Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: MdQMJYCA7HZgvcoE0wrZ3gWG6dTaBlV5U2El3fdn6KU=
Subject key identifier: 01:76:C9:76:8D:AB:7F:73:39:2C:AF:8C:1D:37:90:CF:E3:F5:09:8C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2FD648B7C03EE2D9BFA47C88458278CDE61D213F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
Signing time: Tue 08 Jul 2025 18:35:50 +0000
ROA not before: Tue 08 Jul 2025 18:30:50 +0000
ROA not after: Tue 07 Jul 2026 18:35:50 +0000
asID: 214483
IP address blocks: 181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d6:48:b7:c0:3e:e2:d9:bf:a4:7c:88:45:82:78:cd:e6:1d:21:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 8 18:30:50 2025 GMT
Not After : Jul 7 18:35:50 2026 GMT
Subject: CN=0176C9768DAB7F73392CAF8C1D3790CFE3F5098C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:43:b5:64:cf:6c:91:35:04:0f:bf:2a:c0:
ad:5c:32:2c:0d:ab:e4:3f:73:69:67:79:1d:73:a8:
bb:21:f4:7e:03:07:43:98:b4:ce:fc:a1:e7:ed:bf:
ba:72:18:9f:01:41:57:f5:b3:68:ab:b6:7f:d9:2c:
5a:3a:58:86:ea:d6:57:68:c7:12:00:4e:76:b3:c9:
c2:4f:40:45:28:80:7d:d7:19:cd:b8:38:64:00:0c:
d9:37:03:27:c2:dc:71:5b:c2:c4:93:3a:de:2a:67:
64:0b:6c:25:08:b4:cb:8b:16:26:c1:00:66:47:27:
90:67:13:f1:f2:d6:5c:97:31:f1:d0:0a:bc:32:2c:
49:0b:96:b7:2b:70:62:b3:2a:75:af:76:33:de:a5:
8a:1e:cc:00:e9:44:8e:51:5a:80:42:83:da:a1:25:
04:7c:8f:17:82:88:8f:f2:0c:5f:bb:3a:0d:40:63:
22:d7:2f:d0:a9:12:90:5f:fd:2b:ef:1a:aa:ca:12:
64:18:83:d0:f6:52:86:45:a6:5a:fc:c6:80:05:9e:
60:7f:8b:25:c3:83:91:f1:3f:86:89:ac:8b:a5:6f:
2d:31:25:30:f4:33:4c:fa:8c:69:e6:f2:c1:1f:55:
a0:ed:31:1b:9c:ce:19:e6:b2:ff:f3:a4:70:95:b1:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:76:C9:76:8D:AB:7F:73:39:2C:AF:8C:1D:37:90:CF:E3:F5:09:8C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.2.0/24
181.214.33.0/24
181.214.132.0/24
181.214.205.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6f:af:1a:26:dc:88:19:f6:79:83:13:c7:fb:13:60:2f:5a:
25:82:3e:bb:bc:b9:e5:e9:ce:b8:75:c0:b8:41:a8:79:22:fa:
4c:b9:f6:03:b8:b9:34:51:6a:a4:58:18:42:66:05:14:c9:6a:
dc:e9:74:df:2c:47:ae:c5:99:cb:86:13:c4:1f:fd:ea:6d:9c:
49:7e:21:25:d4:f2:18:61:03:35:2a:51:4b:be:6e:13:d7:38:
99:bb:82:c1:af:4b:48:eb:c8:cc:14:9d:93:e3:b5:df:3b:db:
6b:29:85:4b:82:62:25:c7:d5:a4:7a:46:56:9e:cd:b0:fe:de:
c0:d9:c6:d9:53:3d:99:f0:5e:f6:48:5c:99:09:6f:fe:b5:8b:
82:d8:9c:94:08:20:5f:44:5d:87:e3:a0:95:99:44:34:b8:3b:
5f:b9:c9:3c:89:12:00:88:44:cf:98:3a:76:3c:4f:88:6a:7d:
24:92:76:6d:6a:49:b7:f2:62:d5:af:e4:7b:9b:23:5a:61:58:
dc:ed:d8:c1:09:bd:ee:f0:54:20:e3:02:47:81:7e:c1:85:a6:
b7:47:da:fa:dd:ea:36:47:74:f7:bf:2e:ec:41:17:7c:03:bd:
84:81:a8:6e:75:24:28:86:ae:79:e1:bd:ee:e2:28:61:3f:d2:
09:d7:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:17 2025 by rpki-client