Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: eMyVAUma2/bJmA56CJaS/4HzqLNeJCp/oNbA3UOlgoc=
Subject key identifier: 59:41:DE:1F:BB:D1:03:41:17:CD:12:A3:D7:D6:97:75:05:FB:E1:6E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 62F85678027A04528726DE5FCD3708D3E6A2FF8E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
Signing time: Wed 16 Sep 2026 03:41:07 +0000
ROA not before: Wed 16 Sep 2026 03:36:07 +0000
ROA not after: Wed 15 Sep 2027 03:41:07 +0000
asID: 214483
IP address blocks: 46.236.204.0/23 maxlen: 24
46.236.206.0/24 maxlen: 24
46.236.212.0/24 maxlen: 24
46.236.213.0/24 maxlen: 24
46.236.214.0/24 maxlen: 24
46.236.217.0/24 maxlen: 24
46.236.223.0/24 maxlen: 24
46.236.241.0/24 maxlen: 24
46.236.243.0/24 maxlen: 24
46.236.254.0/24 maxlen: 24
82.139.206.0/24 maxlen: 24
82.139.218.0/24 maxlen: 24
82.139.243.0/24 maxlen: 24
82.139.248.0/24 maxlen: 24
212.17.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f8:56:78:02:7a:04:52:87:26:de:5f:cd:37:08:d3:e6:a2:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 16 03:36:07 2026 GMT
Not After : Sep 15 03:41:07 2027 GMT
Subject: CN=5941DE1FBBD1034117CD12A3D7D6977505FBE16E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:c0:3e:01:86:e2:d7:ac:bc:22:d4:3f:31:
f3:39:88:00:a0:2d:75:45:d2:0d:95:a2:e7:88:28:
f5:8e:97:33:87:09:ad:b1:70:d7:17:44:1e:71:12:
94:d3:24:8d:94:d8:66:ea:7b:f7:92:c3:52:b0:b9:
46:da:7a:7c:46:12:c6:be:3f:3f:45:59:f1:42:21:
e1:24:e4:b9:9e:2c:9b:f7:e1:ea:02:27:87:d7:43:
06:23:3d:c6:16:85:3d:3b:fa:72:f4:44:c3:f9:2a:
a2:c2:18:8e:4e:15:06:9d:57:35:22:1b:c6:ee:09:
e3:24:99:f2:32:0b:9d:cf:54:df:47:2b:c7:6c:25:
7a:9f:07:84:bb:69:e3:33:86:ae:fb:31:9a:1a:f8:
f1:b6:04:fb:39:71:cd:fc:7e:4c:21:15:e8:3c:92:
ca:4c:bd:a1:95:4f:2b:3f:fb:9c:3d:ba:67:39:9b:
4d:bc:31:f3:99:ef:36:22:7c:7c:c6:01:f7:8d:f0:
42:be:dd:a6:0c:24:36:13:f6:de:6c:70:21:32:9d:
e8:bd:fd:ef:7e:93:83:cc:43:0b:18:da:24:3d:68:
96:5c:5c:e8:57:08:c4:36:b6:3c:36:c4:18:d6:49:
59:6e:63:d0:f3:01:27:d0:5f:65:93:04:67:ce:84:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:DE:1F:BB:D1:03:41:17:CD:12:A3:D7:D6:97:75:05:FB:E1:6E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.204.0-46.236.206.255
46.236.212.0-46.236.214.255
46.236.217.0/24
46.236.223.0/24
46.236.241.0/24
46.236.243.0/24
46.236.254.0/24
82.139.206.0/24
82.139.218.0/24
82.139.243.0/24
82.139.248.0/24
212.17.234.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e1:8c:dd:e5:3e:80:e6:c3:8a:47:c0:e5:10:1e:40:41:d4:
53:50:c2:0e:fc:be:bc:6e:1a:9d:b5:7f:22:0c:d9:5d:c6:4e:
44:09:25:46:b2:d5:73:ff:95:4b:0c:c6:c8:38:ea:a5:90:32:
75:8b:39:b7:5e:37:fe:b6:f0:38:09:7a:10:c7:07:35:62:c3:
52:da:87:e8:97:25:e1:f0:f4:ed:c4:9c:79:46:47:fb:1c:34:
01:06:9e:bc:d6:20:85:f6:79:5d:3c:cf:9e:51:88:8d:72:f8:
23:b6:51:33:9c:53:ed:47:c2:63:f7:5f:48:3e:88:a3:ec:a7:
a7:13:f6:17:b7:2b:49:10:44:09:41:b4:c8:77:cb:51:a1:f6:
07:30:a0:35:01:c2:d3:e0:b4:99:9b:97:11:75:ad:1a:b3:85:
a3:12:2d:7b:f4:be:41:18:fc:7d:99:09:bf:26:5a:08:2f:00:
6c:82:46:67:5d:dc:34:bc:68:9e:ed:9c:e6:64:2a:af:94:75:
6c:d5:57:a2:85:fe:f9:a3:80:21:7c:90:28:d5:57:d3:e7:6c:
58:ae:98:92:82:00:80:20:58:65:b7:48:de:bd:e2:b5:aa:12:
aa:78:f5:cb:a4:25:13:00:40:c8:2e:e9:26:dc:27:f1:97:34:
fd:12:b6:2d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUYvhWeAJ6BFKHJt5fzTcI0+ai/44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MTYwMzM2MDdaFw0yNzA5MTUwMzQxMDdaMDMxMTAvBgNV
BAMTKDU5NDFERTFGQkJEMTAzNDExN0NEMTJBM0Q3RDY5Nzc1MDVGQkUxNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDD8A+AYbi16y8ItQ/MfM5iACg
LXVF0g2VoueIKPWOlzOHCa2xcNcXRB5xEpTTJI2U2Gbqe/eSw1KwuUbaenxGEsa+
Pz9FWfFCIeEk5LmeLJv34eoCJ4fXQwYjPcYWhT07+nL0RMP5KqLCGI5OFQadVzUi
G8buCeMkmfIyC53PVN9HK8dsJXqfB4S7aeMzhq77MZoa+PG2BPs5cc38fkwhFeg8
kspMvaGVTys/+5w9umc5m028MfOZ7zYifHzGAfeN8EK+3aYMJDYT9t5scCEynei9
/e9+k4PMQwsY2iQ9aJZcXOhXCMQ2tjw2xBjWSVluY9DzASfQX2WTBGfOhDX1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWUHeH7vRA0EXzRKj19aXdQX74W4wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjE0NDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBAIu
7MwDBAAu7M4wDAMEAi7s1AMEAC7s1gMEAC7s2QMEAC7s3wMEAC7s8QMEAC7s8wME
AC7s/gMEAFKLzgMEAFKL2gMEAFKL8wMEAFKL+AMEANQR6jANBgkqhkiG9w0BAQsF
AAOCAQEAceGM3eU+gObDikfA5RAeQEHUU1DCDvy+vG4anbV/IgzZXcZORAklRrLV
c/+VSwzGyDjqpZAydYs5t143/rbwOAl6EMcHNWLDUtqH6Jcl4fD07cSceUZH+xw0
AQaevNYghfZ5XTzPnlGIjXL4I7ZRM5xT7UfCY/dfSD6Io+ynpxP2F7crSRBECUG0
yHfLUaH2BzCgNQHC0+C0mZuXEXWtGrOFoxIte/S+QRj8fZkJvyZaCC8AbIJGZ13c
NLxonu2c5mQqr5R1bNVXooX++aOAIXyQKNVX0+dsWK6YkoIAgCBYZbdI3r3itaoS
qnj1y6QlEwBAyC7pJtwn8Zc0/RK2LQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:49:46 2026 by rpki-client