Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214899.roa
File: AS214899.roa (raw, json)
Hash identifier: edunPOIetpsGmFiv1Eu3qa0oLNA1oXeaQSuh4vWfhhc=
Subject key identifier: 40:8D:B3:4C:D3:0A:F1:AF:AC:5E:0A:F3:A8:CD:BC:92:93:14:D3:3F
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4303B48135EB560856914ADD962120D73799DF68
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214899.roa
Signing time: Thu 12 Nov 2026 08:25:04 +0000
ROA not before: Thu 12 Nov 2026 08:20:04 +0000
ROA not after: Thu 11 Nov 2027 08:25:04 +0000
asID: 214899
IP address blocks: 2a0f:1cc5:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:03:b4:81:35:eb:56:08:56:91:4a:dd:96:21:20:d7:37:99:df:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:04 2026 GMT
Not After : Nov 11 08:25:04 2027 GMT
Subject: CN=408DB34CD30AF1AFAC5E0AF3A8CDBC929314D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:4b:e7:80:00:bb:50:23:d8:a1:10:e9:27:
74:41:aa:d1:c9:1a:c5:3c:d5:a5:54:22:b2:20:70:
70:72:76:18:65:e9:ab:b7:40:c6:87:2f:90:3f:9f:
1f:a5:1e:03:20:d9:7f:61:f9:41:c6:81:d8:70:87:
af:bb:82:ee:ed:cd:76:1c:b5:1a:95:25:eb:d6:22:
11:11:36:c2:43:48:66:12:95:37:60:75:9f:e3:81:
c7:a7:14:bd:16:32:c3:ec:42:c8:97:88:6a:59:4b:
60:c8:32:ef:b8:56:24:30:69:4a:c1:45:27:d8:83:
1e:ac:7b:54:ed:4e:b1:de:12:28:9f:ed:18:f0:32:
8a:1d:b8:01:98:64:41:fc:ef:f7:22:3c:4b:7d:66:
42:ed:cc:68:00:b7:93:c5:09:6b:9e:2c:a9:8a:f4:
91:d4:6e:15:cc:99:f9:f1:f0:b6:75:23:e5:9d:70:
ef:d0:81:cc:6b:97:ee:00:a7:43:37:b0:89:e8:6a:
51:80:4a:33:eb:3c:03:7b:52:2f:d7:19:38:28:7c:
a5:af:1e:7a:87:28:ac:c0:38:94:c2:54:50:54:9a:
71:52:62:06:9b:35:b9:80:c2:1d:5e:75:54:e8:c9:
bf:ae:dd:b5:7c:13:48:de:46:dd:d9:2a:9c:92:fa:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:B3:4C:D3:0A:F1:AF:AC:5E:0A:F3:A8:CD:BC:92:93:14:D3:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:900::/40
Signature Algorithm: sha256WithRSAEncryption
34:9d:1e:dd:5c:6c:d5:a4:73:0a:ea:41:0b:26:a1:ae:48:7a:
17:e3:87:a3:d7:62:44:d8:51:85:fc:49:d8:b7:3d:dd:77:e0:
f5:d0:17:67:fc:bc:4e:96:e2:09:13:53:e2:52:3a:e1:4a:c7:
46:cc:48:81:64:27:5c:8c:e9:c4:04:30:ff:4c:77:db:fa:86:
bb:40:ca:37:5b:7e:46:1a:91:d6:f6:ae:65:91:5a:b6:d1:9f:
19:38:b2:de:41:da:c6:4a:6e:f2:46:30:f9:35:17:18:64:a4:
05:ee:05:13:e0:a8:65:d3:f7:b5:e2:f1:d8:83:9b:4e:5b:76:
17:76:15:a6:03:2b:7a:e3:dd:55:3c:60:3b:2d:c5:ca:d9:8c:
b3:03:08:6b:c9:23:e9:48:df:2d:cb:a9:0c:f3:b7:85:67:c0:
f5:9a:e4:9e:ef:ed:29:e4:59:6b:8c:47:28:f6:85:cb:4f:30:
b5:1f:ce:16:13:21:58:91:15:7f:53:b1:1f:2d:2c:a1:af:ec:
b9:b4:b9:78:9c:bd:83:c3:0d:0a:cb:fb:6f:95:f5:05:6d:90:
9d:97:81:8f:ae:35:d6:92:3b:cd:54:86:5d:07:e3:eb:e2:f2:
b6:13:b9:b5:39:8f:31:1f:da:c6:6a:6f:37:7b:8d:df:cc:3d:
54:fb:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:44:27 2026 by rpki-client