Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: VoX3axGFAm2ZPurcpF6K6qsBnfbMysO4cQCaIU7ecG8=
Subject key identifier: 8C:47:4C:14:60:18:80:DB:DB:02:97:21:3A:36:5D:9E:58:93:71:D8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5227B7DE6232C3A86C6CC87277267BEA65B6C108
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
Signing time: Mon 19 Oct 2026 04:33:00 +0000
ROA not before: Mon 19 Oct 2026 04:28:00 +0000
ROA not after: Mon 18 Oct 2027 04:33:00 +0000
asID: 214483
IP address blocks: 66.132.200.0/24 maxlen: 24
66.234.10.0/24 maxlen: 24
69.90.117.0/24 maxlen: 24
69.90.226.0/24 maxlen: 24
155.117.166.0/24 maxlen: 24
167.148.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 05:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:27:b7:de:62:32:c3:a8:6c:6c:c8:72:77:26:7b:ea:65:b6:c1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 19 04:28:00 2026 GMT
Not After : Oct 18 04:33:00 2027 GMT
Subject: CN=8C474C14601880DBDB0297213A365D9E589371D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:89:68:f5:23:37:e7:91:22:b9:92:7e:39:
af:f6:24:16:27:7a:14:f3:2f:eb:0d:6b:c2:a9:a1:
eb:05:19:e6:5d:b8:55:45:3b:5b:d5:47:f3:18:c8:
26:67:d1:4b:3d:76:9e:e4:86:d1:27:d7:17:b9:b8:
38:88:4c:b8:fc:06:56:d6:93:65:50:25:36:d2:99:
2b:08:c3:e8:d4:1e:2e:cb:b6:7b:65:5d:94:9f:6f:
68:05:13:8c:ea:eb:36:1d:83:51:d5:79:bd:dd:f4:
21:d1:5d:f9:fc:4a:9e:6b:4a:79:88:fc:50:d3:d1:
ed:1f:79:13:b6:1c:65:5a:00:87:8d:b8:d3:b7:e3:
b5:16:c0:bd:25:a1:d1:02:04:d2:f7:2e:8f:dc:e0:
2e:6c:b5:8f:0d:0c:9d:b3:b4:73:e0:e1:14:f3:90:
0e:9a:8e:d3:64:6a:10:e8:c4:b2:d8:1c:93:2c:4b:
1a:8f:23:97:8d:22:95:03:72:8f:48:1e:c0:98:d3:
d3:36:7c:61:6b:65:90:9e:8b:78:46:ab:89:55:0d:
4d:eb:b1:ea:55:11:77:87:df:b5:74:d8:b6:f7:23:
24:e7:c7:a1:c8:f1:64:51:7a:6b:92:d7:57:98:d6:
3d:1c:44:89:18:10:d3:18:f1:b8:b7:21:cc:cc:08:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:4C:14:60:18:80:DB:DB:02:97:21:3A:36:5D:9E:58:93:71:D8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.200.0/24
66.234.10.0/24
69.90.117.0/24
69.90.226.0/24
155.117.166.0/24
167.148.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:69:4a:bd:e2:9c:31:6f:c3:d4:04:c3:64:70:ce:6b:5a:bf:
1c:59:df:b4:b8:66:c7:bb:54:68:e2:00:39:9c:1a:c8:49:8c:
ae:01:49:6e:28:d1:36:52:72:14:31:34:9e:df:1f:f8:92:51:
39:f9:3e:11:f3:c9:db:c6:2e:05:d6:45:df:7c:9c:5e:f3:d8:
58:0f:cc:26:99:c1:63:e7:05:3a:ca:85:49:56:b0:86:fd:b3:
41:d0:9a:ee:14:78:8b:80:e3:99:f5:b1:64:6b:d8:5e:a2:87:
d3:ff:91:4a:41:a1:2b:33:21:3d:27:95:bb:23:0d:b6:7f:f9:
90:8e:71:9f:9f:04:0b:76:c8:bd:a9:e4:55:10:e2:f7:00:1d:
81:82:b6:17:74:cf:69:08:79:56:eb:9a:d7:fa:bd:80:86:50:
f2:7d:79:64:58:76:84:55:cc:95:d6:7f:1d:69:3a:86:a2:e6:
56:a6:ea:54:54:61:be:7e:96:d4:3e:ff:ff:6e:3e:e3:a6:c9:
65:f5:3d:cf:c6:77:a5:76:33:37:30:86:21:95:13:a4:07:d5:
37:bc:4b:da:d5:06:4c:bd:bb:fb:ab:ed:cc:6a:a3:a5:42:be:
45:2f:e7:c2:06:6a:b6:44:bc:58:2f:c9:d7:b5:bb:e3:d0:e1:
85:4b:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:04:31 2026 by rpki-client