Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: m2fW29LkfNMCvwSXUbBalWsbGyAlqk0zLQLw5JSIBIQ=
Subject key identifier: 3E:24:5C:2B:EB:7F:7E:F5:59:E5:21:75:B8:31:DE:E0:3C:6B:29:82
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 56BD9A9A86B84AFA3006F84E095F10D5EE5DB3DA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
Signing time: Thu 15 Oct 2026 06:49:59 +0000
ROA not before: Thu 15 Oct 2026 06:44:59 +0000
ROA not after: Thu 14 Oct 2027 06:49:59 +0000
asID: 214483
IP address blocks: 89.19.50.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
191.96.231.0/24 maxlen: 24
191.101.22.0/24 maxlen: 24
191.101.123.0/24 maxlen: 24
191.101.186.0/24 maxlen: 24
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bd:9a:9a:86:b8:4a:fa:30:06:f8:4e:09:5f:10:d5:ee:5d:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 06:44:59 2026 GMT
Not After : Oct 14 06:49:59 2027 GMT
Subject: CN=3E245C2BEB7F7EF559E52175B831DEE03C6B2982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:a1:1a:ec:ee:bb:a4:04:3e:f1:a1:8c:76:
0d:af:88:7e:31:87:12:f2:35:92:a0:a1:8b:1f:79:
fe:2e:47:3d:8a:a4:0f:77:34:e0:19:d3:49:65:31:
8a:eb:73:8d:34:ea:9f:7b:da:89:0b:dd:e3:a0:4d:
13:ad:61:7e:ba:29:77:04:81:f9:ab:87:d8:95:44:
1d:e3:cf:71:48:16:5f:1c:8b:8e:fe:83:85:96:12:
df:8b:ea:fc:94:be:d2:0f:4c:bd:0a:da:41:4f:e5:
a4:43:7f:8a:a2:c7:65:d6:7f:bd:fb:68:0c:57:97:
e9:06:a6:28:31:7b:53:74:13:b8:ef:dc:99:0e:5f:
50:db:ad:75:10:1a:1d:e8:fb:66:62:27:33:e6:08:
e6:10:14:fc:a1:5c:14:6f:c3:be:d8:1a:90:ed:24:
e6:da:77:ae:37:18:8b:4e:90:0f:3a:1f:01:03:0a:
8d:5d:a2:70:4d:dc:ee:3b:e4:37:5e:91:f9:e1:0e:
b1:f9:e8:e6:fb:0d:51:75:f9:3e:38:d8:1a:73:ed:
79:3f:dc:9b:b9:7e:37:13:79:34:2b:b2:01:f8:b5:
73:c6:ef:82:0d:71:e1:99:03:22:48:1c:28:e0:ab:
df:12:b7:59:e9:7d:9d:35:62:d0:0f:72:61:5a:b1:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:5C:2B:EB:7F:7E:F5:59:E5:21:75:B8:31:DE:E0:3C:6B:29:82
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.50.0/24
181.214.2.0/24
181.214.33.0/24
181.214.132.0/24
181.214.205.0/24
191.96.231.0/24
191.101.22.0/24
191.101.123.0/24
191.101.186.0/24
IPv6:
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
6c:95:19:16:4f:87:e3:25:bb:7d:f2:6d:98:f0:f3:df:99:85:
52:f4:4d:e1:97:18:1b:5b:ec:b7:2b:01:e8:82:c4:00:6f:7b:
ff:ad:fe:d5:fc:ee:42:c6:46:1c:f0:66:84:48:07:84:e9:49:
43:aa:ac:68:dc:85:68:23:48:40:f2:ff:2f:44:a7:06:15:4a:
b3:cf:d9:e2:82:59:84:6c:67:6e:fb:0d:cc:6d:86:20:48:6e:
f4:25:3d:8f:f5:0d:a9:b1:d6:b2:69:0d:45:2c:b4:d6:9b:a6:
39:59:25:aa:b6:f5:72:5d:91:7d:d6:01:ad:45:1c:e5:f9:09:
67:e6:d7:4e:c4:b5:5e:7e:a2:ef:c8:72:86:cf:7b:05:dd:f7:
79:c0:6e:16:cf:44:79:93:0d:40:8c:b8:04:1a:78:fb:9d:bf:
74:de:bb:48:cd:4a:3c:fc:ff:d5:41:ba:27:3c:e0:e3:3e:b1:
a8:5a:21:48:76:b3:f2:75:bd:be:9e:26:61:bf:5d:04:e5:25:
62:9c:21:de:f9:64:df:f8:04:57:13:b4:3d:66:0a:7d:eb:79:
52:97:d9:ce:d0:28:43:fd:fa:30:f5:e3:92:2c:21:81:90:fc:
47:92:3d:0c:7b:27:50:a5:06:28:c3:4a:79:4a:e2:70:15:16:
c5:2c:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:52:55 2026 by rpki-client