Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: yjx382BRIT9T3n9M1uWiK8v7liQ0uKwdcBgm0guF2ag=
Subject key identifier: E7:DD:E8:FD:CC:11:5D:62:60:D6:76:A5:43:52:90:EA:41:83:E7:63
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1C413E70E085D290CF1F2DB67A999C2E4E99DDCD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa
Signing time: Tue 01 Jul 2025 15:59:23 +0000
ROA not before: Tue 01 Jul 2025 15:54:23 +0000
ROA not after: Tue 30 Jun 2026 15:59:23 +0000
asID: 214024
IP address blocks: 82.21.200.0/23 maxlen: 24
82.24.127.0/24 maxlen: 24
82.24.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:41:3e:70:e0:85:d2:90:cf:1f:2d:b6:7a:99:9c:2e:4e:99:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 15:54:23 2025 GMT
Not After : Jun 30 15:59:23 2026 GMT
Subject: CN=E7DDE8FDCC115D6260D676A5435290EA4183E763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:43:a9:c3:ff:83:bd:26:4f:ac:5d:61:1a:
d2:df:6c:99:a3:c2:6b:2c:df:95:60:45:bb:7d:be:
52:91:28:03:a1:7b:91:df:e4:87:ee:f7:91:20:cb:
f5:72:06:af:aa:75:b0:e1:9e:a8:ff:69:b2:d9:2e:
f8:29:ae:90:17:8c:34:e7:54:93:5d:98:65:dd:93:
78:80:8e:3e:4b:84:e0:01:48:da:4b:30:8c:f5:6b:
28:e4:c4:9d:a3:c2:f7:18:3e:75:ae:0e:41:13:40:
c1:4e:33:ca:82:d9:a9:26:f8:8d:e0:1e:02:2c:c4:
59:5c:05:21:c3:13:3b:3e:3f:e0:32:0d:a5:2d:62:
59:f7:51:9c:29:bb:ae:f2:98:02:eb:5f:a1:06:ca:
4a:bd:64:46:09:ba:33:69:f4:cd:c4:02:0b:6d:3d:
0e:7a:60:89:1e:0d:b3:bd:86:9e:42:6d:a5:2a:d9:
2e:1c:ac:1d:21:28:de:80:e0:5d:13:e7:58:98:ee:
ed:71:db:42:83:1e:be:8e:17:46:d9:d6:fd:75:f3:
a7:20:54:f7:0d:94:5c:f6:f5:5f:49:a5:4c:1f:a5:
42:fc:e1:8d:5c:a8:06:3c:a8:ba:44:e9:f7:8e:90:
ee:64:22:d9:9e:e2:c1:fa:00:47:66:95:51:28:2f:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:E8:FD:CC:11:5D:62:60:D6:76:A5:43:52:90:EA:41:83:E7:63
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.200.0/23
82.24.127.0/24
82.24.189.0/24
Signature Algorithm: sha256WithRSAEncryption
07:41:0f:ab:a6:1e:68:bb:bd:0a:75:08:72:8d:05:30:62:99:
df:13:c5:80:fe:e3:ed:d6:4a:e8:c0:74:19:38:e4:66:08:c5:
db:de:30:fd:b1:ec:76:80:a4:5e:91:05:bf:52:7a:0d:46:74:
14:bd:04:59:73:27:cc:ff:94:44:02:b0:08:61:44:54:f3:e4:
65:46:12:ad:9b:40:c5:53:02:7b:61:66:25:80:a2:01:79:60:
d0:1f:7c:cd:8a:d0:c9:f6:c7:90:9b:32:f1:0c:9c:e5:33:ea:
c6:11:ad:61:c0:37:ad:38:de:83:56:3e:de:9a:fb:bd:3b:f0:
24:a8:56:26:32:f5:3f:38:d6:a0:62:29:c3:52:48:d2:b3:75:
8c:4c:d9:49:2c:fb:a1:4e:17:bc:c9:b9:50:30:4b:40:7b:5d:
80:bf:1e:fc:ba:2d:a1:34:33:1c:17:ee:84:94:69:6b:69:65:
0a:2f:03:10:96:5a:25:a5:56:66:6a:b1:9e:04:79:f7:c6:57:
c3:c6:19:28:a7:88:7a:1c:7c:de:01:4b:6e:87:44:e7:d7:b8:
d0:80:7b:66:e3:83:3e:1d:98:0a:e5:53:b4:1f:b2:ca:20:fd:
a7:51:a7:4d:9a:99:ce:53:9b:a6:45:83:37:07:b1:f1:c9:5e:
b2:36:84:d1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUHEE+cOCF0pDPHy22epmcLk6Z3c0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA3MDExNTU0MjNaFw0yNjA2MzAxNTU5MjNaMDMxMTAvBgNV
BAMTKEU3RERFOEZEQ0MxMTVENjI2MEQ2NzZBNTQzNTI5MEVBNDE4M0U3NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSokOpw/+DvSZPrF1hGtLfbJmj
wmss35VgRbt9vlKRKAOhe5Hf5Ifu95Egy/VyBq+qdbDhnqj/abLZLvgprpAXjDTn
VJNdmGXdk3iAjj5LhOABSNpLMIz1ayjkxJ2jwvcYPnWuDkETQMFOM8qC2akm+I3g
HgIsxFlcBSHDEzs+P+AyDaUtYln3UZwpu67ymALrX6EGykq9ZEYJujNp9M3EAgtt
PQ56YIkeDbO9hp5CbaUq2S4crB0hKN6A4F0T51iY7u1x20KDHr6OF0bZ1v1186cg
VPcNlFz29V9JpUwfpUL84Y1cqAY8qLpE6feOkO5kItme4sH6AEdmlVEoL2jNAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU593o/cwRXWJg1nalQ1KQ6kGD52MwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MDI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUhXI
AwQAUhh/AwQAUhi9MA0GCSqGSIb3DQEBCwUAA4IBAQAHQQ+rph5ou70KdQhyjQUw
YpnfE8WA/uPt1krowHQZOORmCMXb3jD9sex2gKRekQW/UnoNRnQUvQRZcyfM/5RE
ArAIYURU8+RlRhKtm0DFUwJ7YWYlgKIBeWDQH3zNitDJ9seQmzLxDJzlM+rGEa1h
wDetON6DVj7emvu9O/AkqFYmMvU/ONagYinDUkjSs3WMTNlJLPuhThe8yblQMEtA
e12Avx78ui2hNDMcF+6ElGlraWUKLwMQllolpVZmarGeBHn3xlfDxhkop4h6HHze
AUtuh0Tn17jQgHtm44M+HZgK5VO0H7LKIP2nUadNmpnOU5umRYM3B7HxyV6yNoTR
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:41 2025 by rpki-client