Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214930.roa
File: AS214930.roa (raw, json)
Hash identifier: 51cDSYaKkuAM+l0EUZ1fi/+Yyb16Qz+ZE8n8oPODUnw=
Subject key identifier: C1:B3:35:2C:40:10:A9:D3:8F:82:52:27:91:D6:0E:65:FF:A8:6B:9F
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1FB037B99819AA4D10B2955D1B9C80269C4B23A7
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214930.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 214930
IP address blocks: 2a0e:8f02:f06f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b0:37:b9:98:19:aa:4d:10:b2:95:5d:1b:9c:80:26:9c:4b:23:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=C1B3352C4010A9D38F82522791D60E65FFA86B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:1f:d9:cd:a8:1b:d0:fa:0e:3f:a5:cb:86:
83:de:11:b7:2e:b6:c1:78:98:6e:52:be:4f:9e:d6:
38:67:20:3e:41:e2:42:47:8c:a1:e7:ad:95:e7:b7:
87:43:67:c1:bb:f1:86:d5:e9:bf:3d:72:2c:1e:5d:
28:21:4e:be:ec:7a:78:46:00:2e:2a:57:20:48:66:
1c:76:ad:2d:bb:f0:80:07:61:6d:27:d6:14:f1:0d:
35:31:5b:93:c8:54:ea:70:84:e4:8e:b2:49:26:a9:
94:c3:20:11:5e:e5:f1:1b:1f:2c:13:59:e9:02:a5:
90:52:46:b1:86:a6:94:a4:94:aa:04:72:02:04:13:
68:f9:18:ce:8b:ed:be:70:2b:8e:2b:aa:a7:a3:80:
6e:96:01:c4:99:64:66:f0:74:56:11:ae:a0:5a:6b:
d9:7f:02:81:3c:de:65:4f:9b:ac:a3:5e:64:29:2f:
47:09:97:2b:3a:3d:24:d6:a3:8a:02:3e:0e:27:c9:
cf:1d:1d:db:68:83:f6:04:d5:03:09:0c:eb:9b:51:
cf:95:1b:f0:86:cb:83:52:5a:9d:04:43:3b:af:f1:
63:3a:1f:e3:a4:54:0f:77:ed:1c:2a:bd:26:81:e7:
b0:4d:1f:d5:24:5f:b5:b0:cf:bb:4e:a2:ea:12:69:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:35:2C:40:10:A9:D3:8F:82:52:27:91:D6:0E:65:FF:A8:6B:9F
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f06f::/48
Signature Algorithm: sha256WithRSAEncryption
7a:14:e1:b5:9c:3d:31:a1:c8:10:2e:23:e0:16:2a:33:c2:80:
f5:ff:d2:00:67:f8:1a:c7:3c:09:14:01:52:87:f6:4b:53:fb:
7f:52:e5:32:9c:a6:db:7f:cb:ab:3b:f6:1a:4b:35:5d:92:3c:
17:90:bc:48:bb:8a:0f:eb:8c:1f:82:20:b0:c6:63:76:33:55:
d7:ff:15:66:ae:84:31:e2:03:43:56:d9:aa:87:34:d3:9d:ae:
9d:83:ca:14:86:b7:3d:32:ed:c1:44:a6:90:84:ff:b3:2d:7e:
2a:b0:2f:fb:0c:26:b4:46:2d:d7:20:42:b3:cc:41:6e:28:3a:
dc:50:40:45:f3:71:c8:51:02:81:9c:58:3e:4a:32:30:18:6a:
ff:d8:9e:dc:42:6b:15:aa:36:d9:c7:57:46:cb:e5:f0:8e:ef:
33:95:99:9e:05:d6:fb:34:c4:ed:81:c3:5d:cc:49:a9:25:ad:
47:06:4c:43:58:b6:66:6c:72:24:58:e5:19:37:99:f1:91:63:
62:af:9a:b0:dc:cb:fc:28:fe:20:fd:70:98:b4:c1:6c:7c:02:
76:92:ca:d0:bf:4f:29:45:88:08:7a:da:c2:7e:bd:6f:ff:46:
78:32:42:4a:b7:e7:bf:d9:e9:dc:43:c0:e0:18:3c:55:c0:d5:
a8:2d:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:43:21 2026 by rpki-client