Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa
File: AS214036.roa (raw, json)
Hash identifier: m8mw0Ivl+PgAeArEIceNgm4pwc7wCQz//bOq0hGSTpI=
Subject key identifier: 62:34:B2:BC:F6:A5:55:DE:42:92:A4:31:27:37:C9:85:A9:BF:A7:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 77056690A1FCE7106679AB01EFC22389A714CFCA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa
Signing time: Thu 04 Jun 2026 06:49:15 +0000
ROA not before: Thu 04 Jun 2026 06:44:15 +0000
ROA not after: Thu 03 Jun 2027 06:49:15 +0000
asID: 214036
IP address blocks: 82.38.15.0/24 maxlen: 24
82.38.63.0/24 maxlen: 24
82.39.107.0/24 maxlen: 24
82.40.23.0/24 maxlen: 24
82.41.58.0/24 maxlen: 24
82.41.181.0/24 maxlen: 24
178.83.164.0/24 maxlen: 24
178.83.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:05:66:90:a1:fc:e7:10:66:79:ab:01:ef:c2:23:89:a7:14:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 4 06:44:15 2026 GMT
Not After : Jun 3 06:49:15 2027 GMT
Subject: CN=6234B2BCF6A555DE4292A4312737C985A9BFA761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:61:91:de:9b:eb:cb:6f:e4:c5:23:ee:b2:
9d:26:9a:1f:77:35:df:32:b2:20:9b:b1:5b:a0:01:
83:8c:d9:59:38:82:86:5c:a2:a0:ef:ec:d1:d6:fa:
46:47:dc:0a:0f:f9:32:8b:d0:b5:c5:ac:08:fb:72:
89:36:06:2b:fb:3b:bd:2b:0d:5f:67:55:11:e8:ce:
ac:c2:7e:ed:57:05:dd:a5:81:de:53:59:75:de:76:
b0:e7:93:70:1b:bc:92:c8:c5:6c:40:b4:4e:5b:f7:
2c:b0:9e:9a:2e:7d:1b:49:f5:44:e4:d4:63:55:aa:
5a:9f:44:05:b3:2f:77:53:15:f0:73:b8:94:f6:a0:
eb:3d:16:8c:ca:b8:e2:da:8e:dd:8d:60:cc:0e:87:
3a:fc:07:17:69:3c:ea:0d:e6:f4:b2:c0:44:d1:88:
01:9a:74:32:58:bd:2a:c7:f0:d6:74:36:42:f9:5e:
91:c8:e1:46:ea:c9:ff:6b:93:d7:0d:ba:85:ad:6f:
47:25:22:c2:3c:19:61:4a:d6:48:30:5a:ca:19:9a:
82:75:20:f4:1a:f7:0d:da:f2:fd:87:3b:7d:5c:f5:
d9:47:c1:59:6b:f8:6d:e4:6d:62:8a:38:13:9f:7f:
21:da:9f:73:84:06:7d:a8:94:10:90:e3:9f:2c:61:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:B2:BC:F6:A5:55:DE:42:92:A4:31:27:37:C9:85:A9:BF:A7:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.15.0/24
82.38.63.0/24
82.39.107.0/24
82.40.23.0/24
82.41.58.0/24
82.41.181.0/24
178.83.164.0/24
178.83.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:10:bb:a3:8e:f0:7e:79:5a:bf:bd:13:33:e1:8e:28:d5:3b:
a0:f1:42:27:30:91:60:03:a0:37:ae:8b:44:9d:4b:13:ef:3e:
33:13:6b:b4:1a:8c:d2:46:72:10:59:56:53:32:87:de:a5:c6:
8a:dd:b0:d3:59:9a:0e:ef:6b:a9:7e:8e:4a:0a:8c:47:16:a5:
a3:5e:a3:b9:f9:b9:4c:d5:53:23:ec:68:d4:3e:3f:bf:51:d0:
56:d3:c3:a5:36:f2:db:16:45:46:c0:00:99:41:fa:b9:28:cd:
44:e9:29:ed:aa:fa:84:6e:4d:51:a8:c7:58:9c:39:55:29:bf:
f5:01:a4:ad:19:72:22:f1:c3:ac:fb:58:d9:ef:7c:03:da:b3:
f8:db:4c:51:48:da:81:7c:e1:c2:de:05:8e:e8:a1:66:e1:e7:
b1:bc:70:e2:cb:62:60:e8:3a:f4:b4:ca:b4:5e:2f:ea:69:7a:
41:b0:f8:d2:e1:52:d1:29:c0:e3:12:28:f6:8e:79:06:5f:73:
4d:7c:ec:91:3d:1f:13:38:3f:6c:3f:32:21:6b:61:dd:ed:9c:
df:a5:a1:eb:a3:bf:4e:d1:e6:82:3a:7d:1f:3e:38:87:fb:2d:
3e:b1:cb:0a:c3:0b:71:dc:93:3b:c8:7b:23:55:35:14:e1:99:
85:bf:4f:18
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdwVmkKH85xBmeasB78IjiacUz8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MDQwNjQ0MTVaFw0yNzA2MDMwNjQ5MTVaMDMxMTAvBgNV
BAMTKDYyMzRCMkJDRjZBNTU1REU0MjkyQTQzMTI3MzdDOTg1QTlCRkE3NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhGGR3pvry2/kxSPusp0mmh93
Nd8ysiCbsVugAYOM2Vk4goZcoqDv7NHW+kZH3AoP+TKL0LXFrAj7cok2Biv7O70r
DV9nVRHozqzCfu1XBd2lgd5TWXXedrDnk3AbvJLIxWxAtE5b9yywnpoufRtJ9UTk
1GNVqlqfRAWzL3dTFfBzuJT2oOs9FozKuOLajt2NYMwOhzr8BxdpPOoN5vSywETR
iAGadDJYvSrH8NZ0NkL5XpHI4Ubqyf9rk9cNuoWtb0clIsI8GWFK1kgwWsoZmoJ1
IPQa9w3a8v2HO31c9dlHwVlr+G3kbWKKOBOffyHan3OEBn2olBCQ458sYZ/bAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYjSyvPalVd5CkqQxJzfJham/p2EwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUiYP
AwQAUiY/AwQAUidrAwQAUigXAwQAUik6AwQAUim1AwQAslOkAwQAslPiMA0GCSqG
SIb3DQEBCwUAA4IBAQClELujjvB+eVq/vRMz4Y4o1Tug8UInMJFgA6A3rotEnUsT
7z4zE2u0GozSRnIQWVZTMofepcaK3bDTWZoO72upfo5KCoxHFqWjXqO5+blM1VMj
7GjUPj+/UdBW08OlNvLbFkVGwACZQfq5KM1E6SntqvqEbk1RqMdYnDlVKb/1AaSt
GXIi8cOs+1jZ73wD2rP420xRSNqBfOHC3gWO6KFm4eexvHDiy2Jg6Dr0tMq0Xi/q
aXpBsPjS4VLRKcDjEij2jnkGX3NNfOyRPR8TOD9sPzIha2Hd7ZzfpaHro79O0eaC
On0fPjiH+y0+scsKwwtx3JM7yHsjVTUU4ZmFv08Y
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:04 2026 by rpki-client