Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: x8veuA4+vcTlPI+6qBCVuMWDDC5RpSpZcjq7SLjQI0M=
Subject key identifier: 06:5B:12:08:AB:B2:6D:E3:72:01:A9:BD:29:7B:AE:8D:33:3D:2B:C0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 22E75DA943E5A624C9206FC479D48A005AB486FB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
Signing time: Sat 19 Sep 2026 04:33:29 +0000
ROA not before: Sat 19 Sep 2026 04:28:29 +0000
ROA not after: Sat 18 Sep 2027 04:33:29 +0000
asID: 214483
IP address blocks: 66.132.185.0/24 maxlen: 24
69.90.226.0/24 maxlen: 24
143.14.47.0/24 maxlen: 24
143.14.81.0/24 maxlen: 24
143.14.111.0/24 maxlen: 24
143.14.120.0/24 maxlen: 24
143.14.128.0/24 maxlen: 24
143.14.131.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.174.0/24 maxlen: 24
155.117.124.0/24 maxlen: 24
155.117.126.0/24 maxlen: 24
155.117.159.0/24 maxlen: 24
155.117.166.0/24 maxlen: 24
155.117.178.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.205.0/24 maxlen: 24
155.117.215.0/24 maxlen: 24
155.117.242.0/24 maxlen: 24
162.141.184.0/24 maxlen: 24
162.141.186.0/24 maxlen: 24
162.141.189.0/24 maxlen: 24
167.148.40.0/24 maxlen: 24
167.148.89.0/24 maxlen: 24
167.148.91.0/24 maxlen: 24
168.222.74.0/24 maxlen: 24
168.222.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e7:5d:a9:43:e5:a6:24:c9:20:6f:c4:79:d4:8a:00:5a:b4:86:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 19 04:28:29 2026 GMT
Not After : Sep 18 04:33:29 2027 GMT
Subject: CN=065B1208ABB26DE37201A9BD297BAE8D333D2BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:b9:af:45:ce:ad:e4:f1:20:37:62:8b:5b:
cd:f2:89:d2:aa:34:dc:60:a3:f9:14:1a:80:7c:e7:
8b:e7:2c:68:17:f5:bd:4c:13:e8:67:60:a4:1f:33:
d3:de:4f:67:4f:77:bb:2b:a3:d2:53:83:c4:4f:f8:
89:48:21:f4:83:28:95:f9:c2:3d:d7:13:44:69:81:
98:fa:36:77:b7:b7:fc:5d:73:b6:2e:74:68:93:20:
4f:39:2d:88:37:1b:53:95:65:f0:37:f0:d5:cb:9f:
3c:7c:84:f0:92:ec:8c:19:64:a9:5d:eb:61:81:54:
9c:f1:5c:9b:40:38:b0:c1:99:e3:ed:0a:4b:e5:67:
34:18:8c:1b:2c:95:c9:52:98:bf:0b:77:66:31:68:
65:e3:ec:f3:77:81:db:ae:a3:31:3e:66:1d:db:be:
5c:b7:fb:27:42:ec:28:5e:ca:60:2a:ef:dd:e3:31:
df:16:20:1b:a7:4b:78:cf:43:08:01:7f:de:e8:5e:
08:e7:0d:d5:7a:1e:ae:5d:b2:13:1b:e4:bd:77:41:
b5:c6:d9:c7:a0:78:28:be:a3:bb:91:3f:cc:40:42:
8d:b5:96:84:96:c9:a6:ff:0e:de:4f:63:5a:eb:de:
ca:c3:dd:22:6a:74:16:49:ae:16:15:48:9e:e7:0b:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:12:08:AB:B2:6D:E3:72:01:A9:BD:29:7B:AE:8D:33:3D:2B:C0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.185.0/24
69.90.226.0/24
143.14.47.0/24
143.14.81.0/24
143.14.111.0/24
143.14.120.0/24
143.14.128.0/24
143.14.131.0/24
143.14.140.0/24
143.14.174.0/24
155.117.124.0/24
155.117.126.0/24
155.117.159.0/24
155.117.166.0/24
155.117.178.0/24
155.117.190.0/24
155.117.205.0/24
155.117.215.0/24
155.117.242.0/24
162.141.184.0/24
162.141.186.0/24
162.141.189.0/24
167.148.40.0/24
167.148.89.0/24
167.148.91.0/24
168.222.74.0/24
168.222.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:eb:64:33:37:40:f1:c6:01:65:e1:8c:ed:2a:73:bc:7c:13:
64:0a:ee:27:ec:5b:70:fa:26:f6:1a:7e:c8:91:19:86:a9:c8:
c9:8a:39:6e:c2:32:88:58:06:c3:17:dd:5d:b8:b1:8e:24:06:
fc:b8:b7:fe:15:70:07:6b:9d:e0:d4:75:7f:9e:33:0b:8f:d9:
7b:33:8f:38:81:0f:75:34:81:75:7a:71:97:60:8b:10:7e:4d:
89:72:90:20:54:a8:08:02:4d:12:49:e9:b2:f1:9b:c6:fe:15:
1c:56:a1:09:fb:8e:70:0a:1b:90:4e:4f:8d:27:af:d4:c9:00:
d7:92:e2:bd:d2:46:5f:b2:55:84:1b:0b:68:cd:65:f6:1d:7c:
8c:62:0f:ea:46:65:e9:e1:da:7f:5f:32:98:a1:1a:cc:61:24:
49:cf:69:76:d2:9b:68:9a:d5:c6:d7:93:1d:57:3e:f4:57:09:
73:ab:50:0e:15:9e:7f:05:1f:4b:f0:7f:6e:96:ed:1c:55:12:
80:61:94:51:e2:87:02:98:96:a7:29:26:3f:3b:87:be:03:7d:
03:9f:c1:b5:0e:fd:62:12:d5:56:8b:37:c0:cd:1b:74:af:e2:
89:f0:58:9f:d6:50:2a:3c:68:0b:e7:1b:1f:74:8f:8a:a6:20:
cf:41:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:03 2026 by rpki-client