Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214693.roa
File: AS214693.roa (raw, json)
Hash identifier: E5hkIB5w12gTKhsSX3LNnjhyE3ZzPmAPCIlUMBGaIwo=
Subject key identifier: 0B:F4:8A:D9:EF:B4:66:07:7C:AF:22:97:C1:1B:43:B3:D4:39:FF:EC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3D75038BE123845850577B66D58B0C8BBEC04B19
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214693.roa
Signing time: Wed 11 Nov 2026 03:09:23 +0000
ROA not before: Wed 11 Nov 2026 03:04:23 +0000
ROA not after: Wed 10 Nov 2027 03:09:23 +0000
asID: 214693
IP address blocks: 2a0f:85c1:dd5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:75:03:8b:e1:23:84:58:50:57:7b:66:d5:8b:0c:8b:be:c0:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 11 03:04:23 2026 GMT
Not After : Nov 10 03:09:23 2027 GMT
Subject: CN=0BF48AD9EFB466077CAF2297C11B43B3D439FFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:0a:5b:a2:75:4e:dd:88:a2:7f:98:33:44:
07:36:3d:b7:d8:dc:47:a5:e6:aa:5a:73:38:0c:ec:
83:5e:e9:9a:bc:59:35:e3:ff:1e:48:8a:4e:74:e9:
74:26:8b:af:11:06:f8:06:08:b1:fc:d4:cc:8b:a3:
5c:a3:f4:61:08:d2:3a:dd:11:49:a2:c4:08:2b:56:
7a:32:f5:4a:f4:bc:8f:a7:e3:cf:ae:9c:4a:86:7a:
27:6b:f0:c6:87:95:7d:fd:2b:a3:14:b6:91:e0:5e:
2f:67:8f:dc:dd:43:da:df:f8:ac:c7:25:5f:d1:ed:
bb:36:2a:76:3a:b2:72:3a:60:d6:ec:da:25:5a:af:
0a:d4:b9:8a:35:d5:b0:a5:f3:b1:82:21:bb:1e:f6:
21:36:42:02:34:32:28:97:35:df:48:d0:e3:db:25:
9f:3a:2c:97:37:51:1c:32:1b:27:19:3a:7e:8a:39:
3f:2b:a7:35:6c:4d:4b:49:67:93:9b:ba:04:e1:14:
51:d3:a2:8a:e8:fe:3a:68:41:0f:22:eb:f3:28:ea:
16:87:19:a1:b9:dd:63:32:09:9e:1f:19:9e:fa:12:
27:e8:ea:62:4e:0a:ab:84:a0:3c:cb:2d:f2:14:ec:
c0:84:bc:bd:fd:81:5c:07:6d:8d:c6:6c:49:30:33:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:8A:D9:EF:B4:66:07:7C:AF:22:97:C1:1B:43:B3:D4:39:FF:EC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:dd5::/48
Signature Algorithm: sha256WithRSAEncryption
57:55:70:29:9f:24:4d:a3:b2:1e:30:2f:ed:82:af:f2:7d:e5:
13:97:35:f9:80:9b:7d:42:06:05:95:34:fb:51:38:f6:40:2e:
61:8f:37:fb:53:81:f4:52:14:e3:2e:76:60:22:13:54:55:56:
73:d4:5d:cc:a6:67:70:c0:51:22:9e:10:9c:40:d2:39:fa:e0:
ac:1d:fc:ab:c7:f1:fc:5f:48:8d:de:4e:ce:8a:01:d3:8d:b6:
8d:96:30:66:d6:ae:54:42:da:9a:a9:13:3b:50:45:f4:e3:26:
f8:b7:d3:73:ac:6d:4b:00:dc:2d:c6:27:5d:1e:f5:8a:16:e5:
b6:c4:6b:dc:4f:f7:4d:63:64:3d:e0:77:17:63:c6:bf:8b:43:
27:4d:b3:a2:48:5f:bd:94:03:65:b7:c0:37:e6:7c:51:94:7f:
0c:67:9b:08:46:b7:95:46:15:c1:ea:fe:d2:9f:c4:89:ce:bd:
e8:82:28:7b:fc:d9:a3:83:ee:b0:c4:be:2d:06:70:05:88:48:
c4:40:2f:68:48:b4:cc:2f:22:c6:2f:15:9e:0f:ea:c3:7b:1d:
33:a3:64:6a:26:ce:55:c0:02:c5:5f:93:09:46:96:bb:3d:b5:
3f:c6:29:95:7a:79:9b:fd:61:2d:6e:41:1c:38:a7:ad:37:20:
29:11:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:13 2026 by rpki-client