Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: nXlF6tUQDI2LdnwnCLxbNpGmNtwkcjBvmvEuP4aEe9Q=
Subject key identifier: DD:5F:FF:ED:90:08:23:FE:A1:6B:A4:70:96:D3:1D:60:4D:B7:A9:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7F006F44734C4EDC8C0F3CCCF8B0BF9A0ABFD3BE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
Signing time: Thu 15 Oct 2026 06:50:00 +0000
ROA not before: Thu 15 Oct 2026 06:45:00 +0000
ROA not after: Thu 14 Oct 2027 06:50:00 +0000
asID: 214483
IP address blocks: 82.21.97.0/24 maxlen: 24
82.27.44.0/24 maxlen: 24
82.39.128.0/24 maxlen: 24
82.40.27.0/24 maxlen: 24
84.75.1.0/24 maxlen: 24
84.75.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:00:6f:44:73:4c:4e:dc:8c:0f:3c:cc:f8:b0:bf:9a:0a:bf:d3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 06:45:00 2026 GMT
Not After : Oct 14 06:50:00 2027 GMT
Subject: CN=DD5FFFED900823FEA16BA47096D31D604DB7A9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:24:a0:52:f5:0a:96:f1:34:1a:47:ca:33:
b3:6e:84:2c:bb:9e:b8:f3:43:cf:a0:bb:b6:c0:22:
33:e7:e0:84:e8:f2:d6:9d:9a:94:3e:27:43:0e:a1:
3e:5d:4d:47:b1:71:bf:67:0c:65:09:c5:1b:1e:34:
cb:a3:1b:9c:53:bc:66:80:b0:df:5d:6e:15:51:55:
44:c5:86:c8:44:9d:50:fc:f9:d5:10:2b:dc:1b:60:
3b:aa:56:fd:23:38:b8:bf:98:1c:18:23:30:53:6a:
64:2a:de:8a:01:6f:f0:a2:d5:51:85:69:96:79:2b:
0b:9b:d1:84:87:dd:9d:68:5b:9a:7a:8f:29:f9:83:
06:59:d4:4f:de:68:d4:db:57:b7:c9:4c:d7:ba:db:
77:c7:ee:70:f7:fd:f7:81:2c:cd:9f:02:ad:10:50:
aa:de:eb:38:29:a4:1d:9a:69:31:f5:88:2d:b0:3f:
ae:90:86:b5:51:26:36:d0:9f:ff:69:12:07:6c:8b:
23:e3:0b:b3:37:a6:8b:e4:54:b5:80:d8:fc:78:d6:
d4:5e:c4:18:65:31:f5:6b:7d:16:24:c5:b2:ce:7a:
c9:b3:b6:29:7f:2b:b9:56:fd:49:12:c2:e6:8e:7f:
e5:9f:0b:cd:a0:b2:ce:3a:7f:06:9b:b0:27:fc:e8:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:FF:ED:90:08:23:FE:A1:6B:A4:70:96:D3:1D:60:4D:B7:A9:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.97.0/24
82.27.44.0/24
82.39.128.0/24
82.40.27.0/24
84.75.1.0/24
84.75.188.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cc:6a:e2:1d:1e:ed:af:46:41:82:f4:1c:96:86:62:f2:be:
83:c7:8d:5e:74:b2:f2:71:43:22:2d:95:5c:5a:b9:67:cf:b1:
3d:1a:1d:b7:7e:2c:c0:b6:96:84:1e:5a:18:f1:49:16:cc:c5:
71:ca:91:43:b9:57:be:17:23:fb:87:ac:21:76:d3:cd:65:7e:
bf:b7:61:63:cb:bf:5b:df:27:58:e8:a4:b7:21:dc:2d:5d:87:
a1:83:34:8c:6f:20:09:91:2f:45:3e:c2:a9:19:c3:bf:89:4c:
e2:b2:ee:89:95:eb:c8:67:82:87:1b:24:ae:ae:8d:55:06:11:
ff:06:49:73:4a:13:da:ba:80:73:e5:db:07:d1:70:82:a3:0c:
79:32:3e:fc:ec:ac:7e:86:7d:6c:7f:09:72:d4:20:c7:ad:9a:
56:e7:d7:c9:1a:8e:7d:5f:57:91:ae:76:df:d8:7a:f2:a0:d2:
a8:c2:21:43:70:34:d6:a6:de:d7:c1:57:ff:9e:e3:89:a3:a3:
00:75:49:e0:d6:60:06:1e:12:42:98:60:4a:ce:64:d2:1c:9f:
0f:8c:b9:d5:6a:48:ec:0f:6a:67:cb:48:db:ff:da:66:ef:46:
8b:21:85:2d:85:cf:21:17:26:6a:b4:12:71:f1:6a:63:2e:87:
55:ab:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:44:02 2026 by rpki-client