Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214929.roa
File: AS214929.roa (raw, json)
Hash identifier: MY0FohuYS6OV891n5EdeXRn9A2YhE0DmuUXf+82GoMc=
Subject key identifier: 80:73:0D:3D:C6:0F:62:8E:5A:E1:EA:FD:CC:DB:B2:70:19:2B:9E:6C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3AD249E4FA815BC2EC2DEAF922F4902A0E9F0748
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214929.roa
Signing time: Wed 15 Jul 2026 00:08:51 +0000
ROA not before: Wed 15 Jul 2026 00:03:51 +0000
ROA not after: Wed 14 Jul 2027 00:08:51 +0000
asID: 214929
IP address blocks: 2a0f:85c1:c50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d2:49:e4:fa:81:5b:c2:ec:2d:ea:f9:22:f4:90:2a:0e:9f:07:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 15 00:03:51 2026 GMT
Not After : Jul 14 00:08:51 2027 GMT
Subject: CN=80730D3DC60F628E5AE1EAFDCCDBB270192B9E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:64:88:c3:5a:d2:b4:28:97:c7:b5:e3:af:93:
6a:8f:fe:81:04:3b:62:51:5e:0e:54:69:76:9f:d7:
95:86:89:78:da:02:ce:84:bb:fd:e9:47:08:a2:9c:
e9:c4:d7:67:56:26:c4:fe:0a:9f:be:2b:33:1e:c4:
eb:f5:74:81:73:3f:00:35:c4:62:34:80:23:fd:43:
57:78:a1:64:46:df:69:0c:e4:e1:dd:40:7d:d4:29:
32:6c:26:02:02:ca:b3:93:a6:83:2b:59:f6:03:67:
d9:7c:2e:83:2e:31:cb:4e:3c:9d:1c:20:b5:df:14:
b7:a7:77:35:d8:3b:08:c6:a8:a9:6e:32:32:1f:08:
00:aa:d3:b6:4b:56:09:aa:b5:24:31:d1:5a:1c:eb:
5e:cb:41:0b:8a:be:6c:d1:1a:5e:b6:cd:7c:b9:aa:
e8:5b:3d:13:cc:b9:c9:d4:19:d9:c4:8b:fd:39:b0:
42:57:f0:3c:00:f9:8e:c2:37:44:69:ec:cf:26:74:
49:e6:ef:15:98:b7:bd:68:2e:a4:d4:0a:ab:35:19:
85:84:60:6c:dd:76:0b:95:e5:50:cd:29:45:bf:f0:
9f:cc:e8:05:9f:20:93:0c:67:9f:1c:de:37:d1:db:
c0:07:d2:30:2c:df:ba:48:6f:36:35:96:06:a5:09:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:0D:3D:C6:0F:62:8E:5A:E1:EA:FD:CC:DB:B2:70:19:2B:9E:6C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c50::/44
Signature Algorithm: sha256WithRSAEncryption
29:54:b8:37:01:d2:55:11:54:60:f4:37:7d:2e:f6:9a:d3:08:
c1:ec:7c:96:1f:fa:4c:54:f9:6d:6c:b1:fd:d7:a4:e4:b6:01:
4c:5b:20:96:28:bd:9e:30:92:6b:24:f9:a7:62:9b:0c:17:6e:
f6:d4:4b:eb:29:e6:35:68:65:0d:eb:c8:23:86:b4:e3:9b:06:
a9:88:8c:af:c1:c1:24:3c:ea:2a:4a:98:c1:7b:c7:48:2f:01:
cd:15:b5:fa:d1:b8:5d:4e:1a:b9:42:48:3a:57:07:d3:4d:68:
b2:e2:87:1f:8a:28:ff:61:10:97:c5:b3:c9:4d:90:6c:94:be:
24:40:b3:c1:ce:ba:f2:20:b6:86:88:31:95:68:29:c9:36:84:
f9:c5:39:c4:e0:13:ce:0c:95:ed:84:e9:15:8b:bc:58:34:e2:
12:bb:6a:f9:0a:5b:4e:ed:63:fd:9c:9d:89:60:e4:e7:91:bf:
3b:80:4e:f1:2a:c4:a0:11:39:c1:62:86:86:21:d1:f3:57:92:
f2:5a:bd:2c:a2:f6:1f:2c:52:d9:c4:05:e1:1f:4e:65:82:ef:
c0:a4:64:4b:7d:1b:c5:e3:db:9e:b8:e8:e8:79:92:4b:d4:e6:
6f:64:d7:af:12:c0:4e:fa:4a:b1:14:d5:f8:63:cd:77:7f:2b:
9b:25:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:28:12 2026 by rpki-client