Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214132.roa
File: AS214132.roa (raw, json)
Hash identifier: quys5P0kP1xwVYbewpgSnNFEfYfLu5IdlnYMq0bPcrw=
Subject key identifier: C4:2D:DE:B5:2D:56:64:B9:23:C3:F7:FB:AE:40:C3:EC:E7:E3:6C:A2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3CDE99DCA7F1B6B245539A31B2A107D4564820C7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214132.roa
Signing time: Tue 27 Oct 2026 11:49:39 +0000
ROA not before: Tue 27 Oct 2026 11:44:39 +0000
ROA not after: Tue 26 Oct 2027 11:49:39 +0000
asID: 214132
IP address blocks: 82.39.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:de:99:dc:a7:f1:b6:b2:45:53:9a:31:b2:a1:07:d4:56:48:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 27 11:44:39 2026 GMT
Not After : Oct 26 11:49:39 2027 GMT
Subject: CN=C42DDEB52D5664B923C3F7FBAE40C3ECE7E36CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:4e:4a:96:a3:dd:22:5f:3d:5b:17:72:7b:
87:9d:75:a4:69:43:62:40:2e:ca:5c:3a:c4:43:b6:
9a:30:ba:22:44:79:fc:1b:28:6f:d6:25:31:75:10:
38:49:e2:a4:a2:78:e1:47:e2:da:5f:aa:d1:eb:fd:
37:87:16:48:01:f8:dd:dc:07:d6:72:13:1a:c7:8c:
94:75:0c:de:81:e7:c5:92:31:b6:ed:7e:6d:c7:58:
e1:8d:eb:33:06:9e:bb:f3:72:30:65:0c:db:2a:8b:
29:4d:ea:93:b7:22:04:89:3a:1b:cd:66:88:1d:2a:
8f:7f:6b:61:5f:a3:00:cf:e6:d0:52:6d:e5:17:cd:
f6:af:31:79:76:7b:48:95:52:a9:67:f1:5b:66:40:
27:bc:39:9f:45:88:e2:16:ed:15:4c:91:13:36:36:
62:ab:56:f4:69:0a:dd:dd:83:34:66:70:fa:1c:1c:
c1:1f:c8:2e:81:69:fb:0e:6a:ad:d8:5b:31:6b:c8:
74:11:4b:96:d8:a5:48:1d:07:7c:a1:a8:ea:11:7c:
10:b6:27:09:12:b3:25:0c:98:8c:a6:8d:65:25:3a:
00:31:e4:20:72:3a:da:7f:85:bd:40:c1:a3:12:72:
8c:ab:64:33:ad:c2:44:e7:18:7a:53:7c:43:22:2f:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:DE:B5:2D:56:64:B9:23:C3:F7:FB:AE:40:C3:EC:E7:E3:6C:A2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bf:1f:89:04:e1:0b:34:5a:94:32:6c:18:13:1e:ea:82:f0:
47:15:16:6c:45:b8:cb:74:f0:d8:e8:ab:75:5f:89:17:c0:1b:
75:c7:4e:e3:1e:7b:36:16:c5:b1:d0:7d:61:8a:18:aa:da:de:
8f:59:8f:8f:f0:d6:4f:bd:2e:b8:bc:41:4b:97:91:4b:b9:92:
ec:2e:f8:55:92:1d:51:23:e3:30:c7:09:26:cf:be:fb:f0:b1:
b5:e9:aa:d8:07:e3:a5:df:57:68:eb:8e:4c:3c:88:3c:24:f2:
8b:f1:9b:29:9d:bc:94:04:00:1c:af:8b:1d:39:5b:8d:7e:47:
bd:23:7a:1f:f3:41:75:db:78:eb:27:64:3f:ed:41:b3:68:92:
c7:fd:97:f8:0a:3f:d8:44:8a:78:79:49:f0:0b:26:0d:38:0f:
84:a1:29:0a:5f:21:e4:0e:27:6d:7d:b9:03:e9:50:b8:ff:f0:
27:13:9f:9f:f5:6f:76:4b:53:12:a0:7c:9a:a6:82:3e:ff:69:
75:80:ef:c6:3e:f7:1a:a0:af:2e:57:8f:67:95:6b:8e:ef:10:
60:22:7a:5f:05:f2:6f:84:c2:97:dd:b9:88:0e:7a:87:36:34:
99:ac:6a:01:c0:81:e4:56:41:86:22:b5:f0:cb:3e:77:81:1f:
cf:d2:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:21:47 2026 by rpki-client