Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: Y+wOmMNJk/qbO04jyJPyuHU8kUrTJXXRArZaExBxa4o=
Subject key identifier: 3E:FC:50:BE:0B:3F:83:5F:82:AF:2E:E1:2D:24:60:AD:D6:9D:AF:E3
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 22B0BE955EF15896755C6107502D43279DEC3041
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
Signing time: Mon 31 Aug 2026 05:54:10 +0000
ROA not before: Mon 31 Aug 2026 05:49:10 +0000
ROA not after: Mon 30 Aug 2027 05:54:10 +0000
asID: 214483
IP address blocks: 46.236.204.0/23 maxlen: 24
46.236.206.0/24 maxlen: 24
212.17.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b0:be:95:5e:f1:58:96:75:5c:61:07:50:2d:43:27:9d:ec:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 31 05:49:10 2026 GMT
Not After : Aug 30 05:54:10 2027 GMT
Subject: CN=3EFC50BE0B3F835F82AF2EE12D2460ADD69DAFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:01:44:47:eb:b0:54:86:59:29:2b:b8:a2:
29:02:2b:fa:7c:6c:cc:80:84:93:cb:f5:29:28:e9:
ca:06:50:af:d0:0a:05:51:c4:aa:a6:45:f8:66:6d:
9d:48:52:0a:40:f7:c0:c6:a8:bb:22:b8:83:af:f9:
ff:ee:c0:0a:a2:9f:95:b9:b2:83:de:f8:e0:35:2a:
0b:45:7f:01:19:3a:87:83:97:ae:74:3d:e1:59:08:
f2:36:d9:ea:29:cd:c7:4c:6d:5f:55:7d:60:80:2d:
a4:a5:89:31:f1:2e:20:c9:c2:6b:3b:2d:03:90:fe:
da:09:42:82:7d:46:dd:ad:5c:db:48:33:46:4c:68:
f6:da:1a:fe:b1:7b:eb:db:f8:63:e1:69:6b:e5:34:
31:e9:fc:e1:a5:da:37:0c:a0:26:c9:a6:c1:42:c4:
7b:ad:cb:bc:59:27:82:32:fe:6c:55:54:cd:8e:60:
97:7f:72:7d:1c:37:d7:0a:ab:85:4f:81:6d:7c:e3:
5f:64:f8:cf:64:18:3e:6a:19:40:36:7d:1a:10:99:
a0:ed:63:51:1c:f3:83:54:c3:ac:20:7f:18:64:87:
a7:12:b4:55:91:d5:57:2e:65:d7:19:99:9e:31:95:
0d:4f:8b:0c:00:60:1a:58:83:8a:0f:fb:2e:e2:0f:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FC:50:BE:0B:3F:83:5F:82:AF:2E:E1:2D:24:60:AD:D6:9D:AF:E3
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.204.0-46.236.206.255
212.17.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:56:4b:95:28:3f:c1:89:16:72:8f:d8:03:86:77:e7:fa:f6:
2d:5a:33:3e:ce:ba:b4:28:3a:7a:d1:02:93:8b:46:4e:15:c5:
82:41:b4:e1:03:e8:25:d0:bc:e6:fc:7a:f9:1d:54:74:cd:a4:
60:66:54:c3:35:39:b2:45:9c:bb:3d:66:84:c6:d1:6f:81:5c:
e6:fc:22:03:05:a8:21:02:b2:b7:2f:ed:41:41:b0:a9:1a:ab:
ea:2b:bd:a9:ab:df:f4:3e:b1:40:80:e2:97:35:26:ab:34:69:
c4:a5:85:a0:bb:9b:b0:6a:db:38:2a:fa:66:19:c7:4f:6b:9a:
5b:d6:76:e7:dd:c4:5a:e0:cb:f1:65:25:86:11:b0:91:ef:fa:
82:ea:fc:ed:e5:32:6c:02:f6:42:e5:81:4e:35:ef:b7:26:14:
d6:6b:19:53:4f:fb:fe:ef:fc:64:53:6e:29:2d:9a:07:7c:97:
8a:92:9d:63:68:5f:4b:42:cd:d7:72:d6:75:e6:13:9b:2d:09:
f6:93:64:d1:dd:d0:03:9a:cb:67:95:ec:7d:aa:9c:d5:05:84:
8c:d2:a5:8f:ff:51:79:ab:14:36:ab:1c:dc:a3:1e:26:78:e4:
ea:46:b2:a1:84:6e:31:63:5e:b6:b8:68:97:cf:70:9d:45:07:
2f:af:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:19 2026 by rpki-client