Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214310.roa
File: AS214310.roa (raw, json)
Hash identifier: jlvitcVoXyvpcpc5HvYWadltqcOX3qDSUID4KHe3DCc=
Subject key identifier: B2:41:B5:07:F3:23:AF:E0:EB:E5:49:4E:6A:8A:CE:50:ED:4C:FD:69
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2789C97CC89BD496B137AE5E115B460D81FDB1BB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214310.roa
Signing time: Thu 10 Sep 2026 19:09:08 +0000
ROA not before: Thu 10 Sep 2026 19:04:08 +0000
ROA not after: Thu 09 Sep 2027 19:09:08 +0000
asID: 214310
IP address blocks: 2a0f:85c1:891::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:89:c9:7c:c8:9b:d4:96:b1:37:ae:5e:11:5b:46:0d:81:fd:b1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 10 19:04:08 2026 GMT
Not After : Sep 9 19:09:08 2027 GMT
Subject: CN=B241B507F323AFE0EBE5494E6A8ACE50ED4CFD69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:38:e6:06:e9:57:4c:31:8b:f7:fb:ba:6e:
06:43:42:1a:82:71:dd:da:99:ca:f6:ae:46:a6:83:
0d:50:03:d1:3a:ab:63:b4:36:af:24:86:29:c4:c0:
64:c3:ac:5b:8f:8c:cd:66:1d:0c:a8:f7:3a:3b:bd:
54:90:36:61:18:15:62:7f:f0:9f:7a:6f:ef:1d:14:
5e:cb:14:70:03:e3:f3:12:ee:cc:d4:34:fe:ae:d2:
93:70:ec:1d:09:f4:67:58:66:4a:9b:e4:8c:c2:20:
13:a9:61:cd:71:3b:ee:d3:9f:7d:f9:09:b0:4b:34:
1e:cc:f1:28:7d:d7:7f:73:24:50:c1:b3:16:a5:a3:
1c:4a:15:de:40:c2:6a:b2:ce:27:e0:33:0d:c8:04:
bf:a6:86:da:9e:fb:10:d3:e3:4e:5d:df:c4:3e:35:
f4:52:07:29:4a:81:22:f9:b4:50:79:3a:7e:5f:d9:
f4:d5:5f:e8:26:62:f5:c4:ee:ac:a7:a7:81:c1:11:
e9:a1:63:53:ea:83:0d:b6:1f:01:1e:47:c1:0f:af:
05:b0:ec:71:c9:23:01:ff:84:b1:aa:6e:44:10:59:
3d:84:47:c3:f5:25:83:bd:9f:b9:b5:62:3a:35:7f:
f7:9d:c6:1c:93:1f:53:e0:f7:00:23:40:c0:8e:fc:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:41:B5:07:F3:23:AF:E0:EB:E5:49:4E:6A:8A:CE:50:ED:4C:FD:69
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:891::/48
Signature Algorithm: sha256WithRSAEncryption
ed:f2:83:5c:43:9a:8f:ed:ff:de:2c:70:e8:90:e0:c3:df:05:
99:df:50:51:cc:c1:93:7f:80:bd:ce:d3:14:be:b6:71:25:e9:
d4:ea:f8:51:3c:04:92:cd:1f:39:ef:78:d3:5a:2f:a1:c7:3b:
18:41:3c:6d:88:32:78:40:3f:18:ed:9c:7f:82:bc:3c:47:10:
85:2d:b0:6d:34:8b:4c:1c:60:cc:b4:02:53:c6:9c:f1:c7:32:
69:cf:a0:7c:24:a4:0c:e3:c2:28:63:1a:ed:ed:e6:e9:6f:f0:
6f:85:3a:f8:6b:92:2b:da:7c:94:ea:c3:0b:6a:0e:90:29:10:
f8:8c:d0:25:1d:df:5d:c7:ba:2c:bc:d2:0f:6a:c0:1f:e6:ae:
17:25:db:26:70:d0:da:52:87:ac:8b:9d:59:83:79:0b:e5:e3:
89:05:9c:1c:2a:ca:4c:f0:df:a7:3b:38:ce:5b:f1:38:eb:f2:
89:aa:93:5c:e8:10:ff:b9:2e:f5:5a:10:57:5e:38:e3:7c:4e:
6b:a1:a8:17:65:1f:3e:c5:4f:2f:2f:d1:18:80:96:ea:f0:8d:
1d:38:96:5b:cf:7d:9f:f0:81:77:08:de:63:2a:42:39:30:aa:
51:41:a0:dd:a3:84:31:49:94:05:05:a2:5e:39:af:c3:82:c4:
1b:0f:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:36:13 2026 by rpki-client