Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214347.roa
File: AS214347.roa (raw, json)
Hash identifier: 2obeip0NuTom5FuLPPblPnedhUpzlgcQfLPJisYxe8E=
Subject key identifier: 81:37:A4:6B:F8:8B:24:F3:BF:5C:9F:46:5A:D7:5F:43:D2:D1:03:50
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 17C74E46B7413B12D8FF0C747CEA778AC510A59A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214347.roa
Signing time: Thu 26 Feb 2026 16:57:37 +0000
ROA not before: Thu 26 Feb 2026 16:52:37 +0000
ROA not after: Thu 25 Feb 2027 16:57:37 +0000
asID: 214347
IP address blocks: 82.38.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c7:4e:46:b7:41:3b:12:d8:ff:0c:74:7c:ea:77:8a:c5:10:a5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 26 16:52:37 2026 GMT
Not After : Feb 25 16:57:37 2027 GMT
Subject: CN=8137A46BF88B24F3BF5C9F465AD75F43D2D10350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:73:01:77:67:a5:f1:de:dc:60:db:82:ff:
a9:cb:a6:f6:b3:0b:3e:da:2c:2f:40:4e:ff:15:7e:
c0:2a:83:fb:7d:a9:c5:40:52:30:b5:90:6b:9f:76:
0e:be:7f:97:69:7e:30:92:ec:10:a1:de:aa:07:6c:
df:14:88:27:7c:07:d5:ca:67:74:4b:fe:a2:3b:cc:
72:ab:33:42:d4:f6:3a:6f:00:67:3e:5a:d9:0c:45:
71:96:e5:b7:07:df:a6:30:d9:f4:b1:6c:ea:aa:e4:
ae:3d:ec:ec:7c:b7:31:35:65:6c:f1:ae:b7:cb:e6:
a5:2c:75:0c:98:3b:50:a2:01:6c:0b:74:f8:92:f6:
cd:af:bc:11:6b:10:8e:71:31:69:1b:89:e3:ae:a0:
24:ef:55:a4:73:0e:87:70:ca:12:17:df:a2:bf:fc:
e2:91:59:f4:e9:e2:be:ad:2e:96:5d:c4:ba:65:c8:
03:6e:a9:ed:bf:b2:16:89:f7:c9:c8:d5:7f:aa:8e:
d6:7b:ef:f7:64:c8:53:13:0b:4e:97:fe:d0:7e:53:
22:38:a6:dd:20:5f:32:cb:88:b3:35:54:14:18:ed:
09:2c:6a:a4:a6:ec:c1:3f:c2:25:d5:48:f7:4c:d1:
48:86:66:2f:df:0c:99:28:aa:01:48:f8:aa:99:48:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:A4:6B:F8:8B:24:F3:BF:5C:9F:46:5A:D7:5F:43:D2:D1:03:50
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.128.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ce:3c:e0:d9:6d:2d:c1:18:66:b5:3b:c3:8e:1e:9a:55:a2:
cb:90:b7:c8:b5:6d:6c:4a:d0:4b:d4:e9:b3:16:e6:b6:c9:c1:
2e:41:c7:42:78:8f:5d:0e:f6:de:37:f5:4f:5a:24:29:62:b5:
16:69:db:be:22:8f:20:4e:2f:c3:8d:12:d9:58:8e:1c:7f:3d:
7d:c7:cc:24:3f:65:7a:ae:77:ab:e8:93:3b:03:e3:e6:18:d8:
2c:6d:c9:1e:e1:d1:2e:c2:92:d4:fd:94:b6:84:47:75:5d:39:
cf:7e:62:35:e7:81:90:6f:16:11:b3:2f:d9:d6:1e:61:a9:4a:
70:d6:8e:be:51:af:93:da:7c:c4:32:dc:f3:d7:8c:6d:12:1b:
63:97:ce:04:14:98:e6:c8:5d:b8:d8:fa:be:88:d0:02:78:30:
0f:20:50:9d:5d:62:ce:61:04:50:f7:e3:21:fd:bc:ce:55:a3:
54:39:16:f2:fb:e3:63:6e:75:dd:76:0f:e5:d2:a2:23:ef:68:
81:b0:7f:29:f5:f4:93:ad:62:af:07:5c:11:02:3a:aa:90:a6:
8e:78:70:78:70:4b:76:df:97:dd:56:1f:48:47:a1:5a:8f:14:
f4:60:e7:6b:5b:b8:a6:f3:eb:0a:f9:cd:5c:ba:5f:2b:9f:c3:
94:9d:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:55 2026 by rpki-client