Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
File: AS214676.roa (raw, json)
Hash identifier: mzi1vnE+AYA5ZpqNTfUp97kCEXjY3t2BuZoWReHi37c=
Subject key identifier: EF:70:1C:14:66:03:DB:E9:53:1C:1F:4D:29:95:B4:40:DC:3D:23:C5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 59AF8A385BD46C67766660CC7F066362F792F4D4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 214676
IP address blocks: 2a0f:85c1:81b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:af:8a:38:5b:d4:6c:67:76:66:60:cc:7f:06:63:62:f7:92:f4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=EF701C146603DBE9531C1F4D2995B440DC3D23C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7f:49:79:ff:52:55:5c:be:7f:c4:99:3e:8a:
c6:6a:49:6f:14:8e:0f:d9:5b:71:c4:ae:74:01:23:
c5:a2:31:9b:f5:1b:5c:42:be:f4:7b:e3:1e:ca:76:
9a:17:62:e6:29:04:e7:80:79:77:86:ee:01:09:b7:
1e:90:39:39:08:6f:33:ef:95:d0:84:06:25:4c:6e:
8f:d7:ef:65:da:0a:cb:3c:fe:c7:e1:cb:cc:4a:ef:
a0:bc:f9:29:bd:b3:80:18:7e:a7:d3:12:3e:2b:5d:
2c:5c:9e:c9:4d:e3:2b:1d:5c:b6:30:a9:6c:19:d9:
60:7f:64:f4:7e:28:48:04:a0:6f:e7:e6:42:2a:5d:
e1:8a:87:f1:a3:2d:1d:6d:11:93:99:3a:1a:ae:11:
45:d8:39:dd:06:db:67:8c:0e:79:a9:ad:6f:f6:e5:
5b:ed:ba:bb:29:d1:8d:66:9d:ea:9c:07:0f:9d:85:
4f:1a:8f:41:aa:69:78:2f:e7:c0:d1:13:ad:c4:34:
20:dc:ac:3c:e6:89:88:c5:04:40:36:2d:7a:65:6c:
98:5b:ce:b4:45:24:ac:21:dd:40:ca:5b:4c:0a:cd:
f0:5e:23:a4:d5:99:bb:0c:0f:a0:a6:4f:46:57:b2:
f3:df:3b:8f:19:26:eb:6f:b1:fd:4b:49:98:45:89:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:1C:14:66:03:DB:E9:53:1C:1F:4D:29:95:B4:40:DC:3D:23:C5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:81b::/48
Signature Algorithm: sha256WithRSAEncryption
06:83:1d:ba:f1:2f:14:c8:b9:f2:b1:12:72:c5:ab:30:54:14:
94:ee:ff:21:2a:52:89:8c:2f:ce:63:ea:5e:da:9a:07:01:68:
fe:2c:2a:6a:ef:d4:fe:54:b1:69:60:c4:6d:9d:48:f8:79:aa:
e9:c6:d4:81:5a:6c:93:fc:ea:e2:34:93:ef:45:f3:e5:45:84:
1e:6f:44:a3:a1:36:5d:44:34:be:27:12:64:cc:8f:18:c9:cb:
65:db:0e:71:b2:17:31:ef:98:b3:e0:50:58:45:83:c6:9f:96:
09:ac:0d:b2:f5:e9:5a:ad:15:f2:ec:73:66:04:40:93:d8:4c:
a4:df:e9:71:7f:c8:8b:88:5c:9f:24:3c:19:13:93:7b:47:a2:
37:30:32:d3:68:e1:a7:78:86:5b:a4:c3:4b:fc:77:37:41:54:
43:8f:f8:31:b3:df:b1:da:30:81:98:12:79:fa:a4:40:b1:9c:
13:8d:df:9b:86:80:20:c4:41:c4:7c:87:b2:5e:32:64:71:2a:
cd:77:d3:d0:0f:03:65:5a:63:60:f8:20:53:bb:d8:b2:93:3e:
2d:42:56:c6:28:33:22:d7:b7:4e:64:a4:47:63:99:43:ed:c7:
21:1b:7b:5d:d1:72:96:e2:be:4d:a3:e0:5d:65:1b:09:c8:4f:
23:ec:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:34 2025 by rpki-client