Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214501.roa
File: AS214501.roa (raw, json)
Hash identifier: j+w7qGBQjo+V9nJ7s493tnuPTxqjV+AbIp5pNZLywdY=
Subject key identifier: F7:39:51:65:2E:00:55:A2:42:24:EC:74:D4:F7:B7:1B:88:95:44:5A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2978A612883982F7292695EB28BBDFC30F495F00
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214501.roa
Signing time: Thu 17 Sep 2026 17:09:12 +0000
ROA not before: Thu 17 Sep 2026 17:04:12 +0000
ROA not after: Thu 16 Sep 2027 17:09:12 +0000
asID: 214501
IP address blocks: 2a0f:85c1:83b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:78:a6:12:88:39:82:f7:29:26:95:eb:28:bb:df:c3:0f:49:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 17:04:12 2026 GMT
Not After : Sep 16 17:09:12 2027 GMT
Subject: CN=F73951652E0055A24224EC74D4F7B71B8895445A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:b5:a8:91:ae:c4:ab:3e:da:82:ae:93:48:
c5:93:86:3d:54:67:b6:19:92:0b:70:1d:64:39:ae:
13:bf:d3:53:ee:75:60:79:25:91:4d:78:63:08:c3:
68:f5:8e:d2:d5:ae:52:dc:08:6b:8d:27:06:7b:9a:
70:a2:bd:35:d3:57:06:ae:eb:f8:2d:bd:4a:59:97:
0d:26:76:49:6c:b5:5d:b5:9a:c0:96:b7:1f:01:25:
d8:db:d8:7d:db:18:d9:d2:25:23:86:43:2f:4e:f8:
b5:9c:6e:4e:e5:c5:74:9d:40:e1:0f:e0:21:25:40:
75:76:d9:b1:54:82:10:18:e3:75:17:fb:8e:20:30:
4a:b8:57:16:b4:b1:8f:98:f4:ed:79:91:16:b6:ba:
96:92:4e:65:28:f3:7a:d0:f0:a2:8c:59:70:7d:df:
ee:6b:e3:e3:d2:b2:c9:c0:37:2f:d0:3b:65:49:2b:
da:f8:e8:6c:99:ac:dd:42:18:de:78:c5:ec:dc:b3:
53:27:bf:4e:24:43:e5:54:1f:2e:a0:ce:a5:c9:00:
a7:be:71:49:26:af:72:1c:56:69:62:1f:4c:70:b7:
66:bb:1e:b5:8d:e0:fd:23:9d:fd:9f:ff:cc:0b:fb:
7a:81:98:82:b3:76:a1:41:df:8b:3a:ff:4f:ea:1d:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:51:65:2E:00:55:A2:42:24:EC:74:D4:F7:B7:1B:88:95:44:5A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:83b::/48
Signature Algorithm: sha256WithRSAEncryption
90:de:ea:2c:a5:df:55:42:c1:bd:14:d4:67:0e:1a:56:4a:8b:
09:27:92:ec:bb:33:7c:a0:03:b6:12:8f:64:40:79:4b:28:d8:
cd:cb:e7:b4:27:18:20:2b:b9:d0:f7:04:4a:ca:c3:f4:4e:b2:
54:ca:be:f8:27:96:54:5d:df:ed:73:51:ba:b8:a1:9a:27:b9:
a3:d8:fc:02:c1:1d:43:90:3a:7a:0b:ff:27:7f:20:18:5e:b2:
31:d4:42:44:28:6e:30:2e:5e:44:05:29:34:cb:ba:66:6e:c7:
b6:21:31:f6:95:87:82:3b:65:e0:38:2a:69:b5:f2:7b:3c:b4:
b9:f4:ee:07:50:8c:a1:88:e8:f3:52:4e:9a:90:59:99:35:40:
97:7c:7d:2e:8c:4c:07:37:3c:91:e7:df:75:45:1e:37:0f:37:
ed:67:b1:75:1d:90:c2:f9:eb:27:81:a0:78:8e:3f:2a:fc:09:
d6:f0:3c:f0:9b:28:66:e9:4d:ed:25:27:1f:c7:4c:fa:d6:36:
a6:2b:49:6a:f4:aa:76:e0:7d:3a:96:07:cc:c0:6e:82:29:a2:
56:48:70:b2:05:9f:81:28:51:b5:bc:33:7b:90:9f:62:df:bb:
4e:9c:54:83:9d:a7:cc:f4:b8:a0:aa:7f:d5:2b:c9:08:08:a4:
27:86:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:33:32 2026 by rpki-client