Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214120.roa
File: AS214120.roa (raw, json)
Hash identifier: m9VgMRiKn25MD2zKZ2a/+L/xvsUM1aNNw3edr5HsHfc=
Subject key identifier: 68:04:D8:C4:49:CF:36:4C:58:57:83:5B:F9:85:B9:CE:0E:86:70:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5A5DEF69177951C977251F505E457A01D6861432
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214120.roa
Signing time: Wed 30 Sep 2026 07:43:28 +0000
ROA not before: Wed 30 Sep 2026 07:38:28 +0000
ROA not after: Wed 29 Sep 2027 07:43:28 +0000
asID: 214120
IP address blocks: 178.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5d:ef:69:17:79:51:c9:77:25:1f:50:5e:45:7a:01:d6:86:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 30 07:38:28 2026 GMT
Not After : Sep 29 07:43:28 2027 GMT
Subject: CN=6804D8C449CF364C5857835BF985B9CE0E867012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:c6:a9:f6:b2:aa:4a:e0:38:fc:11:fa:45:
36:26:1a:b7:c4:47:9f:76:f3:19:b5:6a:3f:d1:f2:
1c:4b:7b:96:b0:7b:47:0f:b9:f4:e5:ad:1c:18:61:
7a:eb:22:64:d4:b4:18:cc:bc:36:b9:08:a2:88:14:
dc:7e:a9:7a:c1:6b:d0:1a:ca:99:33:a8:f0:82:0c:
f6:45:24:c6:43:9c:22:ba:1f:14:35:a5:37:29:7e:
39:29:b8:bd:ef:79:de:2b:88:71:8c:23:5e:1b:be:
3a:c5:68:24:80:03:3c:35:9b:55:00:7a:b0:ce:fb:
d2:7d:96:d2:6e:17:00:de:c4:f1:89:70:7b:65:83:
a9:aa:61:1a:35:13:b0:aa:6f:eb:6f:a4:51:31:c8:
a8:81:c8:98:4e:e7:4a:c6:74:a5:70:6c:0f:bb:21:
bc:bc:5b:5c:87:29:b9:1b:51:ab:d7:f6:f2:3e:fc:
5d:59:5e:f9:7e:d2:e4:e1:63:6b:58:21:0e:92:31:
e3:d2:bb:0c:e5:f8:65:53:b7:fe:6f:a3:38:3b:c9:
ca:af:68:f4:97:25:a1:d2:20:5c:c6:7e:48:2f:24:
37:81:f6:b5:f6:fc:38:0b:28:2d:74:a6:2a:83:d5:
0a:90:d0:65:92:72:a1:4a:5b:c8:61:0b:1e:54:6b:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:D8:C4:49:CF:36:4C:58:57:83:5B:F9:85:B9:CE:0E:86:70:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6e:8e:b3:8d:4b:f3:c9:21:cb:d2:70:67:99:bc:a2:25:b2:
38:83:ba:54:0c:e1:90:31:a9:90:27:ff:3c:f6:af:c1:ff:2d:
63:5a:10:49:3e:67:d7:8e:88:09:48:6d:c1:93:28:2b:98:e3:
d3:33:5b:92:c5:5f:1d:2e:9a:30:bc:a7:03:7c:bf:9d:da:e9:
21:81:be:eb:8c:8f:8a:fd:e8:c0:73:f1:87:64:de:11:53:0d:
45:02:ff:42:3f:3a:79:c1:70:89:7a:15:87:9d:48:e0:43:cf:
6e:fb:99:1f:29:c3:5c:7f:30:57:cb:f3:2f:04:86:37:64:fc:
8e:a4:69:c1:bf:5f:80:77:58:47:55:b9:7e:af:77:58:51:4a:
91:6d:32:07:8a:56:30:ac:db:a9:83:be:51:72:be:99:ac:a5:
76:3a:d6:26:05:eb:ba:60:97:0d:3a:55:fb:62:27:55:2b:da:
a7:61:c5:ab:7d:38:2d:f4:99:5d:4a:11:05:87:f7:1e:79:58:
68:e8:5e:d8:2b:31:af:5a:d7:4a:84:6a:9f:f4:48:ac:3a:4d:
6c:e2:2c:0d:e2:8a:97:42:77:51:d7:af:ae:71:a5:fe:e4:b6:
f9:26:42:5c:60:13:01:21:eb:f1:b6:0a:22:03:33:67:bd:e3:
b5:94:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:16:55 2026 by rpki-client