Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214564.roa
File: AS214564.roa (raw, json)
Hash identifier: ZoH+pFkmWjbyPmvh/w+gSPM9Mifgce3CozrGqbW0oPs=
Subject key identifier: BF:B1:F2:22:54:6F:1F:5B:A1:94:E0:F2:2D:C9:00:A9:56:DC:1A:D9
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4063B66E8522835C5DCFA340B71166DC47531105
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214564.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 214564
IP address blocks: 2a0e:8f02:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:63:b6:6e:85:22:83:5c:5d:cf:a3:40:b7:11:66:dc:47:53:11:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=BFB1F222546F1F5BA194E0F22DC900A956DC1AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:3d:93:a5:7e:71:cc:6a:f5:f3:36:0d:9c:
ba:4e:d9:3d:db:92:18:68:8a:ca:83:4f:cd:48:99:
35:de:66:a5:07:53:1f:62:e4:a6:b8:9b:b9:4c:64:
52:1a:31:6a:ec:d3:1a:6f:b5:93:c9:80:28:ad:a2:
95:d2:d7:69:9b:cc:3b:0b:cd:a8:1f:64:6b:29:84:
53:75:d9:77:ea:5e:d9:2d:ec:de:bc:88:9a:3b:3e:
6d:0f:7b:1a:b2:49:5b:e9:d0:f2:ca:51:36:a9:05:
16:89:ac:40:62:bb:f6:eb:4e:cf:1c:f0:d3:ca:21:
bb:1f:2a:6c:c1:6e:09:b3:8d:88:ba:a1:83:25:d6:
ee:ff:84:26:f3:a9:d2:93:4b:c8:c3:c5:e8:e5:6c:
a3:94:93:61:ca:c2:69:0f:04:a7:69:56:f5:3a:bd:
f3:1f:fa:7b:19:47:86:eb:38:a9:aa:a5:8d:6a:47:
5b:1c:38:76:43:b4:6d:28:c5:27:1c:0f:f3:64:90:
6f:ec:72:f6:38:6f:52:cf:7c:ef:67:99:e6:94:5f:
2b:6a:3f:37:aa:67:f5:dc:51:72:78:29:29:77:4c:
d6:d8:44:3e:e4:a1:b9:b8:24:31:2e:17:f3:dd:47:
ff:4a:f7:f0:48:26:b6:54:f2:b2:23:96:11:3d:ae:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B1:F2:22:54:6F:1F:5B:A1:94:E0:F2:2D:C9:00:A9:56:DC:1A:D9
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214564.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:48:ea:90:39:b5:bf:19:22:b6:f4:31:4c:95:d3:62:e2:44:
07:00:90:26:d7:3c:d9:fd:3d:a1:c3:74:30:36:f8:2f:e4:07:
80:29:d3:ad:8e:fe:b5:7d:4e:f2:68:18:39:de:11:92:1d:d1:
da:7f:01:d6:56:5b:70:09:aa:85:47:73:46:e4:84:bd:0c:a8:
be:22:b3:cd:a5:f9:af:02:32:f7:05:a4:98:d2:f2:cd:8b:09:
ed:56:1a:b4:74:aa:39:17:ed:97:42:2c:65:89:a7:53:26:99:
55:26:f4:db:b2:0e:86:5d:96:e5:75:01:e7:7c:e8:89:5b:5f:
d4:c5:5f:53:97:9d:b1:f6:51:44:ef:86:a5:56:ef:c5:e3:58:
64:b6:3f:b1:2b:0c:cc:c6:1d:9f:ae:9f:33:92:2d:a0:84:73:
e3:8c:1f:09:14:81:ee:bf:02:14:2a:d9:37:2b:5d:e4:1d:2b:
da:36:a8:0c:9b:ac:ab:21:a9:2d:50:42:ef:59:40:7f:16:3d:
68:25:ec:ba:da:cd:a3:01:7a:e3:fa:bf:17:b1:8c:cb:9d:c0:
96:f3:b2:cb:82:c8:5d:31:fa:1c:a8:06:ab:52:be:69:a1:92:
94:11:88:b8:03:4b:60:4b:7f:22:ad:62:b0:75:fb:0d:22:2d:
97:aa:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:08 2026 by rpki-client