Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: aGMba2VqkX66cI1uTcRnzi28lfoRCFPCiqVdlj+nx1M=
Subject key identifier: 89:9A:98:C4:82:32:A8:C0:87:B2:86:67:FC:AF:B9:60:E8:CE:95:A0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C3E635AB22BFB77338788618005E3DD31D01951
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214647.roa
Signing time: Thu 17 Sep 2026 15:21:39 +0000
ROA not before: Thu 17 Sep 2026 15:16:39 +0000
ROA not after: Thu 16 Sep 2027 15:21:39 +0000
asID: 214647
IP address blocks: 82.21.57.0/24 maxlen: 24
82.21.125.0/24 maxlen: 24
82.22.4.0/24 maxlen: 24
82.27.34.0/24 maxlen: 24
82.27.36.0/24 maxlen: 24
82.27.37.0/24 maxlen: 24
82.27.65.0/24 maxlen: 24
82.29.74.0/24 maxlen: 24
82.39.247.0/24 maxlen: 24
84.75.41.0/24 maxlen: 24
178.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:3e:63:5a:b2:2b:fb:77:33:87:88:61:80:05:e3:dd:31:d0:19:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 15:16:39 2026 GMT
Not After : Sep 16 15:21:39 2027 GMT
Subject: CN=899A98C48232A8C087B28667FCAFB960E8CE95A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:7b:de:cc:b9:e7:c4:44:73:7b:f6:a8:87:
0f:a4:fc:21:23:df:a8:07:d9:bc:ea:6e:3b:3d:2b:
83:cf:a2:12:68:ba:c3:e9:32:c3:47:f7:1c:b1:09:
02:ca:f6:23:2a:ab:7a:7b:9b:72:ec:f4:fc:9d:15:
a2:4b:42:d6:3d:5a:9e:ad:8c:ad:99:ff:4d:d6:72:
19:bd:7e:20:5b:45:a5:30:f4:fd:03:51:40:7c:e4:
7f:a3:83:c0:9a:a6:49:b6:08:b1:bb:30:b7:be:79:
34:4a:c5:20:6d:47:2f:a1:63:f8:25:75:0e:77:9a:
5d:76:bf:55:61:d2:e5:fd:0c:61:09:35:c1:db:9b:
65:0f:09:9c:4f:07:65:6a:2c:30:0a:e6:35:8b:e9:
2e:4e:ba:62:8a:3f:e5:1d:42:f6:fe:ac:01:a1:41:
77:3f:50:83:64:bf:ef:6f:98:07:94:cd:50:3e:e7:
4f:01:a1:5a:45:3d:ab:dc:87:b6:9d:f7:7c:90:0c:
7e:b2:73:c4:7d:66:5e:48:59:f1:c8:b7:43:0e:12:
c5:6e:70:e2:99:a9:e9:65:e6:25:54:77:04:5c:fe:
16:26:66:af:71:79:b8:40:b5:2a:da:01:9f:8b:22:
22:68:4c:25:f8:e5:6c:24:4e:69:c5:e9:df:83:64:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:98:C4:82:32:A8:C0:87:B2:86:67:FC:AF:B9:60:E8:CE:95:A0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
82.21.125.0/24
82.22.4.0/24
82.27.34.0/24
82.27.36.0/23
82.27.65.0/24
82.29.74.0/24
82.39.247.0/24
84.75.41.0/24
178.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b8:3f:b0:a5:a1:b7:03:d6:65:c0:cc:2a:7f:22:45:44:4f:
e2:ae:53:67:04:76:1b:ce:43:6f:a6:d6:e4:2f:96:40:72:f7:
89:f8:d1:0a:c0:8a:52:e3:b9:20:07:c2:5c:13:7f:cd:63:13:
d0:22:1e:01:4f:ee:5a:36:88:dc:02:c0:00:79:3a:22:5a:a9:
8a:57:b9:44:fe:f9:be:22:89:f4:12:35:ad:f3:91:0b:6a:6f:
27:b0:35:83:6d:63:35:1b:62:9c:d1:60:75:0e:f7:44:36:86:
70:77:c1:0e:d0:b6:2f:f5:57:7e:00:9b:2f:a1:29:77:d9:a5:
c1:be:54:3e:90:f7:75:d7:e6:f3:b4:0e:c9:9c:15:bc:65:ee:
e6:3b:61:6d:62:fb:bc:76:c8:0e:85:1b:bc:79:4f:ae:27:e7:
c6:03:dd:a0:c5:d2:bf:ee:0c:07:25:6d:f2:37:5d:96:e2:d2:
6d:92:44:4a:be:72:ea:f1:39:20:0f:0b:bf:37:49:6d:65:03:
fe:44:ca:e2:95:3c:5c:f8:4c:e1:3d:8b:77:e2:33:7e:59:73:
b6:8b:58:4a:14:1d:46:da:1d:77:28:56:1c:b8:8b:de:37:43:
b8:a9:7d:68:2e:1e:85:b7:ea:b9:e3:d6:b2:e6:af:7d:91:f3:
cd:26:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:16:54 2026 by rpki-client