Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: NV8BERL5f4P8lyX8SliO5X4Mhra2KJhW6No9twg9upA=
Subject key identifier: F9:65:D2:46:A3:B1:5B:F5:21:D2:8B:B7:CE:D9:39:00:84:85:CD:79
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1560EB3F35790ED59AD99063D3BD51C7FCBCF9FF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214025.roa
Signing time: Wed 01 Apr 2026 16:57:33 +0000
ROA not before: Wed 01 Apr 2026 16:52:33 +0000
ROA not after: Wed 31 Mar 2027 16:57:33 +0000
asID: 214025
IP address blocks: 45.139.183.0/24 maxlen: 24
103.141.69.0/24 maxlen: 24
130.185.127.0/24 maxlen: 24
179.61.248.0/24 maxlen: 24
181.41.219.0/24 maxlen: 24
181.214.7.0/24 maxlen: 24
181.214.254.0/24 maxlen: 24
181.215.3.0/24 maxlen: 24
181.215.62.0/24 maxlen: 24
181.215.64.0/24 maxlen: 24
181.215.88.0/24 maxlen: 24
181.215.147.0/24 maxlen: 24
181.215.237.0/24 maxlen: 24
181.215.240.0/24 maxlen: 24
185.137.93.0/24 maxlen: 24
185.145.37.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
191.96.4.0/24 maxlen: 24
191.96.143.0/24 maxlen: 24
191.96.145.0/24 maxlen: 24
191.96.164.0/24 maxlen: 24
191.96.182.0/24 maxlen: 24
191.96.230.0/24 maxlen: 24
191.101.82.0/24 maxlen: 24
191.101.123.0/24 maxlen: 24
191.101.135.0/24 maxlen: 24
191.101.136.0/24 maxlen: 24
191.101.145.0/24 maxlen: 24
191.101.171.0/24 maxlen: 24
191.101.180.0/24 maxlen: 24
191.101.206.0/24 maxlen: 24
191.101.218.0/24 maxlen: 24
191.101.219.0/24 maxlen: 24
191.101.223.0/24 maxlen: 24
191.101.247.0/24 maxlen: 24
2a0a:9a00::/29 maxlen: 48
2a0a:9e00::/29 maxlen: 48
2a0b:8700::/29 maxlen: 48
2a0d:4c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:60:eb:3f:35:79:0e:d5:9a:d9:90:63:d3:bd:51:c7:fc:bc:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 1 16:52:33 2026 GMT
Not After : Mar 31 16:57:33 2027 GMT
Subject: CN=F965D246A3B15BF521D28BB7CED939008485CD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:cd:c0:f8:37:89:69:a2:e0:f9:e7:cc:fb:
d2:a0:c6:f5:0e:b3:2f:57:86:36:7c:16:6a:a3:45:
a5:a5:66:89:8a:bf:f3:8c:74:b8:0a:80:ab:b8:1e:
56:a2:02:ca:8f:92:d3:2d:7f:cf:e9:5c:1f:f0:b4:
52:06:27:e2:79:05:7e:72:37:77:79:75:be:9d:84:
67:fb:1d:ea:4e:1d:b7:00:48:62:f0:f0:db:97:23:
47:96:51:25:ec:a2:e0:a9:e0:ed:2f:8e:7f:c2:26:
90:57:ee:0c:40:af:dc:d4:4c:d4:ac:f2:f9:96:19:
d1:de:04:94:3e:6c:56:22:06:a5:d7:45:2a:19:cf:
b5:c4:50:e0:4b:76:e0:24:e8:ea:5e:1e:80:58:4e:
03:8d:61:6e:47:c4:f9:a3:63:b3:3d:6c:29:97:28:
11:40:01:1c:9f:b3:7f:29:15:ad:55:1d:c7:e5:75:
bc:18:dd:7f:26:88:4a:83:84:fd:39:57:54:27:7d:
36:f4:10:c2:62:37:f3:21:4d:19:2e:83:c3:8f:b0:
af:5a:23:5f:3b:a1:ee:c0:4f:28:45:30:25:45:0a:
8e:65:9e:0f:4a:3a:7e:68:6d:4f:41:50:e7:43:9f:
76:1d:2b:eb:2a:0b:c7:7c:36:6b:eb:1b:95:ae:9a:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:65:D2:46:A3:B1:5B:F5:21:D2:8B:B7:CE:D9:39:00:84:85:CD:79
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.183.0/24
103.141.69.0/24
130.185.127.0/24
179.61.248.0/24
181.41.219.0/24
181.214.7.0/24
181.214.254.0/24
181.215.3.0/24
181.215.62.0/24
181.215.64.0/24
181.215.88.0/24
181.215.147.0/24
181.215.237.0/24
181.215.240.0/24
185.137.93.0/24
185.145.37.0/24
185.151.58.0/24
191.96.4.0/24
191.96.143.0/24
191.96.145.0/24
191.96.164.0/24
191.96.182.0/24
191.96.230.0/24
191.101.82.0/24
191.101.123.0/24
191.101.135.0-191.101.136.255
191.101.145.0/24
191.101.171.0/24
191.101.180.0/24
191.101.206.0/24
191.101.218.0/23
191.101.223.0/24
191.101.247.0/24
IPv6:
2a0a:9a00::/29
2a0a:9e00::/29
2a0b:8700::/29
2a0d:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
b4:f6:26:12:29:4a:e1:49:f0:41:db:e2:40:08:7d:e6:cb:5b:
ec:1d:a1:a9:fb:27:5a:8c:df:c7:13:c6:17:56:37:58:30:a1:
ee:43:c7:29:0a:21:bd:1f:d3:d6:18:27:3a:6f:b5:00:2c:1b:
81:9a:e3:f6:57:af:9c:fd:20:63:ee:ac:33:78:f2:64:79:04:
e2:df:9a:ed:9f:77:3d:40:65:b2:f0:66:1e:7a:f4:2c:a9:a8:
93:52:07:71:fe:9d:39:78:a7:54:92:3d:ec:23:f0:75:ff:5d:
2b:fb:5f:bc:f1:3f:5e:cf:e0:34:6d:98:fe:c7:71:72:bc:a1:
9d:7e:89:fc:19:2a:55:c7:ab:27:61:b4:30:5f:0b:c4:de:7b:
28:e3:2a:49:32:af:88:4e:cb:d8:9d:8e:ad:d4:8b:65:93:ab:
1f:a5:96:41:b8:69:c0:d7:54:51:14:47:97:d8:1e:2d:a4:e5:
20:73:2f:d4:cf:5a:c4:e0:94:c4:a3:a9:ba:89:f6:c4:e3:72:
72:03:81:58:f2:cc:ff:34:e0:45:84:a7:c3:64:37:2b:0d:f3:
b8:20:ac:de:a3:d9:bc:4f:67:4f:78:a2:47:7b:b7:b0:e3:9a:
5f:a6:dc:ae:a1:59:61:55:b9:54:ab:fc:45:63:ef:cb:b6:8a:
91:17:49:91
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgIUFWDrPzV5DtWa2ZBj071Rx/y8+f8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MDExNjUyMzNaFw0yNzAzMzExNjU3MzNaMDMxMTAvBgNV
BAMTKEY5NjVEMjQ2QTNCMTVCRjUyMUQyOEJCN0NFRDkzOTAwODQ4NUNENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnI83A+DeJaaLg+efM+9KgxvUO
sy9XhjZ8FmqjRaWlZomKv/OMdLgKgKu4HlaiAsqPktMtf8/pXB/wtFIGJ+J5BX5y
N3d5db6dhGf7HepOHbcASGLw8NuXI0eWUSXsouCp4O0vjn/CJpBX7gxAr9zUTNSs
8vmWGdHeBJQ+bFYiBqXXRSoZz7XEUOBLduAk6OpeHoBYTgONYW5HxPmjY7M9bCmX
KBFAARyfs38pFa1VHcfldbwY3X8miEqDhP05V1QnfTb0EMJiN/MhTRkug8OPsK9a
I187oe7ATyhFMCVFCo5lng9KOn5obU9BUOdDn3YdK+sqC8d8NmvrG5WumjjHAgMB
AAGjggL8MIIC+DAdBgNVHQ4EFgQU+WXSRqOxW/Uh0ou3ztk5AISFzXkwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgdUEAgABMIHO
AwQALYu3AwQAZ41FAwQAgrl/AwQAsz34AwQAtSnbAwQAtdYHAwQAtdb+AwQAtdcD
AwQAtdc+AwQAtddAAwQAtddYAwQAtdeTAwQAtdftAwQAtdfwAwQAuYldAwQAuZEl
AwQAuZc6AwQAv2AEAwQAv2CPAwQAv2CRAwQAv2CkAwQAv2C2AwQAv2DmAwQAv2VS
AwQAv2V7MAwDBAC/ZYcDBAC/ZYgDBAC/ZZEDBAC/ZasDBAC/ZbQDBAC/Zc4DBAG/
ZdoDBAC/Zd8DBAC/ZfcwIgQCAAIwHAMFAyoKmgADBQMqCp4AAwUDKguHAAMFAyoN
TEAwDQYJKoZIhvcNAQELBQADggEBALT2JhIpSuFJ8EHb4kAIfebLW+wdoan7J1qM
38cTxhdWN1gwoe5DxykKIb0f09YYJzpvtQAsG4Ga4/ZXr5z9IGPurDN48mR5BOLf
mu2fdz1AZbLwZh569CypqJNSB3H+nTl4p1SSPewj8HX/XSv7X7zxP17P4DRtmP7H
cXK8oZ1+ifwZKlXHqydhtDBfC8TeeyjjKkkyr4hOy9idjq3Ui2WTqx+llkG4acDX
VFEUR5fYHi2k5SBzL9TPWsTglMSjqbqJ9sTjcnIDgVjyzP804EWEp8NkNysN87gg
rN6j2bxPZ094okd7t7Djml+m3K6hWWFVuVSr/EVj78u2ipEXSZE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:04 2026 by rpki-client