Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214495.roa
File: AS214495.roa (raw, json)
Hash identifier: QeFkTJOGYk0TUU4ANvDX4QJPFI4oWWJ6EegmPJPD0RM=
Subject key identifier: 6A:E2:09:A3:53:65:B1:09:25:07:AD:A8:30:D0:3C:8E:FE:29:11:02
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3189DBD04484C56EF3B0C4F153850B26657A39C0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214495.roa
Signing time: Fri 25 Jul 2025 08:07:40 +0000
ROA not before: Fri 25 Jul 2025 08:02:40 +0000
ROA not after: Fri 24 Jul 2026 08:07:40 +0000
asID: 214495
IP address blocks: 2a0f:85c1:83c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:89:db:d0:44:84:c5:6e:f3:b0:c4:f1:53:85:0b:26:65:7a:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:40 2025 GMT
Not After : Jul 24 08:07:40 2026 GMT
Subject: CN=6AE209A35365B1092507ADA830D03C8EFE291102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:3e:bb:1f:ed:a8:db:bb:65:c1:ba:bc:92:
2d:0c:8e:5a:6d:ba:9d:f3:90:75:c8:20:99:3a:10:
f0:1c:af:ca:3c:17:9f:1a:32:31:25:dc:72:2a:72:
8f:f6:37:69:9d:52:4e:0f:5e:7c:90:b2:b3:7e:4a:
e8:a4:bc:94:3f:80:4e:28:8a:48:ef:f0:21:fa:07:
4c:07:70:50:af:1e:04:d0:16:ee:29:18:a6:1b:b2:
e1:a4:bf:d8:1c:a6:fd:d8:93:6e:3f:8e:ff:22:bc:
1b:5f:2e:6a:9c:ad:3c:f7:50:56:d7:70:6c:64:68:
7e:38:d2:8e:a7:e7:96:82:2a:d2:7c:76:29:c2:3b:
22:0b:f3:2f:b3:b8:29:60:41:dc:64:5d:10:a0:74:
1d:d0:a0:4e:33:aa:6c:cc:c0:54:2b:07:76:e1:11:
d2:6a:e4:48:f1:12:5e:71:ff:b0:82:d9:cd:ca:1c:
b5:24:cf:6b:1d:64:1e:a2:dc:32:fd:86:85:76:96:
a7:83:d0:a8:8a:97:3b:35:71:d1:7f:23:00:d8:c3:
2d:86:fc:c8:b3:3b:9b:42:2b:66:89:c2:bb:0c:82:
27:d7:9c:f6:44:86:56:43:9a:e6:f8:ae:e0:e7:f2:
30:82:59:f1:21:ed:cb:ad:c6:44:68:ab:e2:e2:6b:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:09:A3:53:65:B1:09:25:07:AD:A8:30:D0:3C:8E:FE:29:11:02
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:83c::/48
Signature Algorithm: sha256WithRSAEncryption
2d:23:38:d3:d8:33:04:7b:72:51:4c:28:9a:56:28:70:0e:a9:
0d:0f:71:ed:2c:62:42:62:c7:c0:64:e2:72:d1:94:6b:83:72:
88:ae:3b:c9:9a:18:8f:d7:64:ab:65:58:b8:0f:62:4b:40:88:
78:d1:e8:b8:60:4f:6d:27:60:4a:6a:ba:74:61:fa:72:27:0b:
77:00:22:84:88:1f:1c:20:4b:05:c0:26:7c:c8:00:0a:c9:81:
97:37:0f:f8:ba:be:c9:0d:67:af:bc:7c:f6:4b:d9:c7:b5:00:
20:ad:67:14:d8:a9:11:fe:e3:0c:d4:c6:d0:dc:bc:cf:e5:3d:
7b:40:c0:b1:74:d5:07:83:2e:a8:ff:09:64:b1:8f:6e:be:27:
59:9c:65:b8:7a:be:e7:5e:1e:4f:56:71:d8:c5:b0:2a:e4:1f:
6e:98:74:2d:ec:19:6b:c4:3a:50:71:b9:6f:f4:f7:ed:dd:00:
e0:df:75:6b:ac:68:7b:2a:87:54:bf:37:0f:24:81:d1:dd:35:
6e:62:9b:1b:84:7d:44:81:ee:b3:4f:eb:ee:8f:f2:64:c2:9a:
dd:09:95:82:2b:9e:86:0f:cb:72:68:7b:5a:dd:1e:de:15:10:
c8:d9:c7:3d:ef:8e:50:d3:02:a0:6b:f4:6f:cc:0e:ae:97:68:
c1:d5:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:37:23 2025 by rpki-client