Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: YXa4Ur0ijlyoS8Lg4VFDjnJKmvHtsMgrI/JaKLx9jHA=
Subject key identifier: CC:C9:12:C0:BC:09:86:31:A4:6A:03:39:82:41:08:DD:66:A1:CF:5B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2992ED9EB40F7021B71F8B38B1E4DD3ED84D6C95
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
Signing time: Fri 16 Oct 2026 04:47:02 +0000
ROA not before: Fri 16 Oct 2026 04:42:02 +0000
ROA not after: Fri 15 Oct 2027 04:47:02 +0000
asID: 214483
IP address blocks: 188.220.73.0/24 maxlen: 24
188.220.106.0/24 maxlen: 24
188.220.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:92:ed:9e:b4:0f:70:21:b7:1f:8b:38:b1:e4:dd:3e:d8:4d:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 16 04:42:02 2026 GMT
Not After : Oct 15 04:47:02 2027 GMT
Subject: CN=CCC912C0BC098631A46A0339824108DD66A1CF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:54:e1:60:b0:3c:97:e1:ad:51:19:9d:1f:
cf:21:9a:07:20:e4:9e:e4:6e:3a:af:0b:98:c4:e1:
f1:53:ef:c9:ea:66:53:47:ac:f1:62:9d:3d:dd:29:
b6:b9:93:fe:5d:ca:e6:92:2f:d2:2e:7e:a2:9c:19:
e4:d1:90:fb:36:06:d0:97:1e:4b:13:1c:e8:cd:65:
b9:3b:0b:b0:73:03:ac:17:e1:12:40:75:3c:6c:0f:
c6:d1:43:83:e3:d4:ae:27:5b:97:fe:cf:03:d8:63:
25:17:45:13:eb:94:ce:5b:9d:20:41:a0:fe:73:b1:
e3:45:f1:4f:fb:b8:54:27:81:83:5a:49:57:1e:c3:
ac:8f:bd:3c:86:a4:45:b0:b4:f4:b4:32:d7:24:6f:
e9:13:99:97:b4:e6:84:fe:07:97:a8:06:99:e3:3f:
3e:ba:ac:22:f9:a4:f7:78:54:94:f3:5d:9f:a2:dc:
43:73:a5:45:14:5c:2d:90:b3:e1:72:b6:2c:dc:62:
d4:fa:25:52:88:58:3d:f6:9f:0c:db:45:3d:65:0f:
3d:19:4f:14:26:3b:88:ee:9a:e9:30:e4:c1:a7:c4:
f7:ee:db:c6:01:a1:e3:9f:5c:0d:be:1b:bf:5b:68:
5e:35:c8:a5:32:8e:03:8c:b3:6f:9d:44:67:99:d3:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:12:C0:BC:09:86:31:A4:6A:03:39:82:41:08:DD:66:A1:CF:5B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.73.0/24
188.220.106.0/24
188.220.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:17:7f:7b:f5:f1:f4:1a:be:f2:0d:70:72:42:33:22:8e:32:
9b:02:f0:ee:d3:29:b2:bf:05:a6:cb:57:52:d3:e3:cd:d3:4b:
b2:94:55:8d:31:9f:54:16:ff:d9:14:74:5d:a1:eb:7d:78:98:
8e:7f:3a:44:c8:b3:87:8b:02:a2:ae:f9:12:7c:0b:4f:09:88:
28:bb:09:b4:03:cd:c7:58:86:0a:a5:89:f9:10:13:cf:99:66:
c3:4c:53:1c:af:9e:7d:68:2e:9f:b3:d7:d9:15:a1:5a:a4:6d:
9d:fd:43:18:12:7f:b7:a9:f4:2b:4e:2c:1a:5e:ae:c0:2c:68:
b4:d0:1d:3f:78:1c:d3:ec:d3:85:7d:2d:0e:4c:75:a9:42:c8:
43:f8:c9:3e:0e:46:b3:93:ea:62:b6:6b:fd:c3:5d:3d:41:7d:
1a:a4:f1:e8:b5:9e:2a:04:8b:29:89:07:32:e0:1e:c6:4e:b4:
e4:b0:3a:42:70:02:17:fa:3b:0d:af:36:85:aa:8b:ad:a4:d4:
4d:b1:1d:06:6b:04:f9:e5:e5:40:a3:99:03:b1:75:da:7b:c6:
22:28:05:69:bc:fb:fb:f5:81:1c:12:8e:bd:9b:3a:d6:21:44:
28:e9:66:3c:fd:f4:00:1c:fc:ec:09:e7:50:0c:b3:8e:c1:05:
95:e6:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:03:00 2026 by rpki-client