Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: R47xU/gC0WfNJQ/JdxqG1BVGhM8MmkPn7DoufLMeweY=
Subject key identifier: D7:84:31:41:35:55:9E:C4:B2:69:E3:13:0E:88:F9:3C:05:D7:29:A6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4D36B0A2DDCB38C0610F8B4066F4502B56AEA883
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Sat 10 Oct 2026 13:03:28 +0000
ROA not before: Sat 10 Oct 2026 12:58:28 +0000
ROA not after: Sat 09 Oct 2027 13:03:28 +0000
asID: 214432
IP address blocks: 78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
188.220.7.0/24 maxlen: 24
188.220.65.0/24 maxlen: 24
188.220.76.0/24 maxlen: 24
188.221.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:36:b0:a2:dd:cb:38:c0:61:0f:8b:40:66:f4:50:2b:56:ae:a8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 10 12:58:28 2026 GMT
Not After : Oct 9 13:03:28 2027 GMT
Subject: CN=D784314135559EC4B269E3130E88F93C05D729A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:c4:90:9e:b4:14:f9:5e:2c:ac:da:66:a6:
db:8f:07:e3:5b:82:6d:eb:c8:d8:84:c0:d9:0e:00:
19:77:86:b5:9c:45:e8:23:a9:8e:b7:08:47:3e:93:
39:a5:b1:4b:49:e1:e1:3c:5c:ff:0b:52:db:82:b2:
93:46:c9:ba:4e:26:50:98:0c:c9:f4:26:b0:85:7f:
08:b4:8e:d8:95:0d:66:04:5f:45:77:c5:2e:e3:a0:
53:3a:95:67:7e:95:ec:31:b6:82:3b:9d:a9:7e:66:
c6:ea:ba:21:74:cf:2c:2b:ba:cb:44:91:a5:ef:93:
d5:b2:df:81:32:e3:95:54:b5:ca:4b:bc:81:b9:e9:
70:fb:c8:db:42:5f:7f:39:bd:0e:9d:8d:ef:94:83:
1e:5a:0c:17:27:70:bd:c8:32:1c:7b:d3:f6:11:90:
2e:18:5d:35:1f:ac:50:41:75:ee:1a:5b:5f:9d:d5:
9d:30:c1:67:a5:e9:ed:42:62:98:73:fe:c5:7b:4d:
49:b0:75:11:af:c2:70:5d:ab:91:cf:66:e2:e2:13:
8b:08:2d:32:41:fc:05:d9:9e:bf:3e:c2:15:e6:31:
b3:d7:53:87:00:10:50:17:f1:9e:d7:e5:ae:eb:81:
bf:c9:16:1c:a3:78:26:ae:1c:89:a1:0c:ed:fa:d4:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:31:41:35:55:9E:C4:B2:69:E3:13:0E:88:F9:3C:05:D7:29:A6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.219.0/24
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
188.220.7.0/24
188.220.65.0/24
188.220.76.0/24
188.221.190.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e6:04:3b:40:4c:47:74:d0:c5:55:81:31:8d:fc:31:19:2c:
b4:6b:78:07:c3:22:bb:84:01:fc:07:90:4c:a0:79:2c:61:c7:
95:f0:21:d0:e2:11:79:24:2b:d7:e1:a8:94:a8:e7:9f:00:cf:
06:a4:52:e3:58:41:f7:d3:8b:2f:05:0b:3e:87:14:c4:fd:b1:
19:e6:41:a9:48:b8:19:6b:b9:db:32:33:05:91:74:7e:10:5b:
b8:52:92:48:63:76:dc:67:48:39:fd:eb:ae:a9:88:40:ae:30:
b2:76:9b:83:75:70:2b:6f:fb:41:d2:7a:b8:5e:6c:50:45:3f:
f8:89:97:24:35:07:7c:d0:64:29:82:12:de:76:45:8e:a1:ba:
4f:1c:62:f8:30:c4:57:76:44:c8:9e:fd:b7:87:3f:36:36:9c:
29:5a:8d:37:56:d5:1e:19:04:56:ac:ba:c0:e5:cc:5c:fd:5d:
13:97:b3:53:9e:d7:fa:9a:0e:2d:18:1c:7b:77:76:16:fd:e6:
a9:d8:bd:8e:36:4a:ca:e9:e6:fe:c8:0b:08:e6:09:53:6d:ea:
7a:8d:4a:b3:78:20:8f:9d:86:7f:7d:d6:a2:f8:07:32:50:96:
bd:42:84:3e:83:89:8f:27:1b:c0:0d:d7:58:5b:69:28:61:be:
fd:4b:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:41:36 2026 by rpki-client