Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: qN+8aloCw+vC1iNSWtFod8SqaPbk/ED6ENbdhsiV43Q=
Subject key identifier: F8:84:C8:36:9C:C7:C8:34:65:57:F2:AF:DA:79:6A:78:36:43:9D:3B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6D3FEB2DB0C98FD7396881E62729179FBD1362D2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
Signing time: Sun 01 Nov 2026 00:09:33 +0000
ROA not before: Sun 01 Nov 2026 00:04:33 +0000
ROA not after: Sun 31 Oct 2027 00:09:33 +0000
asID: 214432
IP address blocks: 82.23.13.0/24 maxlen: 24
82.25.37.0/24 maxlen: 24
82.26.202.0/24 maxlen: 24
82.39.187.0/24 maxlen: 24
82.39.211.0/24 maxlen: 24
82.47.11.0/24 maxlen: 24
82.47.12.0/24 maxlen: 24
178.83.16.0/24 maxlen: 24
178.83.102.0/24 maxlen: 24
178.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3f:eb:2d:b0:c9:8f:d7:39:68:81:e6:27:29:17:9f:bd:13:62:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 1 00:04:33 2026 GMT
Not After : Oct 31 00:09:33 2027 GMT
Subject: CN=F884C8369CC7C8346557F2AFDA796A7836439D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:ad:41:9f:ad:92:a2:a7:a8:5d:cf:03:9a:
fc:74:6c:e5:b6:23:f8:98:8c:70:97:3d:e1:c7:78:
4c:53:52:e6:f5:2c:f6:f3:3e:6c:a7:39:ef:24:b2:
01:87:91:33:49:e5:61:5a:a3:d7:63:08:d2:10:14:
48:f1:68:ee:2f:1d:51:5b:62:20:09:c2:dc:3b:ea:
d9:2f:41:8e:70:b0:43:99:da:65:f6:3c:58:c1:50:
02:27:ab:0e:18:34:47:90:37:44:23:ee:57:f9:86:
b2:9c:89:de:8f:49:07:b8:56:04:55:39:31:ec:59:
b0:8c:0f:85:07:9a:1d:43:f0:86:d7:2c:a6:ca:6e:
f1:53:d1:e6:13:e3:aa:e9:58:50:3d:1c:c6:78:bf:
59:40:18:b1:bc:0e:1e:8e:cd:01:31:49:e9:9b:95:
f9:9d:9f:5a:88:02:ab:d5:0b:2d:9d:aa:45:2e:27:
d5:9d:e2:93:1e:c9:3b:05:d9:a7:6f:d3:d6:7a:29:
42:e2:c1:2f:37:d9:1f:da:95:a0:80:a1:d7:f0:fc:
1a:7d:fb:74:a3:e7:1c:3d:90:9f:6a:13:22:03:1a:
a9:6c:72:38:2c:4f:a0:ec:dc:65:57:94:3a:8e:11:
1a:43:92:42:cc:6f:66:c0:3e:a0:de:3c:b2:d2:76:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:C8:36:9C:C7:C8:34:65:57:F2:AF:DA:79:6A:78:36:43:9D:3B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.13.0/24
82.25.37.0/24
82.26.202.0/24
82.39.187.0/24
82.39.211.0/24
82.47.11.0-82.47.12.255
178.83.16.0/24
178.83.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:b7:0f:15:2c:94:87:e1:93:ca:7a:e8:20:cc:f2:a2:5f:d2:
75:f6:4b:7f:8a:85:9c:d4:78:ca:9f:51:65:9c:a5:41:d5:1c:
9a:aa:d6:1c:41:f6:57:17:95:72:62:09:6b:c4:68:08:fa:78:
e1:5f:ed:59:38:b6:55:ba:14:fa:32:ea:be:25:45:dd:86:3e:
e3:d5:92:67:03:27:6c:0c:03:b3:cd:46:6b:8a:5e:f6:55:c6:
a9:d6:8e:bc:91:ad:74:54:e4:c3:3c:85:99:f9:fd:9a:e8:c3:
5b:8d:97:fc:95:92:94:9d:b1:a7:98:18:2a:52:dd:d0:22:bd:
b6:5e:cb:9a:45:2e:fe:81:1c:44:25:25:b2:73:ae:97:ee:c4:
9e:10:df:82:8b:ab:f1:39:9c:22:f8:57:1e:39:da:ce:e7:9f:
be:1b:30:af:7b:f0:69:fb:ed:30:ef:58:cd:1f:ac:d4:fc:4c:
0b:4f:a8:2d:c9:57:3a:26:62:32:04:1a:13:d9:77:be:5a:fc:
3b:72:21:d8:8f:96:62:ad:69:70:33:de:37:6a:7f:dd:21:28:
c1:62:cf:5e:57:c0:8c:73:2c:6e:f3:88:72:96:20:1b:ee:d5:
42:36:ab:75:89:53:f3:77:36:50:ea:fb:4f:ab:30:de:81:fb:
f7:66:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:16:55 2026 by rpki-client