Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214809.roa
File: AS214809.roa (raw, json)
Hash identifier: 6Mtyqtm+LlILtN0Bdqh/+BRdxG4c8Y1g8zOAfxMGr+0=
Subject key identifier: 4D:67:29:E4:E6:AC:87:BE:8F:33:31:86:D1:88:ED:07:36:38:3A:91
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D9FC4A8FC159A538495ECE1AB8C9927CA44C729
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214809.roa
Signing time: Fri 26 Jun 2026 08:08:45 +0000
ROA not before: Fri 26 Jun 2026 08:03:45 +0000
ROA not after: Fri 25 Jun 2027 08:08:45 +0000
asID: 214809
IP address blocks: 2a0f:85c1:807::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9f:c4:a8:fc:15:9a:53:84:95:ec:e1:ab:8c:99:27:ca:44:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:45 2026 GMT
Not After : Jun 25 08:08:45 2027 GMT
Subject: CN=4D6729E4E6AC87BE8F333186D188ED0736383A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:be:4a:a0:cd:0b:a0:77:04:51:99:30:89:
01:e8:41:8e:e9:27:a7:0e:fe:06:f9:86:24:c5:cb:
ad:b3:58:1f:3c:f2:4b:1a:19:4a:ec:06:85:5d:7e:
9c:1f:5f:74:6a:aa:fb:2d:78:ca:09:06:59:d8:f3:
2b:fe:44:3c:ec:4f:47:4b:51:69:51:82:e0:eb:41:
0c:d8:de:e0:ba:b6:0b:82:ee:82:28:fc:ce:05:24:
d0:c5:3f:25:03:06:a3:4b:3d:b0:9e:3d:d3:f2:c8:
ac:48:fe:41:e5:84:4c:49:b3:bf:57:1e:5a:7d:23:
9f:e4:03:45:f2:3d:b6:8a:68:c5:7d:25:1b:67:de:
78:f1:3b:45:a9:e7:cb:7d:b3:ea:6d:c8:bf:d2:53:
b0:49:ae:3e:ae:bc:d6:5a:db:35:c3:08:86:32:68:
d1:14:59:eb:cc:fc:2e:59:b0:b6:ca:86:37:a7:a5:
de:5b:17:bf:4b:43:25:01:bd:cd:d4:b4:a5:d6:32:
9b:17:61:67:e9:b6:26:36:b4:b0:c7:20:2b:bc:8a:
9e:fc:dc:21:ed:e5:7e:c4:58:a0:49:67:1a:1a:58:
ae:23:9e:c7:54:f9:ef:1e:14:3a:a0:ef:15:9a:b8:
d3:8e:5e:b2:a3:59:9d:dd:7d:4b:d4:b2:ba:bd:b9:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:29:E4:E6:AC:87:BE:8F:33:31:86:D1:88:ED:07:36:38:3A:91
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:807::/48
Signature Algorithm: sha256WithRSAEncryption
49:cf:e1:69:b7:b5:3d:0d:9d:07:f0:ac:f5:19:d0:69:ed:7b:
d5:8b:92:81:30:40:18:9e:99:4b:b9:c7:c4:8b:c4:09:f4:18:
32:64:89:d6:cc:48:6d:fa:d1:49:e3:5b:9a:c0:12:fc:e7:f7:
d1:91:07:7e:3c:87:74:20:85:c5:45:8f:50:c1:c5:96:97:aa:
30:2e:af:26:5b:43:dc:5a:dc:1b:ab:2f:c2:75:85:ea:17:77:
f6:9e:0f:4d:8e:a1:2c:03:70:37:c7:90:75:39:78:db:ee:cb:
9d:74:bd:69:33:32:88:03:cd:3a:cf:d4:78:a1:39:d7:9e:a0:
36:73:9b:0b:8c:7c:dd:14:e0:c4:c6:1b:30:cb:b2:82:2e:83:
78:44:b5:10:70:a0:1c:f6:12:99:d7:85:3a:a3:23:bc:aa:80:
10:53:a0:02:d6:60:37:9f:42:ba:77:14:46:bc:b1:79:8a:58:
f6:17:98:5b:c7:c9:96:54:a2:a8:87:f5:7c:05:4c:b9:e3:74:
02:35:13:f5:47:45:de:8c:c3:d8:46:82:44:9c:7c:29:35:55:
51:2b:e5:65:d0:b1:15:bb:66:f4:d9:1e:b1:74:ae:5b:54:63:
37:88:96:ed:28:d3:7b:f0:5e:20:d1:c4:f8:ae:a0:49:c9:be:
1c:62:56:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUbZ/EqPwVmlOElezhq4yZJ8pExykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDVaFw0yNzA2MjUwODA4NDVaMDMxMTAvBgNV
BAMTKDRENjcyOUU0RTZBQzg3QkU4RjMzMzE4NkQxODhFRDA3MzYzODNBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/L5KoM0LoHcEUZkwiQHoQY7p
J6cO/gb5hiTFy62zWB888ksaGUrsBoVdfpwfX3RqqvsteMoJBlnY8yv+RDzsT0dL
UWlRguDrQQzY3uC6tguC7oIo/M4FJNDFPyUDBqNLPbCePdPyyKxI/kHlhExJs79X
Hlp9I5/kA0XyPbaKaMV9JRtn3njxO0Wp58t9s+ptyL/SU7BJrj6uvNZa2zXDCIYy
aNEUWevM/C5ZsLbKhjenpd5bF79LQyUBvc3UtKXWMpsXYWfptiY2tLDHICu8ip78
3CHt5X7EWKBJZxoaWK4jnsdU+e8eFDqg7xWauNOOXrKjWZ3dfUvUsrq9ua9PAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUTWcp5Oash76PMzGG0YjtBzY4OpEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0ODA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgHMA0GCSqGSIb3DQEBCwUAA4IBAQBJz+Fpt7U9DZ0H8Kz1GdBp7XvVi5KBMEAY
nplLucfEi8QJ9BgyZInWzEht+tFJ41uawBL85/fRkQd+PId0IIXFRY9QwcWWl6ow
Lq8mW0PcWtwbqy/CdYXqF3f2ng9NjqEsA3A3x5B1OXjb7suddL1pMzKIA806z9R4
oTnXnqA2c5sLjHzdFODExhswy7KCLoN4RLUQcKAc9hKZ14U6oyO8qoAQU6AC1mA3
n0K6dxRGvLF5ilj2F5hbx8mWVKKoh/V8BUy543QCNRP1R0XejMPYRoJEnHwpNVVR
K+Vl0LEVu2b02R6xdK5bVGM3iJbtKNN78F4g0cT4rqBJyb4cYlZP
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:57 2026 by rpki-client