Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214365.roa
File: AS214365.roa (raw, json)
Hash identifier: RRCP5+NLSwTDRMMd8tXRIZ7J/gMI65oHZbE/C8bn5Q4=
Subject key identifier: EC:2A:DB:5A:48:7F:81:55:FC:F3:E4:F9:6D:9C:15:BD:79:BB:AA:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3AD2CD3F119480410C78F7220F2E92673D7F4FF9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214365.roa
Signing time: Thu 29 Jan 2026 15:00:04 +0000
ROA not before: Thu 29 Jan 2026 14:55:04 +0000
ROA not after: Thu 28 Jan 2027 15:00:04 +0000
asID: 214365
IP address blocks: 178.83.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d2:cd:3f:11:94:80:41:0c:78:f7:22:0f:2e:92:67:3d:7f:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 29 14:55:04 2026 GMT
Not After : Jan 28 15:00:04 2027 GMT
Subject: CN=EC2ADB5A487F8155FCF3E4F96D9C15BD79BBAA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:a2:86:f2:53:bf:6d:64:35:e6:d9:d3:17:
14:65:bd:da:20:25:11:7d:6e:f2:7a:b8:61:d6:f3:
bd:3d:d0:58:30:f5:09:c9:ac:86:56:85:79:47:0b:
94:e3:65:0b:0a:3e:8c:c3:5a:06:2e:b8:69:9c:8b:
31:0c:01:ea:7f:c0:65:bb:e3:65:e0:ca:1c:16:ee:
bd:de:53:ad:bf:8a:4a:a5:a1:04:cc:b9:9a:4d:10:
df:83:a6:6e:e9:ca:f9:22:fc:a9:a4:f7:d7:1c:04:
89:a8:ef:17:c5:ad:34:07:cd:52:5b:25:62:ab:9d:
5a:63:61:8f:5f:c8:1d:36:66:4e:bc:50:19:79:e2:
84:ea:2b:ce:3a:82:dc:c8:92:e1:68:b4:04:ca:34:
9a:fd:b2:29:d5:ae:94:88:f5:22:d7:e3:29:4f:b5:
0e:04:7d:e9:09:ae:39:14:1d:0b:07:48:a2:75:ac:
96:b8:6a:4b:1d:cd:42:98:11:a3:36:2d:dc:49:b1:
f4:60:fd:66:c8:dd:c4:1b:72:67:36:5b:6f:51:59:
7b:77:66:3f:48:3f:ed:bc:28:15:c5:41:56:c1:82:
8b:f8:22:08:17:de:3c:9f:8b:82:b8:76:4b:ff:37:
32:3d:95:58:9a:55:fd:85:d5:9d:80:58:9d:b7:86:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:DB:5A:48:7F:81:55:FC:F3:E4:F9:6D:9C:15:BD:79:BB:AA:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214365.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.181.0/24
Signature Algorithm: sha256WithRSAEncryption
38:89:99:69:83:91:72:0f:60:9a:d2:25:f5:cd:57:40:22:d1:
1f:d0:f6:0c:f3:96:22:ed:40:c0:7a:df:62:63:62:0e:c4:b6:
24:4f:b5:7b:bb:00:8d:49:f6:d2:9e:03:1d:25:72:4a:71:7a:
62:3c:3b:02:cd:66:4d:06:be:be:dc:c0:89:26:f9:b5:e4:ed:
ab:82:26:d2:a3:38:89:f7:86:d1:33:bf:06:33:3f:6a:de:9b:
8a:b0:7e:78:33:7c:7e:8a:ba:88:80:ef:8e:55:79:f2:d6:b0:
84:9f:46:91:05:a4:2c:2a:83:d8:3f:91:20:0e:b6:de:ee:d1:
77:54:05:b7:3e:8a:d8:96:03:21:73:1f:b6:bf:1b:75:c9:db:
74:5e:0e:54:b6:bb:3c:27:7d:de:69:33:80:28:e9:ee:17:dc:
55:d2:de:bf:6c:f7:a5:21:64:8a:7e:7f:c3:be:ec:49:4d:8a:
f9:c1:c9:fc:79:1f:12:cf:18:41:62:a6:36:50:46:c2:b8:02:
a3:33:88:74:c7:a5:97:68:7d:94:4f:4c:6a:27:1c:a6:46:4b:
8e:0b:ed:7a:3d:70:2b:c4:92:3a:3c:26:d5:9f:c1:ec:fe:a4:
a0:77:a9:a9:49:fa:80:60:18:40:f6:7b:46:f4:ef:f2:0c:57:
26:a1:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:53:30 2026 by rpki-client