Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: 4cokNetrlJiGSkcwPTUeEgAE53uUlF6RCwsaltFw8KI=
Subject key identifier: 64:9A:3B:17:5B:52:31:FA:4D:B8:94:17:9F:B8:0F:E6:F3:42:BB:0F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2508BE88342B688C84E78AA8ADFC02047F5CCA05
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214677.roa
Signing time: Mon 26 Oct 2026 14:49:38 +0000
ROA not before: Mon 26 Oct 2026 14:44:38 +0000
ROA not after: Mon 25 Oct 2027 14:49:38 +0000
asID: 214677
IP address blocks: 82.39.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:08:be:88:34:2b:68:8c:84:e7:8a:a8:ad:fc:02:04:7f:5c:ca:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 26 14:44:38 2026 GMT
Not After : Oct 25 14:49:38 2027 GMT
Subject: CN=649A3B175B5231FA4DB894179FB80FE6F342BB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:ef:66:8d:6e:38:3b:00:d1:c0:37:ad:a3:
9e:7c:d9:bc:dc:00:a7:24:24:42:94:6d:96:38:fb:
da:fe:52:cd:12:c3:7c:3b:ff:ca:fa:f7:ec:5e:fc:
74:43:92:bd:26:72:4f:3a:4f:f6:f8:44:e8:22:45:
2c:a3:32:ee:6f:6d:3e:dd:76:c5:58:76:ed:af:0e:
c1:37:98:a2:83:13:ff:6c:49:ad:d6:0d:ed:21:7f:
3f:00:53:31:d7:dc:63:99:4a:ee:2c:05:4c:4d:d8:
64:21:c8:f8:04:03:d7:66:4e:4f:01:93:d0:c5:d6:
79:67:6b:41:4f:2a:62:c0:54:b1:5c:fe:2c:e9:38:
5e:79:ae:96:3d:39:d7:c3:63:f8:4e:da:4f:3a:84:
a6:9b:ec:1b:a8:0a:75:d2:10:7c:df:80:d8:ee:22:
71:8e:ca:af:54:34:c6:8f:09:55:a8:06:85:ac:89:
d8:36:b2:de:0d:6f:f4:eb:97:d0:af:1d:cd:87:3f:
35:e5:81:4a:8e:2a:f3:5d:e4:dc:46:89:aa:59:cc:
c7:40:04:46:ee:6b:79:42:ef:b8:c8:ae:a6:1d:a1:
54:c0:7e:75:61:98:cf:fe:84:59:51:00:fe:86:5d:
29:00:c8:9a:de:b4:b7:8e:3f:0d:07:4a:de:48:50:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:3B:17:5B:52:31:FA:4D:B8:94:17:9F:B8:0F:E6:F3:42:BB:0F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:70:14:33:4d:c1:7c:cd:1d:73:cf:ad:ff:ab:90:29:2b:
a7:8b:97:c7:a8:80:90:e8:75:d3:a2:38:1b:91:08:23:5b:78:
e8:f8:67:72:dd:78:08:45:65:41:ba:3e:9d:a9:47:b4:9e:d8:
4b:a6:25:54:90:f8:7d:74:6b:2a:74:77:cb:1a:6f:72:d2:98:
ae:43:a0:a4:78:d8:2a:69:97:0e:98:9b:04:65:2c:3e:8f:6d:
28:9d:b6:96:1b:83:ed:b0:d5:41:57:15:1d:b3:14:2f:59:d3:
2a:0e:ba:4a:ab:a7:0d:dc:8b:32:7e:03:34:8c:87:43:73:56:
af:3f:d8:a0:f7:f7:86:9e:a0:bf:a7:e9:ce:85:05:3b:bb:33:
86:5d:4b:17:b4:3d:de:da:41:c8:c9:6f:03:4a:ff:59:1f:78:
61:dc:02:8f:16:83:5e:83:2e:62:31:19:ac:83:53:17:81:a6:
97:f9:26:39:48:ae:c2:16:5a:a0:5d:41:d2:1a:e7:72:53:aa:
fd:71:ea:26:ef:5b:3f:db:16:9c:b4:51:03:a4:6e:77:84:df:
c4:a7:86:6e:60:87:91:61:fd:ce:56:be:a3:05:78:3c:93:f6:
85:79:08:7f:b7:fa:a8:9a:bf:36:ca:b3:6a:51:f3:82:36:28:
08:d1:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:05:41 2026 by rpki-client