Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
File: AS214979.roa (raw, json)
Hash identifier: upzPY2Q9R5yftQFTOpIkAcKzopRYPPwCH3XXZ4LoOO8=
Subject key identifier: 38:E6:34:B6:94:D8:B0:8D:73:BC:45:7E:89:D8:1F:EF:77:28:57:45
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12529142A8456A98DF5DE9281B51AE8310170D22
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
Signing time: Thu 15 Oct 2026 15:49:37 +0000
ROA not before: Thu 15 Oct 2026 15:44:37 +0000
ROA not after: Thu 14 Oct 2027 15:49:37 +0000
asID: 214979
IP address blocks: 82.26.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:52:91:42:a8:45:6a:98:df:5d:e9:28:1b:51:ae:83:10:17:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 15:44:37 2026 GMT
Not After : Oct 14 15:49:37 2027 GMT
Subject: CN=38E634B694D8B08D73BC457E89D81FEF77285745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:58:d6:0c:c6:52:0c:db:ef:d4:39:06:21:
1d:6c:8a:55:b3:de:12:4b:e8:83:d2:2e:b3:75:97:
e6:23:0d:b7:b3:2c:2d:27:33:56:11:56:1c:e9:d1:
1a:63:df:6e:ea:7e:f2:1c:28:de:7c:c7:eb:91:15:
12:c2:5e:89:5c:31:53:a8:e0:65:ee:56:65:aa:fd:
95:f7:7c:b9:a8:ca:1b:59:b5:5f:94:5d:31:a2:f1:
4c:00:5f:d5:37:f6:bf:6d:aa:e2:87:7b:06:fd:3a:
cf:ba:c8:cc:3f:37:75:df:61:2d:91:c4:bb:0e:4a:
6a:6c:97:39:b2:5c:8b:7a:58:5c:34:07:f9:f6:50:
e6:54:7a:20:b7:af:be:5a:07:6f:c0:11:98:f1:d6:
b4:fc:49:29:3d:03:6f:f6:77:4e:0b:cd:3b:d6:4d:
7d:32:51:2b:4d:01:66:22:15:c0:a0:93:c7:b7:98:
54:48:75:99:e0:5a:38:3e:e8:ad:e8:be:1f:0b:3a:
a4:45:30:e7:e7:a5:36:bb:9e:48:34:84:4f:ad:f6:
d3:6c:64:fe:a4:da:59:ad:85:b9:2d:4b:74:e1:71:
96:48:91:8f:c7:80:ad:fc:92:45:b1:e7:23:4d:06:
bc:64:5d:ff:9a:58:bc:b8:a4:50:73:d1:8d:5a:eb:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:34:B6:94:D8:B0:8D:73:BC:45:7E:89:D8:1F:EF:77:28:57:45
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.67.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8f:6a:0a:ad:09:fe:45:8f:cf:4d:ed:0d:c1:94:0a:eb:b1:
bd:37:d7:5c:e8:06:32:3c:86:27:90:06:87:f7:ec:5c:7e:15:
4f:b2:5c:2e:b4:55:f3:78:56:75:4b:1e:44:f7:d5:1a:a7:33:
7e:b4:2c:68:fb:2c:4b:93:5d:fa:1a:ca:75:e9:22:e0:e3:d3:
49:f1:e8:b9:ea:4f:25:17:aa:05:59:fb:e9:1c:48:f2:2b:cb:
29:37:f1:b1:a3:db:95:71:ef:e2:3f:d7:52:d8:b7:52:71:49:
3a:9f:ef:ca:05:be:32:d1:27:ab:41:be:b0:db:14:7d:a0:26:
7e:1b:53:c4:e1:c6:6e:3a:1b:9f:80:ba:fc:11:81:0b:7e:a6:
0d:fd:2c:b2:4a:02:76:51:85:96:f0:07:ac:ea:53:62:0e:d0:
12:15:d6:45:a5:89:90:5c:8c:64:fc:4c:b3:1f:72:47:c5:87:
e2:5d:a6:b2:c2:64:c2:5f:fc:ff:16:e5:a4:69:37:ae:2c:fe:
ad:ac:37:c3:67:76:7e:d4:b7:b2:5c:4a:94:3e:45:73:4c:20:
47:05:71:e8:49:1a:91:c0:08:2e:bd:c5:01:fe:c7:f8:c3:ad:
1b:c6:08:9c:d5:fd:99:c5:cc:83:60:a1:d6:4c:eb:2d:89:72:
07:31:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:21 2026 by rpki-client