
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: OVDAQmW/GHl2U2L4oJhJlC2N/dCk9mFAbAFGnBMAkuM=
Subject key identifier: 1E:12:EB:FB:06:9E:1B:C4:BA:5A:6A:0B:86:79:25:DD:4D:DF:E4:6C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4F0AEC6CB8BDC0D7EBE0B2B086CE25F31A78E986
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214481.roa
Signing time: Fri 25 Jul 2025 08:07:43 +0000
ROA not before: Fri 25 Jul 2025 08:02:43 +0000
ROA not after: Fri 24 Jul 2026 08:07:43 +0000
asID: 214481
IP address blocks: 2a0f:85c1:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0a:ec:6c:b8:bd:c0:d7:eb:e0:b2:b0:86:ce:25:f3:1a:78:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:43 2025 GMT
Not After : Jul 24 08:07:43 2026 GMT
Subject: CN=1E12EBFB069E1BC4BA5A6A0B867925DD4DDFE46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:33:9f:ae:b9:8e:57:e3:fc:bf:9e:c6:a3:
46:cf:84:59:6d:ea:da:0d:c5:43:4a:46:fa:ed:96:
b8:7f:61:f6:dc:f8:c0:7c:d9:00:c5:db:37:0a:60:
42:5b:77:7d:a0:c7:35:b0:0a:ca:68:f6:fa:92:65:
1a:a1:dc:b6:d7:ea:d9:13:72:3f:b8:fb:10:e7:a6:
ab:e1:84:3e:18:65:7b:3f:fb:fc:32:93:87:ec:e5:
3d:9e:2b:d7:9b:cc:5c:58:0b:ff:6a:74:20:a7:41:
1c:e4:7d:90:71:8c:f0:03:59:b5:7c:6f:0e:a4:68:
6e:1a:6c:e4:e8:a8:f9:c8:4e:34:a6:be:72:08:66:
74:78:f2:ef:22:37:ad:a2:39:38:31:a7:99:11:6b:
90:41:7b:08:10:04:68:45:39:42:86:9d:05:0a:4d:
30:40:85:a1:27:f5:04:10:f0:1b:e5:32:bb:2e:54:
49:7e:2b:25:1f:f8:e9:a3:dd:2d:e9:d5:dd:ca:e7:
8d:e2:b0:cc:02:60:da:b5:f7:bc:9d:c0:36:2f:60:
36:64:34:ef:f1:da:af:35:4b:e8:d7:67:e1:fa:26:
51:68:23:ad:1b:ba:10:ce:f0:8e:16:5e:83:f4:05:
1f:2b:a3:ad:83:40:6d:c5:4b:b9:e1:2d:e3:74:55:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:EB:FB:06:9E:1B:C4:BA:5A:6A:0B:86:79:25:DD:4D:DF:E4:6C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:840::/48
Signature Algorithm: sha256WithRSAEncryption
81:4e:b6:cf:7d:7f:2c:47:5c:36:a1:7d:95:3e:e0:bb:fc:1a:
37:ae:cd:8f:71:db:cc:53:8b:2b:18:5a:59:90:7c:7a:2b:62:
90:08:b7:cc:26:71:d9:f0:3c:6b:8f:c1:1e:6f:76:be:e5:ce:
f2:8d:29:77:52:24:20:c7:0f:a8:78:7e:68:d1:21:28:74:49:
55:b3:a5:13:40:bd:b7:c8:34:19:33:97:7b:f0:bd:bf:bc:cc:
12:e9:cd:bb:b9:55:a0:c5:c5:78:22:45:8b:f6:fc:e9:6a:f0:
fb:06:5b:21:de:59:e0:17:d7:c2:2f:bb:b3:0e:55:86:3d:4a:
45:ad:42:82:cf:93:14:e7:62:12:d4:3c:dd:66:44:df:1a:63:
15:e9:74:ba:18:36:9f:94:b6:81:f5:fe:74:7d:74:51:4d:92:
5c:3d:46:c2:93:41:1f:31:c4:82:47:15:27:9b:fc:85:ac:2e:
7b:84:28:a3:f9:2c:fa:5b:dd:30:2d:06:da:fe:6f:98:79:6a:
f6:08:8b:7b:eb:30:81:31:bf:6d:3c:a5:af:b9:3c:ef:56:5d:
a9:01:be:a5:9f:c1:02:75:dc:cc:c6:e2:7e:58:dd:fa:5c:47:
83:3e:1f:a6:05:43:ab:be:6e:51:7e:36:0d:13:43:67:e0:72:
66:cf:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:15:02 2025 by rpki-client