Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214841.roa
File: AS214841.roa (raw, json)
Hash identifier: 7dsyaoJYbo/AKdjiMyp43sQ0/X+fT7yEhhNjBQsp/sE=
Subject key identifier: 72:27:55:86:0B:91:4F:AE:8C:14:B0:24:44:76:5E:50:D4:64:69:0E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 35A87F99A08C18717A6D7A37798C248B10013428
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214841.roa
Signing time: Fri 26 Jun 2026 08:08:40 +0000
ROA not before: Fri 26 Jun 2026 08:03:40 +0000
ROA not after: Fri 25 Jun 2027 08:08:40 +0000
asID: 214841
IP address blocks: 2a0f:85c1:801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a8:7f:99:a0:8c:18:71:7a:6d:7a:37:79:8c:24:8b:10:01:34:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:40 2026 GMT
Not After : Jun 25 08:08:40 2027 GMT
Subject: CN=722755860B914FAE8C14B02444765E50D464690E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:9d:9c:72:15:59:ae:15:10:ee:2c:49:91:
e3:65:d0:83:30:fd:b8:1f:a7:48:fb:e9:7d:24:3c:
06:87:bd:e2:16:70:89:26:cd:21:4d:87:f0:5a:93:
23:43:56:51:e9:4f:95:e1:f8:2c:71:5d:1e:b1:9f:
d8:fd:0f:91:f1:fc:9c:e2:28:cc:d4:b9:e0:00:bd:
c7:92:dd:3c:f7:b4:b6:50:b1:d0:d3:c7:f0:6e:00:
cd:0b:8c:dd:3b:c9:cd:ed:9f:94:cd:dd:47:ff:30:
d7:50:6a:1f:a5:15:e7:76:cf:38:4d:f0:15:55:b6:
7c:da:eb:b2:87:10:d2:e0:0f:c0:46:9f:23:b1:57:
4e:ce:dc:f9:80:8b:e0:29:0d:83:b6:03:1e:49:46:
20:17:b1:06:6d:55:b9:24:fe:50:d2:cb:33:15:63:
94:84:89:b3:85:14:06:18:c8:f1:b1:83:16:a7:f9:
46:9c:ab:bb:e2:cf:09:8f:f3:a0:00:e0:73:77:de:
5f:22:2f:53:d7:ee:8f:51:1a:cd:98:cf:04:f3:b4:
a1:4c:cd:ba:be:b1:5a:89:0d:65:6f:3d:4e:7d:06:
6c:c5:3a:de:a8:dd:f6:22:6a:1d:55:ef:60:f1:4e:
22:d8:42:d8:7b:a0:e3:e7:3e:b7:5b:0d:13:79:d4:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:55:86:0B:91:4F:AE:8C:14:B0:24:44:76:5E:50:D4:64:69:0E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:801::/48
Signature Algorithm: sha256WithRSAEncryption
21:da:4d:c6:f1:f5:cd:7a:23:a3:9c:96:ab:e4:b0:00:ad:1b:
60:62:d2:70:92:2c:06:a0:ce:bb:fd:50:07:d2:12:a1:08:5e:
e8:f6:f1:d1:b3:54:84:80:c5:f3:0a:12:51:90:32:da:73:ea:
e8:96:7d:03:3c:72:fc:ec:c4:c0:f6:60:44:95:6f:00:f1:42:
4f:89:ce:60:87:4d:11:74:ec:73:c1:d4:76:bf:dd:88:a8:65:
69:97:d7:08:fd:49:d8:3e:b8:de:6e:6f:ee:4c:fa:f2:45:a8:
4e:87:28:26:62:12:af:f0:34:19:1a:cc:ba:d8:11:f9:4e:c6:
57:c1:70:f3:80:fa:a7:27:8c:13:4e:ee:7b:03:b4:2b:a5:4e:
07:99:aa:a6:fd:0e:9a:ee:41:05:20:e6:27:a3:00:b6:d2:73:
30:a0:2e:4d:7b:df:eb:76:7b:88:68:6b:a8:5c:ae:53:62:d4:
70:75:af:01:fd:6b:ea:f0:f3:6f:67:e2:38:9c:fe:e2:08:27:
aa:a5:34:aa:8e:06:6f:71:31:a0:26:dd:fa:0b:dd:00:72:74:
b9:0c:f1:e6:5b:b7:41:f2:0f:b6:26:0c:83:22:71:95:b1:0f:
c8:0c:45:a0:b8:02:0c:cb:1f:ef:7f:92:50:9f:12:00:f6:61:
25:f3:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:28:10 2026 by rpki-client