Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214693.roa
File: AS214693.roa (raw, json)
Hash identifier: TcV4uYpu8tz4VvRJU6dVJTx7JVQHAZ8lFwdF8/ssNiI=
Subject key identifier: F5:D6:2A:E2:C0:EE:D1:A8:E6:8F:3F:AC:4D:19:49:F9:14:3C:C9:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 407FD655F74BCAA0CDCEA6872B4D9CD8AB176C2C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214693.roa
Signing time: Thu 03 Sep 2026 12:49:32 +0000
ROA not before: Thu 03 Sep 2026 12:44:32 +0000
ROA not after: Thu 02 Sep 2027 12:49:32 +0000
asID: 214693
IP address blocks: 2a13:9500:af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7f:d6:55:f7:4b:ca:a0:cd:ce:a6:87:2b:4d:9c:d8:ab:17:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 3 12:44:32 2026 GMT
Not After : Sep 2 12:49:32 2027 GMT
Subject: CN=F5D62AE2C0EED1A8E68F3FAC4D1949F9143CC9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:6e:25:0a:24:8c:07:b9:1c:73:a2:66:8c:
3c:f8:7a:e4:33:01:eb:b2:d0:14:4f:24:d2:1e:81:
39:2d:b6:98:2a:60:a4:b4:55:da:fa:de:0a:4b:e7:
48:5a:3e:63:8c:1d:aa:be:53:0f:35:6e:22:1a:c8:
e3:f9:48:67:76:a0:13:ff:75:c5:53:4c:d0:ef:86:
8d:d6:7d:19:c1:16:8d:dd:54:60:6b:ce:67:2d:fa:
53:1e:96:b9:93:a2:14:7c:4e:bd:a7:3e:b6:77:d0:
d2:35:1f:0c:17:93:9c:2f:6c:ef:5b:8f:cb:a2:e3:
c7:73:b4:37:f1:a2:56:d6:73:99:4a:8c:e5:a7:52:
7a:e2:61:53:c1:57:a8:cf:41:14:52:c8:1d:77:6b:
a4:cd:b5:5d:42:f6:84:9a:30:c3:72:bd:53:d2:b2:
89:76:cc:da:12:b9:21:72:12:33:75:8f:4c:0c:98:
32:9a:bf:10:ee:88:a4:20:43:bb:51:a8:7f:2c:8a:
b7:57:d7:df:f7:d6:af:e8:46:ec:e3:19:97:1d:82:
b7:70:75:ba:9d:db:62:ba:3b:f6:a7:0a:d7:de:cc:
04:e3:a4:41:89:3e:8d:df:4a:10:d7:23:7e:20:c7:
46:2e:e7:d2:64:22:8d:97:e3:22:a1:9f:a9:f2:8a:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:2A:E2:C0:EE:D1:A8:E6:8F:3F:AC:4D:19:49:F9:14:3C:C9:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:af::/48
Signature Algorithm: sha256WithRSAEncryption
47:3b:ef:42:91:ff:60:e6:d4:8e:c9:79:7d:f4:f4:76:6e:47:
05:84:7e:5a:be:97:02:38:fa:d4:05:ef:db:25:fc:21:70:dc:
ee:7b:62:9a:7d:62:f9:95:9c:eb:68:2d:80:67:48:49:17:b0:
7c:12:ba:57:37:c3:e1:f5:3e:bf:17:ba:9b:6b:75:af:3d:51:
d8:64:93:40:ff:24:ac:42:91:04:ba:ff:8d:f2:b5:31:7b:d2:
9b:4f:55:d9:73:ff:12:8c:32:c0:99:9b:aa:9d:8b:a0:29:63:
e3:82:5f:5b:6a:c8:1e:6e:56:9c:d9:b6:f2:a6:78:2b:b9:eb:
c3:28:45:17:8d:ff:57:5a:8f:1d:df:20:08:41:ed:c3:35:cc:
ed:75:db:11:dd:29:30:86:68:25:e1:b9:4e:81:ac:09:97:32:
9d:a3:a2:80:ea:36:d2:fe:34:c0:f6:c9:76:eb:03:3c:7b:5f:
f8:1d:88:da:e1:33:b3:6d:fd:53:7d:eb:02:4e:05:86:2a:ef:
04:b0:a6:31:31:a5:0d:3b:04:82:11:d2:47:48:a7:d4:4b:32:
ff:06:eb:8b:ae:66:21:0d:09:d7:95:e1:c3:0c:9b:de:2e:58:
79:68:52:b6:c4:1c:e8:b5:a2:09:ca:32:01:f0:0c:56:51:f3:
9a:35:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:17 2026 by rpki-client