Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: nKl/t1tI7w4HCpKIk3hW2AivC10wnZovGihUOhqm2hs=
Subject key identifier: 75:6A:19:B3:D5:77:03:05:0A:F0:53:C2:73:50:57:ED:9E:20:86:4B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1FF42012605312110C5E351E78C84349A561E172
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
Signing time: Fri 18 Sep 2026 10:38:33 +0000
ROA not before: Fri 18 Sep 2026 10:33:33 +0000
ROA not after: Fri 17 Sep 2027 10:38:33 +0000
asID: 214483
IP address blocks: 51.146.32.0/24 maxlen: 24
51.146.33.0/24 maxlen: 24
51.146.34.0/24 maxlen: 24
51.146.35.0/24 maxlen: 24
51.146.94.0/24 maxlen: 24
51.146.120.0/24 maxlen: 24
51.146.121.0/24 maxlen: 24
51.146.245.0/24 maxlen: 24
51.194.249.0/24 maxlen: 24
51.194.251.0/24 maxlen: 24
51.241.8.0/24 maxlen: 24
51.241.10.0/24 maxlen: 24
51.241.104.0/24 maxlen: 24
188.220.72.0/24 maxlen: 24
188.220.73.0/24 maxlen: 24
188.220.106.0/24 maxlen: 24
188.220.198.0/24 maxlen: 24
188.220.231.0/24 maxlen: 24
188.221.104.0/24 maxlen: 24
188.221.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f4:20:12:60:53:12:11:0c:5e:35:1e:78:c8:43:49:a5:61:e1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 18 10:33:33 2026 GMT
Not After : Sep 17 10:38:33 2027 GMT
Subject: CN=756A19B3D57703050AF053C2735057ED9E20864B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:a3:13:b8:51:b4:8f:78:45:3d:83:fe:ec:
4b:29:01:58:95:cc:f0:c4:cf:79:94:3e:15:48:3d:
73:6e:7a:7b:06:6b:91:56:23:19:db:64:9c:6c:52:
48:6b:ac:c0:44:26:3f:de:c1:f0:a7:a1:13:86:83:
95:b0:79:d2:05:56:91:74:9b:1e:5c:d8:51:16:dd:
dd:7d:c2:2f:c3:0e:99:37:06:b3:22:2a:57:5b:83:
9d:7f:a6:b7:e3:c7:57:d3:c4:71:77:45:c1:99:f6:
38:96:e3:7d:0b:16:18:ce:89:36:5b:d8:51:ee:68:
79:22:76:81:64:72:ae:6f:ff:5e:72:83:11:5a:95:
ae:28:d9:2b:c7:7c:ab:48:ef:e6:41:b2:3c:60:b8:
0a:90:f9:50:2f:04:8a:6b:e0:57:b8:cf:e1:65:fb:
fe:a8:78:c4:9b:51:06:d3:39:3e:1f:53:39:39:94:
5c:f2:98:6f:ef:b1:20:76:30:10:a1:36:f8:6f:c9:
63:47:54:1b:9c:9e:a7:18:51:54:54:e9:a3:53:c9:
23:0f:76:1f:c5:8b:33:db:37:37:10:b2:93:6a:c0:
8a:79:f2:8d:c2:98:2e:f8:b3:ac:b6:ef:85:cc:1b:
dc:24:b9:7f:10:0c:86:dd:e4:82:95:76:17:61:b9:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:19:B3:D5:77:03:05:0A:F0:53:C2:73:50:57:ED:9E:20:86:4B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.32.0/22
51.146.94.0/24
51.146.120.0/23
51.146.245.0/24
51.194.249.0/24
51.194.251.0/24
51.241.8.0/24
51.241.10.0/24
51.241.104.0/24
188.220.72.0/23
188.220.106.0/24
188.220.198.0/24
188.220.231.0/24
188.221.104.0/24
188.221.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:89:1d:d9:47:e4:a8:13:74:47:74:cb:33:b9:4f:6b:63:61:
e0:fb:5f:30:df:de:c2:0b:46:32:70:fc:82:ea:51:a0:c2:fb:
23:34:75:34:ee:ae:34:a5:da:7c:ac:31:ef:ad:e8:bf:eb:6d:
20:76:b2:a4:dc:d8:53:6a:5b:8f:6b:fb:f9:08:ea:a4:7f:9f:
b9:90:ad:60:0e:f3:d5:bd:96:85:e8:2c:64:79:0d:d0:75:a0:
51:2b:07:ce:94:07:03:0e:36:15:b6:55:16:c3:d8:c0:99:3c:
c0:dc:4d:0d:ff:8e:e4:fe:bd:6e:96:ef:99:6a:b4:df:5b:a1:
a2:66:38:cb:54:59:fa:eb:50:5e:e4:34:e2:ed:f8:81:88:96:
c5:71:3d:18:d7:1f:06:40:a9:0b:5d:b5:05:b6:e8:c0:c5:77:
8e:16:e3:71:f2:97:01:1a:9d:fa:ab:5c:46:08:c5:7a:55:a8:
48:8e:56:18:68:fa:94:6f:14:42:70:04:18:3f:a4:0e:6b:1d:
3e:e0:14:f8:66:ed:e8:95:a8:dd:38:d7:d2:e9:3e:a4:16:e3:
05:0c:57:3c:3d:97:8c:e9:78:ba:57:42:7e:90:71:de:6a:97:
49:75:e6:ad:52:81:91:61:59:6c:9e:92:b2:71:a6:36:06:c4:
d2:ee:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:44:51 2026 by rpki-client