Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: Tr9xbarciZhmnAhz/IjxzP1g1GIx2v2ICIkNU6cq5Xk=
Subject key identifier: 1A:E1:47:39:5D:34:F6:72:1F:F4:71:AC:B6:11:86:C9:BA:EE:A4:6C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2165F96383EC6005C1E56A7340AFCBE69FA4D8CE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
Signing time: Fri 11 Sep 2026 00:53:16 +0000
ROA not before: Fri 11 Sep 2026 00:48:16 +0000
ROA not after: Fri 10 Sep 2027 00:53:16 +0000
asID: 214483
IP address blocks: 179.61.152.0/24 maxlen: 24
179.61.207.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.121.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
181.214.220.0/24 maxlen: 24
181.214.229.0/24 maxlen: 24
181.215.198.0/24 maxlen: 24
181.215.238.0/24 maxlen: 24
191.101.175.0/24 maxlen: 24
191.101.189.0/24 maxlen: 24
191.101.200.0/24 maxlen: 24
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:65:f9:63:83:ec:60:05:c1:e5:6a:73:40:af:cb:e6:9f:a4:d8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 11 00:48:16 2026 GMT
Not After : Sep 10 00:53:16 2027 GMT
Subject: CN=1AE147395D34F6721FF471ACB61186C9BAEEA46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:36:ae:6e:2c:12:06:0d:a0:d1:0e:16:c6:
d8:58:42:cd:61:ac:f3:1e:d5:5d:34:ab:88:a6:ba:
5e:e8:18:ee:e6:73:41:95:95:cf:32:52:c0:7b:6d:
c6:35:dc:16:0d:0a:47:75:2a:5c:92:44:cf:b8:cb:
83:1f:e7:3f:84:fd:1a:cf:8b:9d:57:c3:a2:7e:70:
72:b4:c9:96:58:9d:be:f2:ce:93:94:62:df:1e:98:
42:d6:87:e5:04:d3:8c:20:b6:8d:10:56:dc:a6:16:
ca:e1:87:c7:f8:3f:18:66:43:0f:e0:4c:30:e1:1a:
7f:82:45:7b:f3:3e:67:3c:96:14:47:dc:bc:a2:b8:
b3:9f:7a:19:c3:1d:14:8a:8f:0a:bf:1d:5d:4c:fc:
d7:2c:ec:07:de:0d:00:fd:58:93:d7:22:98:13:40:
8d:55:cc:ee:4f:67:ef:31:32:0a:16:e1:b1:d7:9d:
bf:63:e4:30:42:21:54:42:e9:7b:cd:7c:5c:e9:7d:
af:62:2b:7c:15:74:bb:e7:86:00:6b:a4:0d:22:ca:
83:d5:5b:4a:3f:90:3a:c1:61:63:cf:c2:50:f4:d4:
bc:1a:66:94:42:2d:31:46:6e:f9:44:07:10:df:37:
29:91:22:ef:a3:5f:34:8b:fe:55:58:f0:dc:b5:b3:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:47:39:5D:34:F6:72:1F:F4:71:AC:B6:11:86:C9:BA:EE:A4:6C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.152.0/24
179.61.207.0/24
181.214.2.0/24
181.214.33.0/24
181.214.121.0/24
181.214.132.0/24
181.214.205.0/24
181.214.220.0/24
181.214.229.0/24
181.215.198.0/24
181.215.238.0/24
191.101.175.0/24
191.101.189.0/24
191.101.200.0/24
IPv6:
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
51:58:05:7b:f1:90:60:18:5c:87:46:e3:1d:0e:bf:f2:e8:a3:
46:3d:15:6f:eb:e6:9d:57:e7:2a:b4:f0:b9:f5:57:2a:3c:f8:
ce:e4:b5:40:88:95:34:78:0f:c4:8a:a3:ad:c0:5a:0c:7b:af:
18:1f:cc:77:40:1a:09:78:c0:fb:0f:e7:64:5d:20:29:04:a1:
88:dd:6f:84:46:ba:d3:79:39:10:fd:cb:46:44:a0:a2:a3:60:
84:8b:13:0e:89:86:92:18:ed:36:f7:55:c6:2d:df:78:23:4b:
e5:09:a6:d3:a2:1d:d9:f3:91:d6:87:88:8b:72:86:81:ba:a3:
e6:b5:22:e6:21:0d:24:6d:a7:85:dc:d1:3b:4f:b0:bd:f2:fa:
54:c1:02:33:82:52:9d:46:1e:ef:71:28:26:b3:49:e1:a7:ee:
31:33:2a:c7:8d:c9:e1:58:b0:7e:2b:ae:ab:92:2d:89:33:24:
a6:85:37:53:b3:a9:20:bb:d1:8a:75:67:12:e9:5d:b9:09:be:
b6:34:51:31:c2:5b:eb:9f:e3:b9:e3:ec:14:76:c2:20:2c:e4:
ff:b1:d3:df:c4:1e:20:b3:8e:b3:7b:a0:8b:23:44:f9:b2:66:
e2:92:83:bf:32:d6:5e:1e:18:fa:c3:4b:da:9f:bd:31:20:20:
97:16:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:21 2026 by rpki-client