Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214076.roa
File: AS214076.roa (raw, json)
Hash identifier: khjOwiLfsbST8fHKNbFK1cOhMJzUBGm1Ypu/nDK0Dl0=
Subject key identifier: E9:7D:CA:FA:17:E9:51:CF:E6:A7:DA:8D:CF:BA:09:CC:B6:93:C2:5C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1907C8CC7224F096FDCE536BC33FC14A25CE6454
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214076.roa
Signing time: Wed 04 Nov 2026 20:32:52 +0000
ROA not before: Wed 04 Nov 2026 20:27:52 +0000
ROA not after: Wed 03 Nov 2027 20:32:52 +0000
asID: 214076
IP address blocks: 2a0e:8f02:2080::/44 maxlen: 48
2a0e:8f02:f071::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:07:c8:cc:72:24:f0:96:fd:ce:53:6b:c3:3f:c1:4a:25:ce:64:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:52 2026 GMT
Not After : Nov 3 20:32:52 2027 GMT
Subject: CN=E97DCAFA17E951CFE6A7DA8DCFBA09CCB693C25C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:9e:b5:60:c4:8c:13:ff:2b:f1:80:e9:ad:
2e:fc:4a:ca:55:a8:4f:ef:ff:59:82:94:f8:39:93:
0c:ad:dc:4c:bb:95:2c:c9:08:cd:53:53:ee:dc:63:
a4:fb:bc:8e:8e:79:25:25:f9:ea:ee:93:c4:77:77:
3b:6f:32:01:ff:2f:a4:c0:f6:2b:fd:6e:6e:4d:44:
cb:9c:05:58:40:4b:ae:1f:a8:95:5a:4f:90:d9:9b:
56:52:02:45:13:67:ed:68:84:b3:3d:bb:97:e6:a1:
b7:1d:6e:2f:6c:3d:0d:36:91:95:a9:64:18:00:87:
62:17:e6:ec:b5:b2:cf:0c:10:ad:fc:f5:5f:2d:ad:
c4:4d:73:f2:51:ba:8c:7d:d1:df:28:98:fe:c0:62:
9a:ba:d2:23:0f:07:1b:e7:66:94:e0:94:5e:7d:2d:
c4:fc:49:79:04:86:74:f5:64:77:c9:3f:8a:8d:b5:
8e:6a:b0:f8:cb:8a:f9:eb:84:0a:82:ac:20:49:57:
17:0b:21:bd:78:11:a9:d6:9e:a3:07:21:49:8b:94:
29:9e:d7:08:3b:74:92:90:fe:03:9d:9c:ac:30:ac:
a2:03:0b:6d:85:bf:8b:a6:e5:bb:3b:21:dd:54:9f:
1b:3b:5b:58:28:d1:d7:51:c4:7b:e5:da:e9:bc:c6:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:CA:FA:17:E9:51:CF:E6:A7:DA:8D:CF:BA:09:CC:B6:93:C2:5C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2080::/44
2a0e:8f02:f071::/48
Signature Algorithm: sha256WithRSAEncryption
67:68:f4:29:ea:9f:b6:63:0d:a1:65:20:ce:82:0c:f8:aa:e2:
b7:bd:29:38:a0:32:e7:af:c2:be:f7:f9:e8:e0:1a:d9:2f:2d:
c7:43:77:e5:82:a2:5f:3e:85:49:10:f0:54:81:cb:8b:40:9f:
13:d8:60:f5:bf:3b:28:08:c6:18:5c:4c:14:a8:81:ef:78:76:
9e:31:95:20:c6:dc:3f:b6:29:ae:b2:75:af:7b:6a:6d:9e:ff:
fd:f1:f0:8c:b3:0b:01:98:44:03:ec:1b:9e:5b:ed:e9:02:de:
7b:bf:05:09:43:ff:ff:a9:c5:d9:52:76:60:7b:cc:95:24:23:
57:eb:e4:66:c0:b9:cc:fb:7a:39:82:f4:df:74:83:86:67:17:
86:eb:c4:ca:dd:b5:6f:40:b7:cc:7e:c3:d5:34:cf:16:6e:0f:
ef:8c:dc:02:95:45:50:b0:cc:7c:5e:e3:45:96:5d:13:43:fe:
90:02:11:89:e3:d3:fd:8c:ce:08:91:55:d6:08:1a:1f:77:f7:
1f:f6:9b:fa:5b:20:ef:d8:45:cf:b7:d5:b3:56:1e:c2:65:5e:
f9:3a:7e:58:df:36:e7:34:a6:dd:bf:4f:d1:78:30:06:ce:9d:
24:b2:04:c1:a5:0b:ec:d2:56:3c:f6:76:76:3b:e2:97:61:03:
54:6f:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:53 2026 by rpki-client