Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214681.roa
File: AS214681.roa (raw, json)
Hash identifier: +DdKcGPWmnhY1yeFVhvT7deC/s0Xkb+EYu/YZFjIX4E=
Subject key identifier: 78:3B:46:57:40:63:AE:7C:AE:72:1B:5C:DB:10:D9:9C:0E:80:92:33
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 19F528FEDAFDD11F110F3FB4AE04D3C002D6DD36
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214681.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 214681
IP address blocks: 2a0f:85c1:81e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f5:28:fe:da:fd:d1:1f:11:0f:3f:b4:ae:04:d3:c0:02:d6:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=783B46574063AE7CAE721B5CDB10D99C0E809233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:16:56:90:11:e6:7a:7d:33:7f:1d:c9:bb:
c3:70:8c:17:8e:e3:c4:b3:42:80:5c:f9:b8:9b:fd:
3d:10:bd:03:c7:44:42:d6:ec:5b:bb:f2:85:9c:87:
ac:81:e7:5e:06:9e:5e:4a:3d:2a:1c:0e:f4:dd:c6:
cb:1b:86:b1:ee:04:dc:29:e6:14:0a:15:7d:1a:01:
46:8f:35:3e:e8:35:43:21:f2:93:7f:ca:9a:70:c7:
af:0a:67:3c:31:f6:db:32:ce:99:e5:b1:ef:b7:ad:
9a:e6:d0:f8:45:14:27:dc:f6:06:89:40:4c:ea:f0:
62:ee:4b:60:0a:e0:9e:e7:90:b0:27:5a:c0:fb:86:
e8:f5:2b:21:12:be:88:1d:f6:35:22:16:ab:a0:19:
0a:f5:06:85:fd:d0:e5:4c:8c:96:e9:a1:70:43:f6:
60:ce:cb:90:a3:cd:8d:07:55:14:b8:08:56:d9:80:
ca:d7:07:bb:36:db:80:78:34:97:33:13:60:94:2a:
d4:5e:55:cc:49:19:f2:06:8c:0e:d7:5d:56:c8:fd:
a2:55:09:53:0d:c8:b1:c2:fd:2f:23:2a:d8:38:1e:
29:b8:48:5e:5a:4a:4d:7a:c6:fc:59:13:07:ef:9f:
c4:74:ea:3c:83:20:96:94:2b:50:fb:63:21:88:88:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:46:57:40:63:AE:7C:AE:72:1B:5C:DB:10:D9:9C:0E:80:92:33
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:81e::/48
Signature Algorithm: sha256WithRSAEncryption
47:98:0c:f8:de:16:9d:61:10:7c:06:b2:7a:e7:b1:5c:d1:a5:
80:ae:34:71:b1:59:a5:cb:58:ac:39:32:25:11:45:ab:38:9f:
51:2d:77:01:0d:09:bd:1f:11:6b:1a:d1:b6:9b:67:f9:46:1d:
52:40:63:fa:c5:d9:bc:c2:38:62:56:ba:21:a8:7b:9a:2d:b1:
d0:25:68:4f:65:13:1c:cc:17:0e:89:27:90:57:b4:ec:35:bd:
a8:99:85:d5:88:a9:b2:11:3d:73:b4:31:22:7d:76:33:bb:aa:
a6:f4:d8:24:9b:dd:9c:7e:5b:e7:20:5b:0b:d3:c9:7a:f0:3b:
68:90:ff:a0:70:df:97:4e:3f:62:29:af:af:b8:0d:d8:63:1b:
a5:f9:13:16:ae:8a:98:a7:44:99:e5:ea:fd:ab:a6:79:2a:b8:
c0:7e:b7:c8:65:4a:68:a3:74:83:14:9f:43:3b:e5:d6:29:1a:
ea:31:c5:ab:41:d3:f1:30:15:16:7a:91:58:eb:2e:3c:a3:a0:
24:db:12:a9:ad:8b:26:b7:07:a5:ef:fc:55:24:70:54:6a:ed:
54:b0:e2:80:24:81:ab:01:e0:1f:16:db:ab:1a:91:d5:38:b5:
17:77:48:f2:9f:2a:5f:89:eb:d3:f0:12:85:c9:c0:fe:88:d3:
15:f2:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:48:21 2025 by rpki-client