Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: za45bStGmaXnZudkwNScgRR7DUpN4XY86hLKpEiqW5Y=
Subject key identifier: 4D:93:0E:40:39:0B:7C:6D:D1:8F:DE:97:44:37:33:55:0B:29:89:73
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 409C513893043C4BC06A1B6D5390B06408D3BD50
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Fri 12 Jun 2026 16:06:40 +0000
ROA not before: Fri 12 Jun 2026 16:01:40 +0000
ROA not after: Fri 11 Jun 2027 16:06:40 +0000
asID: 214432
IP address blocks: 51.194.235.0/24 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9c:51:38:93:04:3c:4b:c0:6a:1b:6d:53:90:b0:64:08:d3:bd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 12 16:01:40 2026 GMT
Not After : Jun 11 16:06:40 2027 GMT
Subject: CN=4D930E40390B7C6DD18FDE97443733550B298973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:14:7f:79:4b:0f:af:8f:6d:7d:a8:54:81:
39:17:71:41:dc:07:96:0f:fd:53:6a:c3:ca:8d:19:
5c:cc:7a:02:a9:51:0a:80:0b:a2:bc:43:57:0c:c2:
2e:ef:29:45:32:ba:6f:03:c5:54:48:74:bf:19:47:
12:2a:25:d9:9b:24:58:f6:7b:75:1b:f4:be:d9:0f:
e4:02:e6:85:ca:7b:af:75:1a:f3:16:52:64:82:53:
82:3a:8c:71:8f:ab:5c:20:b7:55:ef:a9:fb:2a:a6:
43:b6:88:83:52:57:4f:6f:bc:0b:15:08:a4:a3:0d:
50:a7:09:0f:45:6b:d7:18:a7:c6:03:99:42:75:c4:
c4:c5:db:81:6f:47:1d:60:62:af:36:60:5e:81:da:
93:a1:82:f9:d6:fa:bf:d9:6c:3c:a0:5a:fe:97:30:
25:53:b2:9c:68:70:89:5b:7c:14:1c:ec:ba:49:54:
94:ae:4e:8b:09:b9:57:c6:c2:22:94:98:3e:07:fa:
f6:48:3d:59:c8:9f:e8:c7:7a:14:5a:26:e2:ec:68:
73:10:2b:c9:70:f0:b6:bc:75:fe:35:6e:27:bd:2b:
0c:a5:69:57:56:ea:dd:e4:75:81:5a:14:11:4d:a9:
e2:f3:1f:1a:bd:01:7e:06:ad:18:19:ad:b6:7d:05:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:0E:40:39:0B:7C:6D:D1:8F:DE:97:44:37:33:55:0B:29:89:73
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.235.0/24
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d7:34:1d:e0:88:99:1b:0c:04:70:e2:57:82:2f:22:b5:5e:
88:10:2b:85:ad:02:e2:89:39:d6:a6:53:cf:4b:b6:8f:fc:db:
c4:ef:25:39:f7:98:86:6d:a4:f5:67:24:2e:a7:96:9c:19:7a:
73:9c:ea:2b:29:35:0d:0c:1b:5a:22:c8:07:b1:b9:a0:39:78:
b1:9d:f7:ce:85:ce:a2:98:21:7a:4d:d7:cb:3e:3c:b9:3e:f0:
05:05:2a:9c:7d:44:7e:80:ff:04:af:6b:57:5a:a9:1d:ee:ab:
12:45:e7:2f:48:73:af:ea:96:f9:5f:12:3b:d7:36:a1:dd:55:
ac:b0:26:04:fb:d6:51:61:ac:96:0c:4b:85:50:4a:30:0f:45:
26:4f:f4:aa:c9:f6:8f:67:19:84:c5:ff:fa:ed:43:cd:7a:5d:
ea:9a:c4:92:17:19:43:2c:70:08:8c:14:3f:33:6f:4a:8d:f2:
5a:e4:7e:3f:c9:07:68:a0:38:b3:ee:4b:79:c7:da:91:57:54:
8c:2c:e9:5b:2b:7f:a6:24:8f:16:76:42:0e:76:86:18:83:54:
d7:42:59:d1:31:fa:7d:56:0f:91:2c:fa:17:60:0e:b3:d0:24:
e9:13:91:27:00:d5:f2:75:17:2c:27:00:5b:b0:bb:1a:30:26:
74:08:dc:e5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQJxROJMEPEvAahttU5CwZAjTvVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTIxNjAxNDBaFw0yNzA2MTExNjA2NDBaMDMxMTAvBgNV
BAMTKDREOTMwRTQwMzkwQjdDNkREMThGREU5NzQ0MzczMzU1MEIyOTg5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHxR/eUsPr49tfahUgTkXcUHc
B5YP/VNqw8qNGVzMegKpUQqAC6K8Q1cMwi7vKUUyum8DxVRIdL8ZRxIqJdmbJFj2
e3Ub9L7ZD+QC5oXKe691GvMWUmSCU4I6jHGPq1wgt1XvqfsqpkO2iINSV09vvAsV
CKSjDVCnCQ9Fa9cYp8YDmUJ1xMTF24FvRx1gYq82YF6B2pOhgvnW+r/ZbDygWv6X
MCVTspxocIlbfBQc7LpJVJSuTosJuVfGwiKUmD4H+vZIPVnIn+jHehRaJuLsaHMQ
K8lw8La8df41bie9KwylaVdW6t3kdYFaFBFNqeLzHxq9AX4GrRgZrbZ9BQkzAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUTZMOQDkLfG3Rj96XRDczVQspiXMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAM8Lr
AwQATmnYAwQBTmnaAwQATmndAwQBTmnoMAwDBAJOaewDBABOae4DBABOafMwDQYJ
KoZIhvcNAQELBQADggEBAADXNB3giJkbDARw4leCLyK1XogQK4WtAuKJOdamU89L
to/828TvJTn3mIZtpPVnJC6nlpwZenOc6ispNQ0MG1oiyAexuaA5eLGd986FzqKY
IXpN18s+PLk+8AUFKpx9RH6A/wSva1daqR3uqxJF5y9Ic6/qlvlfEjvXNqHdVayw
JgT71lFhrJYMS4VQSjAPRSZP9KrJ9o9nGYTF//rtQ816XeqaxJIXGUMscAiMFD8z
b0qN8lrkfj/JB2igOLPuS3nH2pFXVIws6Vsrf6YkjxZ2Qg52hhiDVNdCWdEx+n1W
D5Es+hdgDrPQJOkTkScA1fJ1FywnAFuwuxowJnQI3OU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:27:50 2026 by rpki-client