Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214828.roa
File: AS214828.roa (raw, json)
Hash identifier: suijEO23hZKeTbxXpTr3quIJ8+FJOJImPl8sLzPt+iU=
Subject key identifier: 29:EE:C2:40:31:1C:9E:CC:E3:B4:A8:41:FF:61:A4:75:52:A2:18:BC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5FB778679C908711E364897E8F481087CD6C9B13
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214828.roa
Signing time: Tue 03 Feb 2026 06:52:20 +0000
ROA not before: Tue 03 Feb 2026 06:47:20 +0000
ROA not after: Tue 02 Feb 2027 06:52:20 +0000
asID: 214828
IP address blocks: 2a13:9500:74::/48 maxlen: 48
2a13:9500:132::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b7:78:67:9c:90:87:11:e3:64:89:7e:8f:48:10:87:cd:6c:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 3 06:47:20 2026 GMT
Not After : Feb 2 06:52:20 2027 GMT
Subject: CN=29EEC240311C9ECCE3B4A841FF61A47552A218BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:4b:4c:d5:e5:93:c9:29:c6:c2:49:59:20:
36:d5:77:20:ce:4d:86:43:bb:d5:fb:9b:92:63:44:
32:f1:01:f8:df:bf:f5:26:9e:22:09:36:fc:c5:59:
ef:fe:ce:fc:99:28:62:66:e2:e4:d9:98:59:4b:08:
e1:c4:8c:5f:96:8d:05:e8:40:0a:b5:b4:b6:4e:7d:
69:74:85:07:5b:17:ff:53:a2:a5:8b:cd:1c:be:97:
f6:80:dd:f2:f3:13:74:fb:c6:48:f0:8b:ee:8d:14:
44:23:90:b8:31:1b:49:83:3e:5b:e6:63:77:0b:0c:
38:34:19:f5:25:75:48:b0:38:b3:57:1f:59:0d:55:
bc:1c:c3:cc:50:c7:5d:e1:77:c5:5c:ee:b0:cd:5c:
7f:a3:dc:18:c2:bc:14:14:ce:46:13:b5:68:99:1a:
79:66:88:8d:12:6b:c9:ff:b1:0d:2c:1a:92:46:21:
b2:b6:ec:49:f1:7a:d6:32:83:75:bc:c1:a8:1e:d2:
06:0f:55:ee:4a:d7:9d:81:e9:f3:86:69:ad:af:c4:
3e:ef:e1:84:fe:8f:67:97:6e:95:4b:18:12:2b:ae:
f1:f0:00:4d:f1:2e:51:ac:92:96:6b:c2:09:c9:66:
d0:43:45:e9:43:1a:55:8c:01:33:a6:b2:b9:bb:6b:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:C2:40:31:1C:9E:CC:E3:B4:A8:41:FF:61:A4:75:52:A2:18:BC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:74::/48
2a13:9500:132::/48
Signature Algorithm: sha256WithRSAEncryption
45:ac:a3:76:66:39:41:d4:16:9b:92:63:67:e5:49:f3:5f:bb:
bb:fe:86:64:e1:d8:2a:d9:e6:d8:8c:3d:d1:c9:ea:65:08:f2:
49:6a:a5:44:2e:3b:06:0c:d9:8a:5b:fc:29:21:41:74:57:fb:
d8:58:4d:67:46:58:91:43:0b:ce:33:5c:af:e5:46:fb:50:c2:
3d:8c:0d:d9:b7:1f:ce:b9:83:c8:f5:48:b5:07:cf:34:29:f6:
d9:d9:85:61:5d:37:45:91:55:18:ea:d5:75:0e:93:a3:89:db:
84:fb:d5:25:16:7b:e2:94:3d:96:bc:68:bb:e7:ee:ca:fd:39:
dd:10:47:bb:f9:f6:94:ac:92:e4:8c:1e:c5:b9:81:1f:7e:79:
4a:ed:4d:c4:2d:ce:0c:64:0b:06:e7:6b:65:d2:b7:d9:2e:f5:
59:e0:75:5e:b2:75:cd:1c:b4:34:3d:9b:45:8d:28:f7:f2:a2:
56:b9:29:64:83:27:8a:46:14:3e:ea:32:70:ac:f6:37:1c:85:
ab:4a:aa:3b:21:ca:e1:ac:84:fa:15:f1:31:45:85:b2:4f:8a:
73:dd:dd:24:3b:02:d4:be:f0:72:04:73:87:f0:34:dc:83:8e:
3f:bf:bf:ab:ad:5f:5f:5c:02:a3:ff:dd:b4:af:6b:3d:d3:d5:
16:0b:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:59:26 2026 by rpki-client