Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: IS2MTCchq1q2bnQwx93zWAxHdqyz5fQpv+MET0E08JI=
Subject key identifier: 04:24:BA:73:31:97:EE:C8:9D:36:2F:4D:04:0B:9E:61:FE:1F:65:F7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 405D1A5B9103772F926C789946D6482D524F5AE3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Wed 09 Sep 2026 00:00:16 +0000
ROA not before: Tue 08 Sep 2026 23:55:16 +0000
ROA not after: Wed 08 Sep 2027 00:00:16 +0000
asID: 214432
IP address blocks: 51.194.235.0/24 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
188.220.90.0/23 maxlen: 24
188.221.66.0/23 maxlen: 24
188.221.82.0/23 maxlen: 24
188.221.88.0/22 maxlen: 24
188.221.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5d:1a:5b:91:03:77:2f:92:6c:78:99:46:d6:48:2d:52:4f:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 8 23:55:16 2026 GMT
Not After : Sep 8 00:00:16 2027 GMT
Subject: CN=0424BA733197EEC89D362F4D040B9E61FE1F65F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:b6:79:30:95:fe:25:71:7b:35:2a:6a:8a:
bc:29:71:56:d4:71:45:ae:9f:52:5f:61:32:8d:42:
6f:70:4d:21:cc:60:df:12:4e:ed:70:16:14:d2:7a:
13:0b:fb:b5:74:cd:22:39:37:6d:14:40:8c:19:a2:
7b:7c:26:7a:61:86:83:a3:db:1e:26:bc:c6:84:cf:
b7:08:f1:3d:bb:19:9b:ef:94:4f:5f:74:43:a1:c4:
cd:e0:45:b3:d7:e0:42:a9:32:6b:d6:45:ee:d3:db:
70:2d:c7:43:65:7d:b1:bc:0f:09:6c:8f:1a:d7:42:
2d:7c:46:e3:67:71:7c:3c:9d:7b:c5:51:ca:fb:e5:
1f:42:f1:64:d4:6b:03:ee:a8:9b:9b:58:55:c7:d8:
4a:73:e9:1a:87:fc:ad:7e:ea:43:c4:c1:a7:6e:02:
5b:7b:43:92:b5:0a:cd:54:83:fe:1b:b8:b1:b0:9a:
f4:8e:0c:de:51:fa:c0:2f:0e:05:59:17:61:f8:d2:
d1:c4:b3:42:86:05:40:ee:f2:e8:c5:66:26:d0:17:
8c:b7:37:7e:63:0d:ef:5e:5d:0a:ba:14:cd:79:54:
b1:fd:14:b2:73:a3:ee:84:0c:12:f9:98:83:21:40:
18:de:f7:4a:e3:09:f8:41:d8:bb:1a:af:c2:e9:0e:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:BA:73:31:97:EE:C8:9D:36:2F:4D:04:0B:9E:61:FE:1F:65:F7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.235.0/24
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
188.220.90.0/23
188.221.66.0/23
188.221.82.0/23
188.221.88.0/22
188.221.120.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:7f:c9:cc:25:82:99:0b:e6:75:ca:7e:eb:e2:8f:6c:eb:1d:
aa:a0:66:96:eb:2d:0c:8c:b7:b1:f1:a7:93:79:a7:e4:3e:7d:
d6:10:13:5f:8c:6a:09:78:e6:f4:6c:45:62:2f:ac:3d:62:3d:
32:08:92:5b:16:dd:ea:35:70:2f:83:6c:0c:12:eb:f0:d9:8e:
57:f1:75:68:73:41:ee:83:9e:0e:c8:47:c7:11:11:18:20:d3:
b0:95:c2:01:5b:7f:f3:a8:4a:6d:14:e1:2e:6b:e2:a7:ac:ba:
a0:dd:84:62:d0:c1:24:02:d1:71:90:fb:a7:94:96:46:26:82:
f1:38:b1:5c:9a:12:b2:07:1c:2a:a7:0d:c5:a2:ef:96:25:21:
ec:14:2a:0d:ee:84:fc:f4:41:e2:9f:6f:67:b2:2b:ea:bc:5d:
34:79:23:f6:00:f1:6c:42:5e:29:40:23:32:46:bd:7c:21:b0:
79:bd:0b:b2:fb:44:08:f4:d2:99:b9:82:be:5d:03:70:09:6d:
a5:5f:a0:d1:99:a7:35:ae:f2:73:d4:c7:b2:e4:4f:e1:7b:98:
07:cb:38:75:cc:c1:9c:6b:1e:d9:90:84:7e:89:7e:ac:33:19:
8e:df:63:fb:d4:de:20:bb:1f:a3:bd:6b:8c:eb:3c:c1:d2:5d:
73:d2:69:81
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUQF0aW5EDdy+SbHiZRtZILVJPWuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MDgyMzU1MTZaFw0yNzA5MDgwMDAwMTZaMDMxMTAvBgNV
BAMTKDA0MjRCQTczMzE5N0VFQzg5RDM2MkY0RDA0MEI5RTYxRkUxRjY1RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM4LZ5MJX+JXF7NSpqirwpcVbU
cUWun1JfYTKNQm9wTSHMYN8STu1wFhTSehML+7V0zSI5N20UQIwZont8JnphhoOj
2x4mvMaEz7cI8T27GZvvlE9fdEOhxM3gRbPX4EKpMmvWRe7T23Atx0NlfbG8Dwls
jxrXQi18RuNncXw8nXvFUcr75R9C8WTUawPuqJubWFXH2Epz6RqH/K1+6kPEwadu
Alt7Q5K1Cs1Ug/4buLGwmvSODN5R+sAvDgVZF2H40tHEs0KGBUDu8ujFZibQF4y3
N35jDe9eXQq6FM15VLH9FLJzo+6EDBL5mIMhQBje90rjCfhB2Lsar8LpDiN7AgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUBCS6czGX7sidNi9NBAueYf4fZfcwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAM8Lr
AwQATmnYAwQBTmnaAwQATmndAwQBTmnoMAwDBAJOaewDBABOae4DBABOafMDBAG8
3FoDBAG83UIDBAG83VIDBAK83VgDBAG83XgwDQYJKoZIhvcNAQELBQADggEBAH5/
ycwlgpkL5nXKfuvij2zrHaqgZpbrLQyMt7Hxp5N5p+Q+fdYQE1+Magl45vRsRWIv
rD1iPTIIklsW3eo1cC+DbAwS6/DZjlfxdWhzQe6Dng7IR8cRERgg07CVwgFbf/Oo
Sm0U4S5r4qesuqDdhGLQwSQC0XGQ+6eUlkYmgvE4sVyaErIHHCqnDcWi75YlIewU
Kg3uhPz0QeKfb2eyK+q8XTR5I/YA8WxCXilAIzJGvXwhsHm9C7L7RAj00pm5gr5d
A3AJbaVfoNGZpzWu8nPUx7LkT+F7mAfLOHXMwZxrHtmQhH6JfqwzGY7fY/vU3iC7
H6O9a4zrPMHSXXPSaYE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:44:44 2026 by rpki-client