Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214561.roa
File: AS214561.roa (raw, json)
Hash identifier: 9XOVSaoWrWlb5BoLbfdnHhEVF+R7v6MaY4iuBu6fbSU=
Subject key identifier: 70:B0:B0:DA:8D:13:A2:B5:48:0B:D1:1B:2A:9E:CA:C8:FC:15:88:AC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 78D2C1CAD8FA7E36B598D95BBE8FFAFE1DCE8494
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214561.roa
Signing time: Fri 25 Jul 2025 08:07:36 +0000
ROA not before: Fri 25 Jul 2025 08:02:36 +0000
ROA not after: Fri 24 Jul 2026 08:07:36 +0000
asID: 214561
IP address blocks: 2a0f:85c1:830::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d2:c1:ca:d8:fa:7e:36:b5:98:d9:5b:be:8f:fa:fe:1d:ce:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:36 2025 GMT
Not After : Jul 24 08:07:36 2026 GMT
Subject: CN=70B0B0DA8D13A2B5480BD11B2A9ECAC8FC1588AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:b9:4b:31:19:73:6f:51:d3:0a:cd:fc:bc:
f7:18:66:3e:2f:10:31:a3:08:cc:51:2b:da:f5:9c:
a9:fc:e6:72:03:b3:99:06:a1:0a:36:46:b0:1e:fe:
0e:f6:a5:0a:a8:dc:0d:b0:98:c3:e8:92:65:0a:b7:
14:df:a4:1d:33:1b:ac:8a:61:c6:42:bf:4c:76:d4:
e8:e4:ff:36:40:2c:ad:2c:19:b6:b9:a5:7e:94:3d:
d5:e3:4b:fc:1e:44:1d:6e:9e:a7:cf:a5:d7:a3:37:
e0:45:20:33:1f:f5:63:b5:a1:be:d5:8b:fe:0c:31:
e3:68:d6:ab:7d:e4:7c:fd:86:5b:bf:9a:25:32:87:
2e:f3:c3:5f:a2:8f:33:b7:38:25:da:65:eb:e6:ef:
37:3f:c1:23:02:1b:a3:73:65:fd:e6:41:a1:af:ae:
2d:ca:24:f6:1a:35:97:b6:8e:64:cb:d2:6c:ff:9b:
47:8d:80:47:9f:e6:7b:4d:4f:13:f4:94:9e:f6:02:
d8:3e:8e:06:a9:8f:16:01:5c:e8:48:21:19:60:6c:
67:8b:2b:07:4e:a5:8b:19:b5:0c:b1:af:7d:14:12:
0d:51:dd:d6:8c:af:61:09:0a:30:ed:62:e9:6e:3e:
93:88:42:de:ab:fd:0d:15:0a:a5:fd:f0:95:f8:8a:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:B0:DA:8D:13:A2:B5:48:0B:D1:1B:2A:9E:CA:C8:FC:15:88:AC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:830::/48
Signature Algorithm: sha256WithRSAEncryption
4b:20:f4:ba:9d:17:3d:6a:b6:21:df:ea:af:b4:78:ef:93:23:
62:8f:ea:1f:59:d4:72:46:fb:c1:13:93:f1:c2:74:88:37:28:
4b:04:aa:13:72:2a:a0:49:cc:ff:1a:59:85:40:ec:e3:3a:51:
82:22:3d:39:4e:12:44:27:ff:a4:c9:2a:c6:d6:65:05:55:af:
bb:ff:de:e9:89:53:b9:9c:ae:1e:74:87:c1:63:17:be:f1:13:
2b:90:e1:b3:70:e6:2c:e2:5c:bf:7f:c1:47:8c:04:5b:b1:3f:
6e:27:87:0d:ba:49:02:07:0b:70:a9:29:b0:0d:4a:13:ae:3a:
a2:37:9a:8d:28:a6:2b:4e:5b:7d:24:a3:89:85:cc:bf:eb:8e:
90:93:ed:5c:37:1d:75:d5:9b:c6:40:7f:98:b9:c0:eb:d3:d2:
19:b4:33:cb:4c:d6:35:6e:a1:70:bd:ff:83:6e:81:84:3d:21:
96:85:4d:c8:4b:9c:71:c7:77:34:d7:10:ff:9a:e5:61:43:37:
8b:66:c5:e0:0a:7c:0c:d1:c5:61:3a:bf:84:32:10:36:6a:da:
8b:a0:27:bd:76:b3:71:70:0b:96:72:92:98:28:cd:a3:c7:02:
6a:73:95:15:80:98:c1:03:04:4f:67:9f:89:c1:b9:94:6b:75:
ac:ad:64:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUeNLBytj6fja1mNlbvo/6/h3OhJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA3MjUwODAyMzZaFw0yNjA3MjQwODA3MzZaMDMxMTAvBgNV
BAMTKDcwQjBCMERBOEQxM0EyQjU0ODBCRDExQjJBOUVDQUM4RkMxNTg4QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1blLMRlzb1HTCs38vPcYZj4v
EDGjCMxRK9r1nKn85nIDs5kGoQo2RrAe/g72pQqo3A2wmMPokmUKtxTfpB0zG6yK
YcZCv0x21Ojk/zZALK0sGba5pX6UPdXjS/weRB1unqfPpdejN+BFIDMf9WO1ob7V
i/4MMeNo1qt95Hz9hlu/miUyhy7zw1+ijzO3OCXaZevm7zc/wSMCG6NzZf3mQaGv
ri3KJPYaNZe2jmTL0mz/m0eNgEef5ntNTxP0lJ72Atg+jgapjxYBXOhIIRlgbGeL
KwdOpYsZtQyxr30UEg1R3daMr2EJCjDtYuluPpOIQt6r/Q0VCqX98JX4iq/tAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUcLCw2o0TorVIC9EbKp7KyPwViKwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTYxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgwMA0GCSqGSIb3DQEBCwUAA4IBAQBLIPS6nRc9arYh3+qvtHjvkyNij+ofWdRy
RvvBE5PxwnSINyhLBKoTciqgScz/GlmFQOzjOlGCIj05ThJEJ/+kySrG1mUFVa+7
/97piVO5nK4edIfBYxe+8RMrkOGzcOYs4ly/f8FHjARbsT9uJ4cNukkCBwtwqSmw
DUoTrjqiN5qNKKYrTlt9JKOJhcy/646Qk+1cNx111ZvGQH+YucDr09IZtDPLTNY1
bqFwvf+DboGEPSGWhU3IS5xxx3c01xD/muVhQzeLZsXgCnwM0cVhOr+EMhA2atqL
oCe9drNxcAuWcpKYKM2jxwJqc5UVgJjBAwRPZ5+JwbmUa3WsrWSN
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:13 2025 by rpki-client