Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: 549KWAruPIwRewMoeCJz2Q7AKkWNgR7Odnymn+SK9QM=
Subject key identifier: 47:62:B5:FC:7F:F9:E1:70:BC:CB:BA:C0:E9:46:F6:76:01:A1:FF:C2
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4FCA8AD35C125AA7838ABA0518BA44073E78BF33
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
Signing time: Thu 15 Oct 2026 23:55:29 +0000
ROA not before: Thu 15 Oct 2026 23:50:29 +0000
ROA not after: Thu 14 Oct 2027 23:55:29 +0000
asID: 214483
IP address blocks: 46.236.204.0/23 maxlen: 24
46.236.206.0/24 maxlen: 24
82.139.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ca:8a:d3:5c:12:5a:a7:83:8a:ba:05:18:ba:44:07:3e:78:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 15 23:50:29 2026 GMT
Not After : Oct 14 23:55:29 2027 GMT
Subject: CN=4762B5FC7FF9E170BCCBBAC0E946F67601A1FFC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:ee:5b:48:77:cf:3c:a8:0a:2c:ea:d8:26:
83:a6:80:bb:32:9f:6b:fd:97:f4:c7:1d:b4:57:4c:
ed:df:f2:24:ac:54:52:83:9e:69:6c:3a:cd:fd:b7:
c1:c9:41:a2:fd:af:fc:ac:3c:64:21:7a:98:78:61:
da:4a:62:c5:a5:8e:64:12:ec:bd:53:44:89:b2:be:
ce:de:96:8b:84:06:9c:da:85:26:2f:7f:f8:f6:4c:
42:2b:95:6c:7c:c7:a7:38:de:e8:11:c7:93:b6:4f:
03:fa:52:be:b5:f3:88:a3:3c:c8:9e:d0:c1:45:87:
56:ca:45:a1:85:b1:d0:f6:41:f9:9f:91:da:53:1a:
2d:73:6f:f2:1c:49:88:a3:25:33:c6:a1:20:85:d3:
8b:8f:e0:c3:4a:3e:64:27:ce:05:ee:15:e5:cf:b4:
29:88:72:4a:5d:d8:62:75:8a:d6:ba:c2:7b:fd:93:
67:f8:6b:f2:32:de:66:a8:7e:f8:b9:dd:64:d6:3a:
d4:fc:21:aa:63:fa:c1:0a:e6:3f:63:85:3d:3a:71:
c8:19:39:a6:4f:59:6b:28:56:dd:84:7d:9e:e4:7e:
14:1b:92:2e:22:aa:00:df:35:77:47:f9:e7:e6:ba:
48:fd:6e:41:cb:f9:7a:58:fa:71:4f:17:1c:f5:ac:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:62:B5:FC:7F:F9:E1:70:BC:CB:BA:C0:E9:46:F6:76:01:A1:FF:C2
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.204.0-46.236.206.255
82.139.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cc:14:20:8e:11:ea:53:e9:fc:e8:c8:d7:fe:c8:9f:40:dd:
e6:42:c8:ca:83:24:3d:05:b9:2b:cf:b9:b6:ee:b9:9b:20:32:
e0:5c:3c:fb:c5:b3:0e:04:9e:65:41:13:fc:f4:86:2b:3b:06:
9f:a4:be:b8:ca:47:5a:53:93:45:6e:63:4e:21:f0:a0:8f:5b:
56:54:81:3e:2e:1e:33:1c:1b:e9:cc:ea:ad:76:ca:0d:11:46:
e6:c8:16:98:3c:a2:51:e4:28:96:77:1c:e1:ba:7b:58:9a:c8:
be:71:04:cf:09:a9:21:c5:a6:b1:5f:26:98:46:9c:f8:74:31:
e5:ab:23:6a:fe:f6:b3:88:93:21:98:54:b2:7f:85:09:46:eb:
29:8b:c6:e0:ea:1d:54:7d:02:07:25:ce:49:31:b1:d0:4a:46:
18:cc:e7:b1:3e:7e:44:7e:df:27:8b:d9:d6:b1:8c:a3:f8:54:
76:aa:b3:c4:58:cf:7d:8f:5d:ea:40:02:5f:4b:ec:1a:28:90:
f8:53:e8:08:9e:9d:cc:06:2c:74:43:b6:17:d1:e5:b3:7a:86:
44:b3:37:18:3a:8f:a3:4c:97:fd:4d:55:b2:53:c1:29:8f:78:
9a:ef:9f:d2:d9:e6:7a:40:fa:04:cd:21:d4:f8:d7:72:91:be:
e3:57:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:36:25 2026 by rpki-client