Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: cs70FH88hqJMqDFy0l+2ImN4blb5Dq0+yKWOQw94Y/o=
Subject key identifier: 5D:5D:4C:78:89:A9:ED:23:C1:F3:9C:E0:E1:8B:E6:20:7A:14:92:C0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 50B24ACBF71519FECEB4887F4A4F8A15C207CFB6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
Signing time: Mon 31 Aug 2026 05:54:02 +0000
ROA not before: Mon 31 Aug 2026 05:49:02 +0000
ROA not after: Mon 30 Aug 2027 05:54:02 +0000
asID: 214483
IP address blocks: 143.14.81.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.166.0/24 maxlen: 24
167.148.40.0/24 maxlen: 24
168.222.74.0/24 maxlen: 24
168.222.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b2:4a:cb:f7:15:19:fe:ce:b4:88:7f:4a:4f:8a:15:c2:07:cf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 31 05:49:02 2026 GMT
Not After : Aug 30 05:54:02 2027 GMT
Subject: CN=5D5D4C7889A9ED23C1F39CE0E18BE6207A1492C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:55:80:68:55:63:8d:ff:17:1d:53:7b:4d:
9e:cb:54:27:59:96:b4:f3:b6:bf:1d:34:d5:7d:e0:
93:ea:76:b7:25:fe:82:fc:b0:15:3e:cd:c9:7e:a1:
3a:3b:8f:6d:52:79:f2:d7:6e:b0:82:b6:74:ba:ab:
e4:cf:a6:65:73:ac:b6:bb:4b:dd:90:18:81:d4:4c:
80:11:61:4f:32:cb:bf:e3:22:e7:35:8e:71:ed:f6:
02:39:a9:4e:f5:10:c4:1e:50:7d:28:17:3f:04:78:
c9:fa:8e:88:7f:e3:20:ee:dc:5f:eb:de:d0:20:6e:
ad:e2:18:b1:51:58:90:85:97:18:85:d4:02:59:67:
99:9c:6e:65:c9:b9:cd:5a:21:36:86:e4:4a:9f:1d:
31:a9:c8:2c:e3:20:ff:a8:88:de:33:c4:17:3e:16:
85:19:3d:1b:e3:76:36:89:d8:ba:52:ad:40:6d:fb:
53:c7:05:22:bb:e0:03:70:6e:8d:ed:c4:f4:b6:b3:
a4:68:15:b8:ee:4b:42:11:81:7b:ca:05:8f:eb:87:
c9:90:4e:10:7f:32:3e:c2:54:7c:e2:ec:79:4e:df:
90:bc:76:36:72:47:07:e5:b9:13:6b:96:eb:87:a0:
0b:11:7f:04:b6:46:12:27:35:a8:5b:69:aa:38:bd:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:4C:78:89:A9:ED:23:C1:F3:9C:E0:E1:8B:E6:20:7A:14:92:C0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.81.0/24
143.14.140.0/24
155.117.79.0/24
155.117.139.0/24
155.117.166.0/24
167.148.40.0/24
168.222.74.0/24
168.222.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:03:32:c1:d9:29:1b:f2:27:c2:05:fc:dc:4e:43:88:33:24:
b9:36:89:20:26:9e:b1:f5:70:25:82:49:e5:5c:32:76:fd:08:
61:c3:06:df:83:02:15:15:b4:ae:8f:85:b2:60:00:b8:47:61:
eb:30:e7:36:22:d5:da:59:2c:6e:87:a5:b6:2d:ac:32:88:bb:
50:fd:e1:4b:98:63:a9:af:ed:b9:3e:c1:e7:5c:6b:d5:f7:37:
97:90:19:05:53:f6:c8:43:b8:27:50:f9:e0:8d:05:ce:4d:bc:
72:b1:ef:bf:95:b3:ad:42:2e:b8:0b:f3:75:fc:15:26:c7:ee:
f6:95:e4:e8:2b:16:10:ab:f3:a8:5e:b4:88:20:2b:be:0b:8c:
1f:76:91:e5:fa:0c:7b:c8:f5:5a:cb:48:97:a5:91:7a:7f:33:
4e:96:d2:f6:7e:16:6b:c7:b4:56:98:c7:3c:97:b7:cb:04:a6:
ba:94:8e:d0:18:5e:99:41:ae:36:e2:63:bb:77:f7:7c:ba:c8:
d3:e7:fd:6f:71:e0:7c:1f:c7:2c:4c:a6:a7:5f:34:a1:a5:12:
c9:27:65:a3:e8:1f:f0:1c:49:de:d8:1e:8b:9c:c8:38:70:fa:
4d:b3:c4:80:43:3f:d2:2c:28:e0:66:28:1d:1f:36:c0:46:9f:
8a:c9:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:31 2026 by rpki-client