Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: i2C2UsjLOGTeb/WfOglspuBfHrQkAwkxrvH8y+kMEgM=
Subject key identifier: 0D:A8:56:B7:00:66:F6:1F:DD:AC:1E:C4:47:C6:68:85:DC:68:E8:3F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 01854C272D08AD9498FBB5EA22C4CBA2DEAE53D2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
Signing time: Sun 20 Sep 2026 10:05:16 +0000
ROA not before: Sun 20 Sep 2026 10:00:16 +0000
ROA not after: Sun 19 Sep 2027 10:05:16 +0000
asID: 214483
IP address blocks: 46.202.75.0/24 maxlen: 24
46.202.101.0/24 maxlen: 24
46.202.118.0/24 maxlen: 24
46.202.124.0/24 maxlen: 24
46.203.18.0/24 maxlen: 24
46.203.31.0/24 maxlen: 24
46.203.78.0/24 maxlen: 24
46.203.125.0/24 maxlen: 24
46.203.155.0/24 maxlen: 24
46.203.241.0/24 maxlen: 24
91.124.24.0/24 maxlen: 24
91.124.27.0/24 maxlen: 24
91.124.28.0/24 maxlen: 24
91.124.43.0/24 maxlen: 24
91.124.94.0/24 maxlen: 24
91.124.95.0/24 maxlen: 24
91.124.149.0/24 maxlen: 24
91.124.240.0/24 maxlen: 24
92.112.219.0/24 maxlen: 24
92.112.230.0/24 maxlen: 24
95.134.30.0/24 maxlen: 24
95.134.63.0/24 maxlen: 24
95.134.118.0/24 maxlen: 24
95.134.119.0/24 maxlen: 24
95.134.162.0/24 maxlen: 24
95.134.163.0/24 maxlen: 24
95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
95.134.252.0/22 maxlen: 24
95.135.182.0/24 maxlen: 24
95.135.192.0/24 maxlen: 24
95.135.222.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
95.135.252.0/24 maxlen: 24
178.92.87.0/24 maxlen: 24
178.92.218.0/24 maxlen: 24
178.92.228.0/24 maxlen: 24
178.92.233.0/24 maxlen: 24
178.92.242.0/24 maxlen: 24
178.93.17.0/24 maxlen: 24
178.93.23.0/24 maxlen: 24
178.93.124.0/24 maxlen: 24
178.93.193.0/24 maxlen: 24
178.93.195.0/24 maxlen: 24
178.93.222.0/24 maxlen: 24
178.93.236.0/24 maxlen: 24
178.93.243.0/24 maxlen: 24
178.93.255.0/24 maxlen: 24
178.94.141.0/24 maxlen: 24
178.94.195.0/24 maxlen: 24
178.94.197.0/24 maxlen: 24
178.94.201.0/24 maxlen: 24
178.94.204.0/24 maxlen: 24
178.94.207.0/24 maxlen: 24
178.94.216.0/24 maxlen: 24
178.94.228.0/24 maxlen: 24
178.94.253.0/24 maxlen: 24
178.95.8.0/24 maxlen: 24
178.95.32.0/24 maxlen: 24
178.95.81.0/24 maxlen: 24
178.95.84.0/24 maxlen: 24
178.95.85.0/24 maxlen: 24
178.95.87.0/24 maxlen: 24
178.95.89.0/24 maxlen: 24
178.95.92.0/24 maxlen: 24
178.95.97.0/24 maxlen: 24
178.95.98.0/24 maxlen: 24
178.95.99.0/24 maxlen: 24
178.95.113.0/24 maxlen: 24
178.95.186.0/24 maxlen: 24
178.95.187.0/24 maxlen: 24
178.95.193.0/24 maxlen: 24
178.95.195.0/24 maxlen: 24
178.95.219.0/24 maxlen: 24
178.95.222.0/24 maxlen: 24
178.95.226.0/24 maxlen: 24
178.95.252.0/24 maxlen: 24
178.95.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4c:27:2d:08:ad:94:98:fb:b5:ea:22:c4:cb:a2:de:ae:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 10:00:16 2026 GMT
Not After : Sep 19 10:05:16 2027 GMT
Subject: CN=0DA856B70066F61FDDAC1EC447C66885DC68E83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:5a:99:38:fd:46:dc:b1:3d:41:10:38:06:
43:35:60:77:1a:0e:4c:70:25:6e:65:91:54:1d:2b:
37:92:34:a8:96:7d:f8:16:f6:97:7a:41:5a:88:0c:
0c:f5:05:65:7b:61:f6:60:3f:aa:03:17:f7:3b:38:
02:9e:dc:b4:55:99:a8:ff:c7:7b:80:e9:4c:17:66:
31:d0:5a:8b:a3:8f:ab:cf:8c:cc:06:b5:c2:e3:0d:
f0:f8:a6:fb:f1:e3:19:a1:8c:1a:81:57:f5:1d:cf:
a4:2f:62:37:64:1f:d7:73:43:d5:d3:f9:76:88:17:
93:eb:6d:64:9c:89:70:2a:89:31:13:94:c4:b6:01:
91:67:ff:0b:b2:91:81:5f:99:a0:ab:0f:40:3c:0d:
5b:83:3b:85:36:3f:36:5e:7b:41:23:c1:4b:14:d7:
b2:73:13:35:3e:33:0e:d1:27:50:4d:01:f4:3c:f4:
ff:a9:0a:f1:a2:a5:07:5a:3f:66:69:6e:5c:67:e6:
e3:8a:96:87:40:72:7c:78:dd:eb:16:e4:64:d4:c2:
b0:59:5c:2c:92:3e:4c:1f:77:51:02:3d:43:9a:05:
1d:2d:ef:ed:0c:1d:f2:b9:37:d7:1b:a4:6b:b9:d4:
7d:cf:8a:d3:25:46:11:f8:f3:39:6a:bf:d4:f2:71:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:56:B7:00:66:F6:1F:DD:AC:1E:C4:47:C6:68:85:DC:68:E8:3F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.75.0/24
46.202.101.0/24
46.202.118.0/24
46.202.124.0/24
46.203.18.0/24
46.203.31.0/24
46.203.78.0/24
46.203.125.0/24
46.203.155.0/24
46.203.241.0/24
91.124.24.0/24
91.124.27.0-91.124.28.255
91.124.43.0/24
91.124.94.0/23
91.124.149.0/24
91.124.240.0/24
92.112.219.0/24
92.112.230.0/24
95.134.30.0/24
95.134.63.0/24
95.134.118.0/23
95.134.162.0/23
95.134.240.0/20
95.135.182.0/24
95.135.192.0/24
95.135.222.0/24
95.135.233.0/24
95.135.252.0/24
178.92.87.0/24
178.92.218.0/24
178.92.228.0/24
178.92.233.0/24
178.92.242.0/24
178.93.17.0/24
178.93.23.0/24
178.93.124.0/24
178.93.193.0/24
178.93.195.0/24
178.93.222.0/24
178.93.236.0/24
178.93.243.0/24
178.93.255.0/24
178.94.141.0/24
178.94.195.0/24
178.94.197.0/24
178.94.201.0/24
178.94.204.0/24
178.94.207.0/24
178.94.216.0/24
178.94.228.0/24
178.94.253.0/24
178.95.8.0/24
178.95.32.0/24
178.95.81.0/24
178.95.84.0/23
178.95.87.0/24
178.95.89.0/24
178.95.92.0/24
178.95.97.0-178.95.99.255
178.95.113.0/24
178.95.186.0/23
178.95.193.0/24
178.95.195.0/24
178.95.219.0/24
178.95.222.0/24
178.95.226.0/24
178.95.252.0/24
178.95.254.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b1:21:83:15:4a:90:06:36:68:28:b4:a0:d1:86:d7:4e:dc:
d5:04:c3:7b:f7:66:17:0d:69:5d:b6:69:a7:45:c3:23:eb:ad:
e5:06:c6:49:e2:e4:47:b6:27:55:63:11:5e:94:fc:ac:ce:74:
63:60:71:80:50:b4:30:b8:0a:60:8e:f8:b7:ed:cb:48:54:89:
75:29:c9:1c:d1:86:02:a9:da:57:8e:62:be:27:87:87:62:5f:
ef:66:31:7a:d7:d8:24:0d:54:0e:2d:65:e5:8b:fd:3c:5a:28:
e8:8b:fa:14:a8:00:ed:f4:57:dd:9c:d7:fd:c8:22:1f:37:ef:
ab:f2:cf:fe:d6:e9:7f:4f:b7:31:fa:c7:35:3d:8b:4b:13:af:
e8:ae:57:5d:59:d6:d0:f3:e1:41:b3:cb:fa:0b:fc:4c:35:c9:
5e:43:0e:92:6a:15:55:11:c2:82:78:bf:6a:21:8e:17:ef:c4:
b0:17:f0:6a:29:03:84:c3:3c:bc:4d:bf:8d:2f:f0:b6:6e:dd:
04:4a:49:2c:d7:38:d9:79:21:6d:11:aa:1e:cf:32:6d:38:b6:
32:2a:a2:1b:7c:6c:8f:84:eb:88:21:b5:65:16:cf:13:8e:b5:
d1:bf:31:fa:01:d1:cc:d6:b3:62:c1:31:67:23:46:05:0d:05:
61:08:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:24:56 2026 by rpki-client