Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214285.roa
File: AS214285.roa (raw, json)
Hash identifier: mPOl5HEtOrQJyaKSlzV8OtJumd0na7l45uvc9zKx4/o=
Subject key identifier: CC:93:E3:0B:D1:70:95:72:55:BC:44:B7:C5:FE:F2:32:07:A0:F4:74
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D805E05117651FBF870977783C05AE8A4CDD3FB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214285.roa
Signing time: Fri 02 Oct 2026 17:49:35 +0000
ROA not before: Fri 02 Oct 2026 17:44:35 +0000
ROA not after: Fri 01 Oct 2027 17:49:35 +0000
asID: 214285
IP address blocks: 82.26.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:80:5e:05:11:76:51:fb:f8:70:97:77:83:c0:5a:e8:a4:cd:d3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 17:44:35 2026 GMT
Not After : Oct 1 17:49:35 2027 GMT
Subject: CN=CC93E30BD170957255BC44B7C5FEF23207A0F474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:80:30:cd:ba:f3:b2:66:53:2c:d3:f0:50:
72:38:71:89:58:dd:5f:89:59:77:83:7e:92:a4:ab:
8c:22:59:14:c8:39:db:30:7e:2f:9f:68:35:41:4c:
57:9b:e8:2a:f3:de:9b:df:e4:9b:fa:81:51:f9:c6:
01:04:01:16:8f:0a:05:cf:b0:77:2e:2b:73:75:35:
c5:8f:b8:8f:11:a7:ec:94:38:b4:ac:5c:a4:ae:25:
94:e1:1c:26:77:7c:ca:ce:2b:05:ee:1f:e8:59:2b:
19:68:5b:7c:bb:cf:be:a0:76:b0:37:4a:86:76:b5:
85:5b:ed:7b:c7:79:78:a1:27:34:1a:42:1d:9b:47:
b7:6e:c3:62:92:15:b3:7e:80:8d:d3:90:11:00:c2:
52:ec:4a:14:ed:58:ce:f8:ca:97:59:8b:a7:9f:17:
e4:7a:58:c6:82:74:aa:e6:89:24:eb:24:b8:08:a6:
75:50:f5:bb:ba:67:21:e7:5b:da:83:8b:dc:a2:af:
28:be:5a:36:88:30:41:ea:ce:a9:7a:c0:92:d5:95:
ba:73:bb:e2:9f:2d:8e:8d:8a:cb:0a:85:ab:51:ff:
e3:c2:6c:fb:2b:ee:f3:d1:5e:70:44:c6:d1:16:58:
6e:d4:08:a9:59:21:03:2d:8d:7c:0f:68:3b:9f:7b:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:E3:0B:D1:70:95:72:55:BC:44:B7:C5:FE:F2:32:07:A0:F4:74
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214285.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.137.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5b:7d:e2:0e:04:ea:21:fb:82:a3:59:9b:22:dc:08:dd:f5:
8d:3c:24:e8:b5:c7:d7:56:8f:72:c6:c9:fe:62:48:b0:f3:9e:
1d:32:e5:c1:e5:69:cc:f5:fb:24:2d:e7:cb:a4:c1:09:7e:c4:
5b:77:7c:13:08:61:51:df:6e:49:7a:1c:d7:10:6c:f3:a0:b2:
26:44:24:64:3d:6d:88:68:90:2b:45:8b:f6:66:65:a8:2b:ce:
06:c3:74:c9:4c:5d:5f:1e:f0:5d:15:63:56:70:26:a9:90:e2:
cb:dd:4b:5f:8d:05:c7:1c:a0:c4:fc:21:02:d5:31:dd:be:fe:
1b:a4:07:66:c5:93:a1:34:f9:83:37:15:f4:87:d6:13:e9:1a:
a1:37:96:56:a0:f3:e4:1e:83:5a:7d:d0:4a:a5:e3:b2:a6:89:
27:00:c2:fb:77:cf:44:0a:c4:cb:84:31:8a:0d:26:00:8c:22:
a0:0c:33:8d:1e:91:f5:27:af:e7:15:d2:65:79:2a:60:09:8f:
d8:f7:c0:5c:ca:92:d9:6a:2f:78:1b:c8:90:34:31:62:76:89:
4a:24:60:c1:9c:e4:36:0f:f1:30:f4:fd:d2:6e:9d:65:ec:ac:
2e:b2:2b:9b:67:bc:c3:20:ef:d0:4d:d1:22:13:2f:09:27:80:
9e:d4:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:02:00 2026 by rpki-client