Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214802.roa
File: AS214802.roa (raw, json)
Hash identifier: 1TlGh3bX5f4PDC0qA5wVF/dKyAFOvfkRlWSHKf/rtS4=
Subject key identifier: 53:FA:19:61:4E:FD:E8:F5:02:85:BD:48:EE:B5:C9:0B:13:5B:CD:F4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 423B8D640EB0D7043CED3A139CCD3386CE0A97C4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214802.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 214802
IP address blocks: 2a0f:85c1:80a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3b:8d:64:0e:b0:d7:04:3c:ed:3a:13:9c:cd:33:86:ce:0a:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=53FA19614EFDE8F50285BD48EEB5C90B135BCDF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:7c:9b:c7:1b:f3:e1:3c:a7:db:99:87:93:
7c:9f:c5:df:8a:17:99:81:51:72:13:25:44:8a:52:
48:de:0e:26:e4:f8:f0:54:ab:bf:a4:f6:c7:20:d2:
b0:4e:8f:e2:0c:6a:56:d1:1c:e9:5e:3e:92:67:a9:
b7:b4:54:99:94:21:ee:b1:f5:e2:06:90:12:30:18:
1d:5f:c6:3a:70:28:d7:f0:93:16:9a:2f:16:d3:a4:
53:31:ea:4e:bd:1e:b3:c8:dd:5d:99:89:f2:80:fd:
9e:98:b1:0a:25:73:e8:1e:73:12:b1:24:c6:62:86:
65:02:29:c4:e1:54:31:26:f9:2a:24:a1:9a:c6:3c:
4c:91:52:52:cb:8a:5f:ad:d6:6f:ea:b3:62:84:55:
71:b2:26:45:af:97:a2:5e:2b:61:6c:2a:25:95:b9:
9a:46:89:c5:8b:ae:3e:a4:d1:ad:b6:cf:fc:c4:b8:
06:16:ff:d4:89:e8:b8:dd:01:25:e0:01:f1:83:96:
9c:42:43:93:20:72:c7:2c:17:10:21:1a:a6:5f:25:
d8:e8:cc:f8:2d:58:b6:66:22:d6:6b:ef:ef:fe:21:
b7:b8:80:05:a7:a8:54:34:65:1f:96:0e:e6:8c:b3:
b2:47:80:5f:21:35:bb:df:74:8d:0e:69:0f:d1:e1:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:19:61:4E:FD:E8:F5:02:85:BD:48:EE:B5:C9:0B:13:5B:CD:F4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:80a::/48
Signature Algorithm: sha256WithRSAEncryption
0c:21:28:5c:5e:16:94:27:cd:fb:d3:b0:1c:fa:12:aa:85:22:
fa:b9:b7:cf:81:c5:3b:38:e8:4f:af:24:c3:2a:c0:30:03:d7:
b9:e1:92:15:d7:bf:9c:24:03:61:f5:b7:c2:41:c5:95:04:57:
de:95:d0:0e:1c:54:b5:62:2d:a5:6f:9f:46:73:68:8b:6d:3b:
e0:f3:17:d4:c6:e4:5d:02:42:34:dc:2d:8b:75:0f:66:2d:44:
69:83:31:ae:b5:bb:c1:cd:71:58:3b:82:33:22:cf:e8:df:79:
fe:b6:c4:1a:5e:20:83:ca:cf:eb:91:c2:4c:9b:82:fb:c6:d2:
88:0a:9c:84:af:c3:b5:c3:45:bc:7b:ef:84:e0:0c:5a:b7:69:
44:13:70:a3:2e:23:86:56:70:86:24:f4:14:a1:41:72:3c:79:
16:ac:67:a0:a3:35:79:2f:a2:9f:82:fb:fc:04:ef:c8:07:d4:
7d:2f:e1:16:75:e8:d4:ef:2d:67:05:6e:5b:ac:6a:bb:a3:5e:
ca:f5:48:dc:49:02:7d:d4:b9:e3:e3:dd:73:25:e4:26:17:3d:
8b:8a:e8:b8:de:7f:7b:b1:29:a4:63:ff:19:9c:67:cd:c9:b0:
60:49:19:70:cf:ea:d5:4d:e0:a6:86:a6:ca:fa:bf:22:ef:b3:
c7:c4:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:59 2026 by rpki-client