8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 16 17:02:57 2025 GMT
Not After : Oct 15 17:07:57 2026 GMT
Subject: CN=700174A7B905D2408BAEB6ED839AA30F6380EFDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:21:f1:07:5c:12:8d:31:3a:4e:d6:c4:3d:
d7:b1:52:10:3d:b5:a4:39:b2:99:c7:56:ed:02:21:
c0:ca:f8:8b:c0:fb:34:26:c4:bb:4a:f8:ab:4e:7a:
98:70:55:75:36:7e:9c:00:f9:69:df:2e:85:1b:2e:
eb:28:ac:ca:d4:6c:ea:59:2b:98:f2:86:85:80:0a:
50:4c:54:4b:4a:74:b6:a3:ab:bd:dd:cb:9e:3a:2d:
b2:96:66:9f:c6:ea:15:d2:e2:6c:18:18:de:47:1a:
91:4a:f1:85:11:ff:21:97:5a:fb:6b:63:ea:99:34:
4d:04:4a:2d:4a:2f:2b:19:e2:0d:9e:c2:9c:d4:c6:
9d:ec:26:86:11:2c:1f:90:b7:22:75:70:aa:59:26:
3b:7f:b9:4e:04:03:dc:8f:6c:62:ce:fa:95:f6:aa:
59:92:c4:05:f9:85:02:af:c4:64:cd:f7:c0:e9:4f:
92:d3:7e:3d:5b:34:a8:bc:f9:1b:e4:cf:cd:6f:ea:
85:51:11:37:59:48:87:55:56:e6:1a:04:52:fb:7f:
cf:be:93:5c:a9:f2:65:4f:28:53:f9:6f:dc:56:83:
75:0c:e2:9c:1f:35:d9:2d:c1:3b:7a:8c:ac:e2:33:
2f:50:87:1e:80:84:26:4c:47:f5:d6:16:81:c9:0c:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:01:74:A7:B9:05:D2:40:8B:AE:B6:ED:83:9A:A3:0F:63:80:EF:DC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:83b::/48
Signature Algorithm: sha256WithRSAEncryption
56:79:fb:8c:b4:18:4f:60:67:10:37:18:9a:0d:00:1f:35:a7:
5d:9c:8e:44:4c:78:c2:a9:aa:02:3d:70:54:4d:19:a7:76:0d:
45:da:46:95:30:f6:f2:e6:e9:57:81:79:cc:40:9e:62:0b:b9:
c5:32:c2:4a:65:ae:61:80:c8:a5:33:75:ba:c5:be:86:f1:04:
fc:c9:7b:59:30:eb:2e:f8:fb:25:4e:50:cc:0d:90:3b:4e:08:
10:07:1d:65:04:7b:d9:b1:20:a7:63:00:09:23:5e:9b:5e:1d:
a2:cf:10:d0:7a:45:54:a3:62:2b:96:49:8e:e4:d1:63:bf:c0:
e5:ac:03:f9:23:e3:31:00:ad:76:f5:24:ff:29:7a:31:7d:bd:
ba:21:f7:57:39:15:16:7f:f0:0a:cb:b9:e2:dc:bd:2a:f8:7c:
a4:4d:68:7b:55:ba:50:c1:cf:ea:9a:c9:18:2e:67:e6:89:9d:
f5:c5:30:dd:05:85:3f:2a:7f:39:51:52:8f:e6:d6:8c:58:10:
e8:1d:e7:e7:c1:f3:43:6a:2e:5c:8c:bf:4c:1c:bf:cf:28:ce:
b7:b5:e6:be:77:d6:6d:28:5d:c3:d0:93:1a:7b:5b:9b:01:8e:
d9:d1:9f:f3:fd:1e:70:6f:a8:0f:90:1c:d8:10:8a:ae:5b:f6:
23:cc:3a:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUfOfB7q3tjYz8fZVrmuaUwPquqPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTEwMTYxNzAyNTdaFw0yNjEwMTUxNzA3NTdaMDMxMTAvBgNV
BAMTKDcwMDE3NEE3QjkwNUQyNDA4QkFFQjZFRDgzOUFBMzBGNjM4MEVGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZyHxB1wSjTE6TtbEPdexUhA9
taQ5spnHVu0CIcDK+IvA+zQmxLtK+KtOephwVXU2fpwA+WnfLoUbLusorMrUbOpZ
K5jyhoWAClBMVEtKdLajq73dy546LbKWZp/G6hXS4mwYGN5HGpFK8YUR/yGXWvtr
Y+qZNE0ESi1KLysZ4g2ewpzUxp3sJoYRLB+QtyJ1cKpZJjt/uU4EA9yPbGLO+pX2
qlmSxAX5hQKvxGTN98DpT5LTfj1bNKi8+Rvkz81v6oVRETdZSIdVVuYaBFL7f8++
k1yp8mVPKFP5b9xWg3UM4pwfNdktwTt6jKziMy9Qhx6AhCZMR/XWFoHJDL3/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUcAF0p7kF0kCLrrbtg5qjD2OA79wwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTAxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQg7MA0GCSqGSIb3DQEBCwUAA4IBAQBWefuMtBhPYGcQNxiaDQAfNaddnI5ETHjC
qaoCPXBUTRmndg1F2kaVMPby5ulXgXnMQJ5iC7nFMsJKZa5hgMilM3W6xb6G8QT8
yXtZMOsu+PslTlDMDZA7TggQBx1lBHvZsSCnYwAJI16bXh2izxDQekVUo2IrlkmO
5NFjv8DlrAP5I+MxAK129ST/KXoxfb26IfdXORUWf/AKy7ni3L0q+HykTWh7VbpQ
wc/qmskYLmfmiZ31xTDdBYU/Kn85UVKP5taMWBDoHefnwfNDai5cjL9MHL/PKM63
tea+d9ZtKF3D0JMae1ubAY7Z0Z/z/R5wb6gPkBzYEIquW/YjzDqh
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:01 2025 by rpki-client