Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: ig+M5YDO8X8waTImkiicUDosKzB5rpWKthPzv3hXNlw=
Subject key identifier: E5:09:66:C7:98:C3:CE:3C:7A:64:D7:37:4A:E3:28:39:D1:B9:C6:8D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 48EF4D5414A966790794EBAB1DA8625B8C19A074
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
Signing time: Tue 05 May 2026 05:35:15 +0000
ROA not before: Tue 05 May 2026 05:30:15 +0000
ROA not after: Tue 04 May 2027 05:35:15 +0000
asID: 214677
IP address blocks: 2a14:7583:ff50::/48 maxlen: 48
2a14:7583:ff51::/48 maxlen: 48
2a14:7583:ff52::/48 maxlen: 48
2a14:7584:e900::/44 maxlen: 44
2a14:7584:e910::/44 maxlen: 44
2a14:7584:e920::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ef:4d:54:14:a9:66:79:07:94:eb:ab:1d:a8:62:5b:8c:19:a0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 5 05:30:15 2026 GMT
Not After : May 4 05:35:15 2027 GMT
Subject: CN=E50966C798C3CE3C7A64D7374AE32839D1B9C68D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:00:d3:2c:03:fb:aa:ab:78:e6:7c:9c:02:
1c:2e:19:a5:86:77:9d:e1:61:53:07:98:b7:98:b0:
36:ac:5b:06:9e:35:7e:a3:f6:62:1f:6a:c1:b5:d8:
73:c0:51:f2:64:63:59:24:87:64:94:b4:30:ba:c6:
ae:cf:4e:8c:8b:38:73:ef:10:33:a7:1e:e2:5f:a9:
4b:b9:70:e8:e9:ce:82:b0:e1:2b:d9:e4:90:8b:ae:
eb:b1:41:b1:81:6c:ce:81:8a:a7:67:b9:d4:47:e2:
1c:47:92:10:e3:15:21:e8:9c:65:d7:9b:8e:d8:cb:
5b:fc:d7:c5:51:90:7b:1b:5f:88:f9:5f:ab:7b:e4:
b8:e4:bb:4a:4a:8a:81:d8:2c:3e:0c:cb:65:95:ce:
f0:90:7e:ce:cf:b5:f7:7d:d2:91:52:04:e4:d6:16:
c6:d9:76:a4:42:5e:52:17:e6:41:59:14:b0:ef:fb:
f4:1d:62:70:68:82:c7:ed:7d:e6:99:2a:86:58:5a:
25:e6:f8:40:4a:d3:74:c3:18:cb:39:5b:13:61:0b:
84:ce:2b:b4:d1:d6:fc:8d:9a:a1:35:30:ae:76:a7:
0e:3f:40:e6:a6:b5:05:e3:b6:70:75:93:a3:8f:aa:
72:aa:35:e2:18:6e:b3:66:24:51:14:44:82:ec:c7:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:09:66:C7:98:C3:CE:3C:7A:64:D7:37:4A:E3:28:39:D1:B9:C6:8D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ff50::-2a14:7583:ff52:ffff:ffff:ffff:ffff:ffff
2a14:7584:e900::-2a14:7584:e92f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:f9:04:2c:40:4b:c3:e0:ab:a5:f5:13:2a:a6:fe:02:e5:cc:
2b:ac:47:51:b7:b9:f6:75:08:6a:3d:3c:39:b9:e6:0c:5d:f9:
b6:99:6a:46:85:a5:39:40:f7:03:20:bd:42:48:f9:7b:2e:e0:
01:c3:f6:6d:8b:2d:44:73:b3:00:0e:d6:bb:22:65:44:ff:12:
76:5c:13:95:86:00:a4:7a:72:e4:9e:f2:5c:47:9d:ce:be:42:
2e:e9:57:ff:58:70:97:dc:d1:46:8c:a1:27:54:a1:ed:a3:1d:
dc:7a:c7:ab:f4:46:e3:89:a1:47:dd:07:d3:53:53:cb:1b:e7:
20:52:23:04:37:f0:ea:8a:2d:4b:ca:6c:8a:b7:7b:44:70:b2:
ad:78:ac:78:65:5c:76:0a:82:47:8c:af:bc:a4:0c:cc:52:5b:
ab:78:bf:ae:28:a4:fb:4c:10:d8:40:56:d3:21:de:92:ff:eb:
c1:8d:7a:13:8a:ce:02:d4:fa:bd:21:84:c6:02:b1:30:d7:db:
5b:f8:9b:fe:26:8b:f1:12:b8:e7:5f:16:05:b8:69:91:77:88:
9c:6f:99:1c:66:4b:ca:a3:4c:75:30:d4:00:cd:dd:8c:b7:cd:
70:ba:85:24:c4:21:a4:f6:52:8b:ac:6a:2a:68:7d:45:f7:e7:
d6:b2:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:35:02 2026 by rpki-client