Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214987.roa
File: AS214987.roa (raw, json)
Hash identifier: vEMzsz9Ach42LGy24TtyX3hHAvAEGFO6OAGh2JhWbeQ=
Subject key identifier: B6:29:2C:82:09:03:26:F2:33:9F:7B:D6:BD:C8:D6:09:5A:4B:92:7D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2170E3BF1968852A55DCA3504872A7F3C8EEA360
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214987.roa
Signing time: Wed 30 Sep 2026 16:49:35 +0000
ROA not before: Wed 30 Sep 2026 16:44:35 +0000
ROA not after: Wed 29 Sep 2027 16:49:35 +0000
asID: 214987
IP address blocks: 82.27.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:70:e3:bf:19:68:85:2a:55:dc:a3:50:48:72:a7:f3:c8:ee:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 30 16:44:35 2026 GMT
Not After : Sep 29 16:49:35 2027 GMT
Subject: CN=B6292C82090326F2339F7BD6BDC8D6095A4B927D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:36:af:e8:ee:5f:43:98:60:a4:be:97:8a:
ad:87:79:61:54:5a:5f:65:01:fc:7a:fb:17:d7:55:
f7:08:fb:7d:83:cb:45:cb:1d:79:33:2d:97:ad:a2:
f0:45:90:be:9c:63:74:4d:29:56:ce:0c:c8:95:2d:
e0:50:c6:03:6a:ab:2f:18:07:bf:d4:78:b4:26:13:
9e:8b:4b:aa:0b:25:e9:20:cd:ba:36:84:f5:d2:cf:
78:9a:c5:ef:4d:56:b1:aa:af:36:0f:21:93:bf:83:
3a:e0:08:ed:5b:f5:0f:97:c7:45:9a:45:87:3f:8d:
c2:9f:7e:e6:c4:bd:9b:16:04:58:1f:ff:45:d9:c4:
15:82:ce:4b:d8:24:2b:5d:47:22:a4:9f:4b:d8:cd:
65:02:6d:4b:b3:c4:e7:35:aa:72:f7:1b:91:a2:65:
c6:ec:ec:a6:9b:55:5e:ae:1c:62:e2:8d:bf:33:0d:
6d:b4:e5:50:bb:96:a7:b3:09:4c:18:b9:bd:b9:b1:
bb:7c:02:25:c0:16:5d:12:0e:9d:96:3b:21:6d:51:
c2:0d:d2:dd:26:36:1e:5d:91:26:d3:bd:9a:2c:8b:
52:e3:35:48:f0:39:bb:4f:3b:06:fc:fd:74:e5:2f:
f0:91:4e:b0:0b:18:99:21:3f:45:3d:5c:df:b0:27:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:2C:82:09:03:26:F2:33:9F:7B:D6:BD:C8:D6:09:5A:4B:92:7D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.128.0/24
Signature Algorithm: sha256WithRSAEncryption
36:04:49:38:20:4e:36:88:c7:b8:f1:72:84:1f:71:49:17:e9:
4c:e2:56:c3:51:f7:d6:0a:75:16:5d:4b:62:46:d4:54:65:63:
a6:3d:f6:de:23:e3:e8:17:c5:26:da:6b:a3:08:c0:49:50:a3:
59:d1:39:ce:fe:de:a8:54:35:8a:7d:02:0c:5a:be:67:ef:51:
93:48:08:63:5d:24:0e:1e:42:ad:52:9f:41:56:66:4d:b7:b3:
d6:82:f6:6d:19:f8:c6:c1:96:1e:e9:ae:17:08:8c:a3:00:6d:
9a:86:50:3a:2c:02:25:f1:8a:45:10:0e:b8:33:07:8c:f6:1c:
76:6c:2f:e0:dd:38:61:10:61:c0:34:02:09:9c:ef:bf:16:e8:
4d:49:db:1c:19:1a:71:b2:41:3e:5d:bf:13:b3:de:1f:46:23:
13:1c:5b:94:3b:f8:57:b4:e8:5f:8f:a1:dd:0a:c3:12:6e:c7:
c8:8e:94:de:3e:a2:8e:cb:c0:ab:44:25:d6:79:32:d9:2f:77:
b9:07:59:29:80:73:d6:79:c6:86:58:10:de:c0:43:fa:0e:34:
e3:df:74:c3:17:9f:3b:3a:29:21:db:65:f6:0f:e1:60:60:6c:
12:1b:94:54:3a:ca:1d:81:21:d0:84:ed:49:d7:2d:fe:82:76:
0d:8b:65:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIXDjvxlohSpV3KNQSHKn88juo2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MzAxNjQ0MzVaFw0yNzA5MjkxNjQ5MzVaMDMxMTAvBgNV
BAMTKEI2MjkyQzgyMDkwMzI2RjIzMzlGN0JENkJEQzhENjA5NUE0QjkyN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpzav6O5fQ5hgpL6Xiq2HeWFU
Wl9lAfx6+xfXVfcI+32Dy0XLHXkzLZetovBFkL6cY3RNKVbODMiVLeBQxgNqqy8Y
B7/UeLQmE56LS6oLJekgzbo2hPXSz3iaxe9NVrGqrzYPIZO/gzrgCO1b9Q+Xx0Wa
RYc/jcKffubEvZsWBFgf/0XZxBWCzkvYJCtdRyKkn0vYzWUCbUuzxOc1qnL3G5Gi
Zcbs7KabVV6uHGLijb8zDW205VC7lqezCUwYub25sbt8AiXAFl0SDp2WOyFtUcIN
0t0mNh5dkSbTvZosi1LjNUjwObtPOwb8/XTlL/CRTrALGJkhP0U9XN+wJzIlAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUtiksggkDJvIzn3vWvcjWCVpLkn0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0OTg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhuA
MA0GCSqGSIb3DQEBCwUAA4IBAQA2BEk4IE42iMe48XKEH3FJF+lM4lbDUffWCnUW
XUtiRtRUZWOmPfbeI+PoF8Um2mujCMBJUKNZ0TnO/t6oVDWKfQIMWr5n71GTSAhj
XSQOHkKtUp9BVmZNt7PWgvZtGfjGwZYe6a4XCIyjAG2ahlA6LAIl8YpFEA64MweM
9hx2bC/g3ThhEGHANAIJnO+/FuhNSdscGRpxskE+Xb8Ts94fRiMTHFuUO/hXtOhf
j6HdCsMSbsfIjpTePqKOy8CrRCXWeTLZL3e5B1kpgHPWecaGWBDewEP6DjTj33TD
F587Oikh22X2D+FgYGwSG5RUOsodgSHQhO1J1y3+gnYNi2XT
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:20:41 2026 by rpki-client