
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
File: AS214374.roa (raw, json)
Hash identifier: AnUZ79+JNAsFbzo9aVtla/avgSDHbqPRbO8JlegqHro=
Subject key identifier: 9F:64:90:04:44:C9:16:5F:0F:E1:F9:1E:6B:D6:ED:41:B6:18:09:5D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 37E11FE3099A6D533AE4C13A64243821C24B838B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
Signing time: Fri 25 Jul 2025 08:07:42 +0000
ROA not before: Fri 25 Jul 2025 08:02:42 +0000
ROA not after: Fri 24 Jul 2026 08:07:42 +0000
asID: 214374
IP address blocks: 2a0f:85c1:883::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e1:1f:e3:09:9a:6d:53:3a:e4:c1:3a:64:24:38:21:c2:4b:83:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:42 2025 GMT
Not After : Jul 24 08:07:42 2026 GMT
Subject: CN=9F64900444C9165F0FE1F91E6BD6ED41B618095D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:cf:a9:e5:4a:c7:b9:8d:37:92:22:d6:ec:
5d:ad:a3:dc:43:63:ce:5a:6d:15:2a:b4:e6:7c:c0:
bb:d2:cd:06:b5:6a:83:82:a0:4e:98:da:1b:af:8c:
98:d0:9e:a5:4b:68:b3:bc:48:50:cb:a6:ed:93:cc:
8d:5a:73:43:15:30:48:1a:2b:8d:bc:24:27:59:de:
b7:2a:82:22:0a:90:da:cf:33:74:9e:26:4e:ec:b5:
05:2b:dd:a8:3e:3e:96:a4:0f:66:d8:cc:24:79:6d:
66:db:44:06:3d:b0:b4:46:a5:af:a6:55:c9:c8:1c:
06:f8:5d:e6:98:e1:a0:2e:f3:96:15:44:a3:ac:ec:
f9:96:d8:c0:07:a2:ca:27:5b:23:c5:db:cd:7e:52:
59:ed:63:5f:e2:c8:6d:89:79:fb:f5:ea:a3:48:a2:
08:99:7d:30:6d:6b:c1:63:5b:95:61:8f:ed:bd:0b:
69:2c:96:fa:7e:de:80:e6:18:1f:38:88:91:c8:43:
65:ba:cd:f4:0a:72:5e:f6:08:f6:e6:5f:02:00:39:
3d:84:f0:7c:0e:6d:9b:9a:9f:8d:ce:76:f8:b6:3c:
35:5f:8d:75:4d:da:28:c6:13:08:c7:f2:91:3b:8d:
75:3b:5a:08:bd:81:95:42:d1:38:aa:80:78:66:0c:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:90:04:44:C9:16:5F:0F:E1:F9:1E:6B:D6:ED:41:B6:18:09:5D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:883::/48
Signature Algorithm: sha256WithRSAEncryption
be:2b:fc:35:cc:31:6a:44:3b:e6:c9:ce:6d:3f:82:23:9c:e7:
96:f0:3a:69:d2:c9:50:5a:b2:70:bb:ef:b2:8b:d0:97:a6:70:
59:c3:71:af:bb:a8:06:e4:8c:ad:a9:c0:b1:d0:eb:e4:56:06:
67:fe:21:4f:c9:81:30:58:95:49:c0:7e:5b:f9:e7:6e:ca:40:
34:55:10:d4:72:23:74:5c:7d:83:ad:d7:c3:45:65:8d:58:65:
05:f0:09:a0:78:67:7c:a6:8d:49:52:73:3f:01:4f:6c:d7:52:
5c:b5:45:bc:65:b5:a9:9d:c0:8d:63:66:c9:b0:ef:de:fa:bb:
8f:d8:28:95:e5:0f:14:0d:a9:47:bf:99:6e:42:06:20:45:6d:
bf:fc:1f:99:da:fe:6c:3d:ee:aa:5b:a2:06:60:5d:90:b6:b1:
af:39:52:6c:2e:e7:87:f9:87:32:41:c0:58:3a:54:bc:38:e3:
c3:27:b5:00:9f:03:57:b4:1d:06:5f:1e:1a:6f:c0:22:56:8c:
54:2b:d1:50:6a:35:6e:08:28:d7:1e:d3:d0:c6:fb:f5:35:9d:
eb:2b:c6:b9:4a:b6:b2:3f:7c:10:37:a1:db:9e:3c:73:86:ce:
25:d5:2e:90:13:ce:87:89:1d:46:52:ff:05:d3:d4:44:f5:b8:
fd:69:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:16:22 2025 by rpki-client