Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: Vmc+peuiKCGH3esv88GYXswSHGOjn9+/H1lOsS2q4nM=
Subject key identifier: 3B:99:4A:09:4A:63:08:42:5E:52:5B:12:58:AA:F6:55:7F:70:DD:97
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5E76ED2348841F193E7347CE72EBEF3468EA99B4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214647.roa
Signing time: Fri 09 Oct 2026 17:01:38 +0000
ROA not before: Fri 09 Oct 2026 16:56:38 +0000
ROA not after: Fri 08 Oct 2027 17:01:38 +0000
asID: 214647
IP address blocks: 82.21.57.0/24 maxlen: 24
82.21.125.0/24 maxlen: 24
82.22.4.0/24 maxlen: 24
82.27.36.0/24 maxlen: 24
82.27.37.0/24 maxlen: 24
82.27.65.0/24 maxlen: 24
82.39.247.0/24 maxlen: 24
84.75.41.0/24 maxlen: 24
178.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:76:ed:23:48:84:1f:19:3e:73:47:ce:72:eb:ef:34:68:ea:99:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 16:56:38 2026 GMT
Not After : Oct 8 17:01:38 2027 GMT
Subject: CN=3B994A094A6308425E525B1258AAF6557F70DD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:dd:60:1d:c2:b3:27:8c:6e:cd:ef:ea:21:
f3:61:01:c1:68:f1:ca:1f:24:5f:63:29:87:db:f5:
4d:6f:e0:4b:49:41:1c:6a:fd:4f:9e:34:1b:7d:bd:
fa:5b:c4:08:5d:80:13:ca:d9:b3:0f:5e:32:9d:22:
f6:da:9b:9a:91:e0:53:dc:a4:9d:44:9b:42:04:ff:
c4:6b:2d:9b:7b:34:ef:9f:2a:9b:61:87:d3:23:bc:
9e:17:6f:50:89:77:61:4b:18:d7:bb:82:83:1a:33:
a9:65:fd:d1:be:e9:18:94:b2:53:4a:57:2a:50:b9:
a0:b7:30:87:41:25:eb:1d:64:3d:d7:ad:ab:27:28:
2c:f7:48:7a:02:60:ac:5f:f4:f0:e0:ce:9a:54:50:
a1:13:17:c9:82:25:91:e3:dc:a6:6a:b5:39:51:25:
78:ea:d6:00:3b:06:ec:1e:b3:22:bd:89:ca:72:ff:
af:a2:f0:33:e8:97:e8:41:36:64:26:81:a2:37:4d:
c9:de:49:70:fe:05:b7:27:a5:7e:4d:12:94:d6:5d:
68:78:ce:62:c0:dd:73:fd:61:aa:54:8a:fe:9d:cf:
6e:72:24:04:84:b3:37:02:a8:51:e5:0d:13:c0:89:
a0:7d:b2:5f:2e:68:7f:c3:fc:52:c7:f4:3a:9e:17:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:4A:09:4A:63:08:42:5E:52:5B:12:58:AA:F6:55:7F:70:DD:97
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
82.21.125.0/24
82.22.4.0/24
82.27.36.0/23
82.27.65.0/24
82.39.247.0/24
84.75.41.0/24
178.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
41:61:2f:c2:e0:ed:23:3e:b0:d5:b1:3d:e2:0d:f3:60:63:12:
98:55:b1:8b:3a:e5:ac:d5:f9:7c:61:1d:d4:33:b3:22:52:08:
94:36:53:08:cb:e9:21:cd:cc:6f:e0:2d:e9:5e:56:1f:7c:62:
8b:06:91:7b:9c:ce:ad:44:7e:9e:1a:d5:91:64:56:a8:a9:e3:
e2:d3:fe:0e:a8:c3:5d:9d:80:10:b4:bd:1f:ef:90:c4:94:53:
ce:b0:6a:a2:9f:9f:64:47:dd:5f:e8:63:ee:13:53:95:53:69:
d7:04:22:e4:46:f6:a8:11:36:7b:f2:74:ca:ab:46:e7:d1:98:
f7:d8:d9:1c:fa:93:a9:72:40:77:88:2c:18:ee:7b:d8:16:47:
d7:b2:f6:19:ef:9d:0d:bb:06:00:2b:dc:d2:67:14:73:05:73:
fc:dc:de:8e:90:56:cf:90:11:cf:d1:bd:61:a8:5f:be:38:3f:
76:f5:a9:81:2c:a8:45:4e:c8:17:ad:92:df:04:4c:2f:a0:c7:
5a:26:a5:cc:95:8e:43:c3:d5:0b:40:12:a3:6d:d2:89:e4:f2:
9c:11:35:85:32:8f:e5:79:6d:92:d2:d8:e2:e3:89:97:8a:45:
c4:da:66:6b:8a:a3:cb:d5:4f:7e:1b:c4:73:bd:c1:cb:f9:61:
de:24:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:55 2026 by rpki-client