Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: KQPpJqh3/nymUWoSsdrKF0hDXmad6n/Eh6ZjCk4J1XI=
Subject key identifier: BC:36:70:50:7D:C5:80:11:03:B3:86:F9:F0:1E:6C:69:7F:57:E3:21
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3C767B1F020BC3AED1D8EF451B3267151873DF40
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
Signing time: Thu 06 Aug 2026 00:02:07 +0000
ROA not before: Wed 05 Aug 2026 23:57:07 +0000
ROA not after: Thu 05 Aug 2027 00:02:07 +0000
asID: 214432
IP address blocks: 82.21.125.0/24 maxlen: 24
82.23.13.0/24 maxlen: 24
82.25.37.0/24 maxlen: 24
82.26.202.0/24 maxlen: 24
82.39.187.0/24 maxlen: 24
82.39.211.0/24 maxlen: 24
82.41.57.0/24 maxlen: 24
82.41.74.0/24 maxlen: 24
82.41.97.0/24 maxlen: 24
82.47.11.0/24 maxlen: 24
82.47.12.0/24 maxlen: 24
178.83.16.0/24 maxlen: 24
178.83.102.0/24 maxlen: 24
178.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:76:7b:1f:02:0b:c3:ae:d1:d8:ef:45:1b:32:67:15:18:73:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 5 23:57:07 2026 GMT
Not After : Aug 5 00:02:07 2027 GMT
Subject: CN=BC3670507DC5801103B386F9F01E6C697F57E321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:fd:8f:ed:4c:ed:bb:c4:5f:39:e6:51:f5:
53:e8:7e:53:65:ea:7c:ac:73:5c:06:77:77:a7:b6:
6c:58:25:a0:49:da:db:04:0f:ed:bb:f0:74:9a:12:
23:94:04:00:ff:29:0f:98:6f:a1:da:b8:72:2c:b1:
d8:df:d9:d8:22:93:fb:61:b7:ff:3a:33:38:88:98:
ea:2d:f5:1f:7e:8f:69:2f:65:aa:c6:0e:82:e6:b2:
67:91:fc:d5:84:8e:f5:e3:87:27:8f:33:cb:b4:83:
83:28:16:cb:89:bb:2e:e0:bd:84:75:95:b9:05:27:
34:2b:fd:05:d6:08:96:22:71:6a:58:a5:aa:6f:4b:
90:74:d5:74:b6:18:d0:44:d9:59:12:ec:81:9c:fa:
39:6d:d7:5b:fc:34:df:df:82:79:b1:98:02:e6:5e:
4b:ed:17:b3:42:61:fb:7b:de:92:ea:1c:47:1f:e5:
1e:62:37:f4:25:35:51:c1:88:a9:4d:b3:fd:ec:ce:
35:69:f7:e6:7b:82:a8:be:eb:8e:3b:fc:35:ac:45:
6e:1f:99:19:54:13:64:10:c8:6e:5d:7c:37:12:b9:
1a:1a:81:75:cb:09:af:7b:b2:ef:a2:e7:0b:c4:68:
50:bf:82:0a:b4:32:ff:1c:db:d4:57:be:7e:56:40:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:70:50:7D:C5:80:11:03:B3:86:F9:F0:1E:6C:69:7F:57:E3:21
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.125.0/24
82.23.13.0/24
82.25.37.0/24
82.26.202.0/24
82.39.187.0/24
82.39.211.0/24
82.41.57.0/24
82.41.74.0/24
82.41.97.0/24
82.47.11.0-82.47.12.255
178.83.16.0/24
178.83.102.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:75:52:11:96:7a:fd:54:f2:23:18:6c:2f:92:86:5b:10:1b:
a4:65:84:96:f9:b8:14:91:6f:ba:88:24:f9:b6:9e:f3:ea:2f:
bc:3a:3d:14:2d:c7:9a:33:f6:08:14:dc:62:ae:c7:54:92:90:
8c:18:8e:5a:75:9c:a2:c4:40:99:ab:94:54:2d:d2:d3:9c:16:
7f:11:48:1a:69:34:c9:c8:2c:a8:8a:24:ae:53:3f:8f:c5:d5:
1d:3f:7d:2a:e7:75:e3:fc:7f:6f:29:7b:e0:8d:4c:37:49:e9:
7d:e2:d5:81:17:83:71:4d:d6:58:65:b1:7b:a3:84:30:a2:59:
02:44:61:4f:c7:e7:ba:6b:54:01:00:1a:f7:1a:6c:49:39:96:
f8:42:ca:39:f0:bf:19:de:7e:b4:b8:65:27:9f:bc:02:55:62:
94:8c:27:3f:d3:75:43:91:fc:a3:1a:c6:93:10:18:04:cd:21:
96:80:a1:f1:8a:01:5d:96:78:f1:b1:55:31:a6:96:a0:b7:a9:
1b:c8:c5:c2:2f:a7:74:07:96:c5:25:e8:84:dc:0d:0e:b8:5e:
89:19:72:e0:6a:fb:76:29:9b:7b:e3:25:09:d7:98:db:5e:0c:
ee:4a:05:08:50:aa:3c:61:fd:b6:b7:16:aa:00:74:fc:51:39:
f4:32:ee:cc
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUPHZ7HwILw67R2O9FGzJnFRhz30AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDUyMzU3MDdaFw0yNzA4MDUwMDAyMDdaMDMxMTAvBgNV
BAMTKEJDMzY3MDUwN0RDNTgwMTEwM0IzODZGOUYwMUU2QzY5N0Y1N0UzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCE/2P7Uztu8RfOeZR9VPoflNl
6nysc1wGd3entmxYJaBJ2tsED+278HSaEiOUBAD/KQ+Yb6HauHIssdjf2dgik/th
t/86MziImOot9R9+j2kvZarGDoLmsmeR/NWEjvXjhyePM8u0g4MoFsuJuy7gvYR1
lbkFJzQr/QXWCJYicWpYpapvS5B01XS2GNBE2VkS7IGc+jlt11v8NN/fgnmxmALm
XkvtF7NCYft73pLqHEcf5R5iN/QlNVHBiKlNs/3szjVp9+Z7gqi+6447/DWsRW4f
mRlUE2QQyG5dfDcSuRoagXXLCa97su+i5wvEaFC/ggq0Mv8c29RXvn5WQAPBAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUvDZwUH3FgBEDs4b58B5saX9X4yEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAUhV9
AwQAUhcNAwQAUhklAwQAUhrKAwQAUie7AwQAUifTAwQAUik5AwQAUilKAwQAUilh
MAwDBABSLwsDBABSLwwDBACyUxADBAGyU2YwDQYJKoZIhvcNAQELBQADggEBAHp1
UhGWev1U8iMYbC+ShlsQG6RlhJb5uBSRb7qIJPm2nvPqL7w6PRQtx5oz9ggU3GKu
x1SSkIwYjlp1nKLEQJmrlFQt0tOcFn8RSBppNMnILKiKJK5TP4/F1R0/fSrndeP8
f28pe+CNTDdJ6X3i1YEXg3FN1lhlsXujhDCiWQJEYU/H57prVAEAGvcabEk5lvhC
yjnwvxnefrS4ZSefvAJVYpSMJz/TdUOR/KMaxpMQGATNIZaAofGKAV2WePGxVTGm
lqC3qRvIxcIvp3QHlsUl6ITcDQ64XokZcuBq+3Ypm3vjJQnXmNteDO5KBQhQqjxh
/ba3FqoAdPxROfQy7sw=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:29:57 2026 by rpki-client