Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
File: AS214539.roa (raw, json)
Hash identifier: xNX6WMLf8/KLOElKBT+x975FmxF83XHYwfDIoPy79wk=
Subject key identifier: A5:42:4A:FA:6F:CD:A9:52:12:8D:22:08:9E:78:48:F3:5F:CE:BE:9B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3FB9902174AA32D70B59A49A3268A76AF38AD55E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
Signing time: Fri 25 Jul 2025 08:07:39 +0000
ROA not before: Fri 25 Jul 2025 08:02:39 +0000
ROA not after: Fri 24 Jul 2026 08:07:39 +0000
asID: 214539
IP address blocks: 2a0f:85c1:835::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b9:90:21:74:aa:32:d7:0b:59:a4:9a:32:68:a7:6a:f3:8a:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:39 2025 GMT
Not After : Jul 24 08:07:39 2026 GMT
Subject: CN=A5424AFA6FCDA952128D22089E7848F35FCEBE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:09:6f:93:c6:9c:de:10:36:ad:b2:94:ce:
35:a7:2e:12:fe:17:32:51:ba:93:cb:de:4e:35:c4:
b0:16:84:f5:4c:27:09:df:92:98:ba:d4:dd:5d:49:
ae:be:8f:cc:3c:c2:f5:c3:f8:a2:70:24:9d:5a:93:
4b:7e:35:0d:35:8a:c9:01:9d:07:01:bd:53:12:1d:
e2:fb:9f:d1:71:7e:1e:0b:20:a2:fd:e3:45:1c:d0:
27:22:39:6f:b4:8a:ea:8e:28:41:7f:35:13:7a:f2:
1c:0e:e2:cc:16:43:2a:ec:e6:48:d0:6d:9c:f3:74:
fe:29:0c:8b:d2:00:a3:ea:9c:a6:78:4e:38:c5:f8:
65:99:40:70:e8:e8:96:ed:44:af:79:b2:83:f0:3a:
53:05:25:9d:61:07:c0:c6:99:65:f9:85:a0:b3:c9:
cb:59:07:c9:9f:b0:98:02:63:7b:59:d7:b9:60:de:
7f:6b:62:01:6a:fa:c5:b3:d0:32:e4:8f:7a:a7:88:
fc:5b:a9:30:31:92:0c:3c:49:2c:ef:5c:1b:34:27:
ef:a6:7c:a5:76:7d:9c:62:29:34:8b:da:2e:ac:d3:
1a:35:c6:0d:75:9d:61:41:ec:03:44:d6:8f:ed:94:
01:df:c9:a7:8d:58:f1:79:44:15:21:46:44:7c:d5:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:42:4A:FA:6F:CD:A9:52:12:8D:22:08:9E:78:48:F3:5F:CE:BE:9B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:835::/48
Signature Algorithm: sha256WithRSAEncryption
6d:69:59:53:80:d1:d9:c7:e2:bf:2d:e6:10:e1:10:2d:a8:22:
05:2a:05:2b:25:7a:d8:2d:61:8a:b3:db:9c:bb:35:4b:bd:fd:
88:8c:db:9c:a8:73:6a:53:9c:0d:a5:ae:5c:41:a8:15:6e:79:
a8:d0:a7:be:f6:70:79:20:47:35:3e:1c:50:65:b8:a2:02:c1:
fe:ec:92:e5:63:db:96:73:02:e0:f2:d0:13:9f:34:b4:65:1d:
7c:98:8d:3a:35:f2:99:9a:71:50:76:d1:4e:21:19:41:b0:a0:
95:23:c1:e2:36:31:7d:63:8a:28:2f:9b:9c:be:19:60:fe:45:
e1:b4:c4:6a:67:cd:7b:bd:03:1e:af:5c:a3:99:0f:07:72:f7:
4f:78:0b:8f:e1:b4:62:b5:d6:e2:ae:7a:b2:e5:44:64:bb:45:
27:7e:a4:36:7c:85:56:e4:ba:88:35:2e:80:45:50:01:e2:c6:
c1:a6:2d:58:62:b0:cf:81:ee:a3:ad:b7:36:be:c9:a0:5e:88:
67:58:9f:cc:48:15:c8:b9:5d:29:fe:73:3c:61:ae:5d:65:fe:
05:66:a4:52:ee:18:3b:74:55:d9:b0:44:e2:18:90:0e:71:ea:
55:20:31:a4:2f:6b:78:c6:54:10:3a:8e:ca:d2:70:99:e2:85:
90:f7:ad:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUP7mQIXSqMtcLWaSaMminavOK1V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA3MjUwODAyMzlaFw0yNjA3MjQwODA3MzlaMDMxMTAvBgNV
BAMTKEE1NDI0QUZBNkZDREE5NTIxMjhEMjIwODlFNzg0OEYzNUZDRUJFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSYglvk8ac3hA2rbKUzjWnLhL+
FzJRupPL3k41xLAWhPVMJwnfkpi61N1dSa6+j8w8wvXD+KJwJJ1ak0t+NQ01iskB
nQcBvVMSHeL7n9Fxfh4LIKL940Uc0CciOW+0iuqOKEF/NRN68hwO4swWQyrs5kjQ
bZzzdP4pDIvSAKPqnKZ4TjjF+GWZQHDo6JbtRK95soPwOlMFJZ1hB8DGmWX5haCz
yctZB8mfsJgCY3tZ17lg3n9rYgFq+sWz0DLkj3qniPxbqTAxkgw8SSzvXBs0J++m
fKV2fZxiKTSL2i6s0xo1xg11nWFB7ANE1o/tlAHfyaeNWPF5RBUhRkR81Z7hAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUpUJK+m/NqVISjSIInnhI81/OvpswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQg1MA0GCSqGSIb3DQEBCwUAA4IBAQBtaVlTgNHZx+K/LeYQ4RAtqCIFKgUrJXrY
LWGKs9ucuzVLvf2IjNucqHNqU5wNpa5cQagVbnmo0Ke+9nB5IEc1PhxQZbiiAsH+
7JLlY9uWcwLg8tATnzS0ZR18mI06NfKZmnFQdtFOIRlBsKCVI8HiNjF9Y4ooL5uc
vhlg/kXhtMRqZ817vQMer1yjmQ8HcvdPeAuP4bRitdbirnqy5URku0UnfqQ2fIVW
5LqINS6ARVAB4sbBpi1YYrDPge6jrbc2vsmgXohnWJ/MSBXIuV0p/nM8Ya5dZf4F
ZqRS7hg7dFXZsETiGJAOcepVIDGkL2t4xlQQOo7K0nCZ4oWQ961b
-----END CERTIFICATE-----
Generated at Thu Aug 7 13:09:34 2025 by rpki-client