Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214983.roa
File: AS214983.roa (raw, json)
Hash identifier: mQeKCwh1d0ohwyQepKqsGgOez/nl05UyBCqcs+3PlII=
Subject key identifier: 15:DE:23:CC:F9:E5:B9:71:C2:F5:52:B7:6C:36:0B:32:20:6A:E7:57
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 69E289FAED6641B7E51A1F546EDA222B1A38FB4B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214983.roa
Signing time: Fri 25 Jul 2025 08:07:37 +0000
ROA not before: Fri 25 Jul 2025 08:02:37 +0000
ROA not after: Fri 24 Jul 2026 08:07:37 +0000
asID: 214983
IP address blocks: 2a0f:85c1:3d3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e2:89:fa:ed:66:41:b7:e5:1a:1f:54:6e:da:22:2b:1a:38:fb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:37 2025 GMT
Not After : Jul 24 08:07:37 2026 GMT
Subject: CN=15DE23CCF9E5B971C2F552B76C360B32206AE757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:e4:5c:f4:4b:29:69:ba:00:ec:82:36:8e:
1f:81:95:ca:7c:4c:e2:62:a5:6a:97:f9:00:71:30:
71:47:11:e0:73:4c:53:05:20:56:07:f3:87:5b:a5:
e0:df:5b:46:f3:4d:21:44:3e:28:18:a5:7c:42:c8:
c9:0d:92:99:87:59:0b:fc:e4:6c:94:5a:0f:ab:a8:
5a:83:04:7e:e1:c7:cf:18:ca:b6:64:f7:0b:b3:ae:
69:d4:b2:9c:2d:ac:3c:c4:f7:1c:94:68:9a:fe:4c:
63:6c:45:7f:4c:e4:65:95:da:f7:27:b4:fb:c0:49:
02:e3:f9:31:33:c0:75:55:d0:74:e5:03:2f:98:04:
b3:25:a5:f1:3d:45:81:6f:41:ce:20:b1:b6:9c:87:
35:16:17:46:6d:e0:b7:88:04:37:ec:b5:09:98:64:
08:35:84:0a:c7:21:10:d6:89:15:83:17:ca:4f:96:
e4:b4:c0:63:69:6f:9f:87:59:2d:b7:fa:6d:58:86:
75:c9:fa:a8:39:9f:ac:b9:29:bf:8e:86:fc:00:20:
0a:ba:3d:f6:fc:3c:4d:0f:52:c6:de:92:10:cf:4e:
ef:16:ef:fe:89:99:2c:c9:83:f8:1e:c7:1e:52:d9:
88:ab:83:e8:1e:7f:e4:80:2e:ec:c8:d9:c5:01:6b:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:23:CC:F9:E5:B9:71:C2:F5:52:B7:6C:36:0B:32:20:6A:E7:57
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d3::/48
Signature Algorithm: sha256WithRSAEncryption
75:e3:94:78:8c:19:f3:6d:b6:9b:f3:43:5c:4f:a0:73:31:49:
22:c2:ba:25:5a:d6:e3:5e:73:b7:97:8e:25:a5:ba:11:8b:54:
f6:6b:50:ec:9e:dc:16:1d:00:1f:57:64:51:6c:5f:df:fd:65:
f5:73:15:93:3d:8f:db:51:03:6b:de:64:fd:48:75:8d:87:08:
7f:bd:51:79:40:4d:8a:2d:8e:5d:ea:52:09:ae:8f:0a:f4:c3:
f3:11:9a:eb:b8:29:b5:7c:ed:55:2e:74:a3:81:f9:3b:8e:b5:
ef:e1:32:ad:6c:b7:d4:cf:c1:99:46:81:24:bd:16:12:63:ee:
11:9b:5b:fb:ff:67:66:34:e0:d7:85:b1:b4:91:25:22:cb:97:
ec:79:36:f7:de:05:1e:6e:f3:4f:a1:30:89:d7:d0:2e:c5:00:
1f:4f:c8:e2:ad:24:08:82:b9:ee:cc:f3:24:3f:1b:ed:5d:03:
ff:46:7c:95:3c:9f:4d:42:90:bf:d3:b9:64:2c:c8:cf:77:d9:
5f:70:69:68:5e:a1:1c:22:45:87:a5:6f:56:c9:a5:38:f7:ff:
9c:2f:26:a5:f8:66:43:26:d2:22:96:fe:1e:f4:f2:3b:18:4b:
e4:ce:f9:60:91:be:dc:03:5d:14:c7:67:5d:22:0c:82:75:a9:
43:25:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:37 2025 by rpki-client