Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214022.roa
File: AS214022.roa (raw, json)
Hash identifier: dNlgFZCbwfTaKByoPJR1Kec57Lmsne1IYjWCwF5PRZs=
Subject key identifier: C5:65:61:29:F1:B5:6F:41:19:2F:A8:C4:E0:68:01:82:22:C0:A5:E2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 57B270173F38B91701739BE5A4DB9D1DE80EFE83
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214022.roa
Signing time: Thu 10 Sep 2026 19:09:08 +0000
ROA not before: Thu 10 Sep 2026 19:04:08 +0000
ROA not after: Thu 09 Sep 2027 19:09:08 +0000
asID: 214022
IP address blocks: 2a0f:85c1:8b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b2:70:17:3f:38:b9:17:01:73:9b:e5:a4:db:9d:1d:e8:0e:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 10 19:04:08 2026 GMT
Not After : Sep 9 19:09:08 2027 GMT
Subject: CN=C5656129F1B56F41192FA8C4E068018222C0A5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:88:9c:6e:f9:a0:f4:d4:63:a7:63:f6:34:
94:a3:02:8d:a3:42:16:14:69:6e:69:28:4b:34:04:
5e:53:ca:2d:f3:d0:79:04:ed:91:09:e5:b8:7f:60:
7f:1b:f7:d1:8e:4f:4c:7b:49:09:14:f2:94:15:db:
47:cc:97:cb:1e:56:b6:31:bb:66:9d:52:38:4e:5f:
b8:8f:d7:bf:90:23:e7:01:3d:34:2f:15:19:83:9b:
e8:69:8c:3b:8e:c9:01:b4:c1:07:53:d9:37:23:30:
ee:4e:f8:a4:09:a6:9e:bf:8e:e3:1e:8f:7e:fe:11:
ec:e7:73:e8:35:f2:6b:45:04:10:60:48:1d:73:ab:
80:fc:e3:05:79:53:2e:ba:89:d7:d9:5b:87:bc:f5:
f5:9c:8f:4a:56:68:17:5f:45:92:77:c0:c4:e0:b8:
30:4d:eb:1b:8d:83:d6:94:95:66:18:67:51:64:b4:
00:13:de:68:64:6e:9a:cc:95:35:a0:83:6a:a7:88:
88:84:da:85:a5:64:55:67:92:36:c2:4d:d1:6e:47:
cd:31:0d:7d:8b:12:9e:94:1a:08:55:dd:5d:8a:b7:
d7:6a:82:49:e6:f8:68:3d:84:6b:b8:c6:7d:38:29:
35:f4:19:8f:76:9f:c1:7a:6a:e3:4a:f9:7e:b0:a4:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:61:29:F1:B5:6F:41:19:2F:A8:C4:E0:68:01:82:22:C0:A5:E2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8b5::/48
Signature Algorithm: sha256WithRSAEncryption
cf:91:bb:7c:92:a9:4c:26:83:c5:5a:4b:f9:00:11:7f:27:4c:
61:4b:98:9b:66:15:1e:a5:e4:47:a7:3c:03:db:1e:13:f6:88:
9f:d4:29:ac:91:63:e9:b5:9d:95:2e:13:c2:c4:44:05:c9:6b:
13:83:57:c4:e0:49:06:16:19:ce:f1:7d:75:e0:b3:c6:1c:d1:
8e:1f:70:1d:08:93:73:e8:8f:b1:24:fe:06:24:ca:e2:6a:5c:
18:6d:0d:d3:c2:24:13:95:dd:46:6b:7c:27:61:eb:50:8b:94:
94:96:ee:a2:cd:b4:90:39:63:22:72:1d:e6:b4:d2:72:be:d8:
48:dd:b0:cd:d9:61:fb:ac:a3:44:20:5c:06:28:42:0e:65:f8:
7a:d3:52:20:81:d9:cf:d3:56:70:4a:b1:3c:46:34:62:43:19:
ac:ab:1f:43:fb:2a:23:5a:bb:f5:af:be:9e:8e:0f:d6:a8:33:
ed:39:04:5e:e9:a2:28:34:44:30:7b:b8:d2:c0:97:ce:f0:bb:
8d:65:10:93:dc:1d:6f:96:cf:a4:07:29:78:78:1f:0c:30:7d:
39:ec:d8:b3:85:5f:e0:50:8b:a2:19:33:9d:01:ae:53:3f:2c:
bf:30:23:67:7e:b5:aa:17:2e:6f:63:02:74:f5:43:55:b9:28:
24:4d:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:36:31 2026 by rpki-client