Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214466.roa
File: AS214466.roa (raw, json)
Hash identifier: amR8vKyYYP203SzHygS1zjgTbqGl0rqPawWSW+oCRn4=
Subject key identifier: 0C:CB:5B:41:11:EC:71:15:57:C0:AD:10:27:A7:9B:C6:1D:B0:DC:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2BE2B1AB6CA3D7D678359D4D62BAAB465693EF58
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214466.roa
Signing time: Sun 17 May 2026 13:09:56 +0000
ROA not before: Sun 17 May 2026 13:04:56 +0000
ROA not after: Sun 16 May 2027 13:09:56 +0000
asID: 214466
IP address blocks: 178.83.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e2:b1:ab:6c:a3:d7:d6:78:35:9d:4d:62:ba:ab:46:56:93:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 17 13:04:56 2026 GMT
Not After : May 16 13:09:56 2027 GMT
Subject: CN=0CCB5B4111EC711557C0AD1027A79BC61DB0DCCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:7d:c1:5d:8c:b0:a9:d3:86:f3:75:ca:bf:
59:78:42:09:95:ea:ef:ec:c0:22:81:7f:7f:7c:4f:
a9:36:a1:14:c0:83:ed:35:3e:ab:82:15:1b:4b:02:
0f:52:be:e7:f1:74:d0:a3:dd:90:b3:de:6a:ff:d4:
fd:82:fc:93:ad:0e:b1:dc:87:99:4a:8d:03:08:eb:
1e:fa:ff:3b:62:3d:99:2a:9f:54:a2:5a:05:d8:c9:
82:1b:89:e2:1d:44:d7:15:d9:74:f0:c3:be:d9:c1:
c3:df:71:df:70:2a:3d:93:dd:a6:10:70:60:5f:66:
46:b2:08:9d:d3:68:b1:fc:08:51:3c:6c:bb:bd:4b:
59:ab:63:97:47:3c:a0:dc:ac:14:be:0d:e0:3b:c9:
bb:3e:44:9e:95:0f:1b:04:b6:b8:22:5c:fa:22:b3:
8b:fd:a3:60:ca:2d:b0:ec:db:20:69:3a:fc:11:63:
f1:54:b1:ac:73:f0:0b:88:5d:95:92:30:b0:9c:fe:
c1:2f:0e:ef:91:6c:ab:f8:93:73:d1:b7:12:eb:7e:
6e:a6:be:21:d5:f3:ed:34:d4:1e:5f:82:76:4f:03:
5d:66:f9:7f:0e:af:46:fd:0a:0b:ef:7e:d7:c2:59:
62:64:4e:cd:6a:b8:89:e8:c5:7f:8a:a3:dc:77:cc:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:5B:41:11:EC:71:15:57:C0:AD:10:27:A7:9B:C6:1D:B0:DC:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.96.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e0:2a:1c:d2:f7:dd:b1:51:94:f3:8d:84:5c:c8:4a:d1:80:
05:3e:b3:5d:a7:c7:7d:c0:8a:6f:72:be:04:eb:6d:ca:7c:0a:
93:9a:23:10:a3:b8:94:1f:01:2e:b8:24:8b:97:8a:43:b7:c7:
5c:dc:46:4c:47:a1:de:46:5e:a5:fa:c8:17:cd:a2:f8:30:ea:
52:c3:81:2e:fd:eb:81:b2:21:d4:b4:c8:94:2c:ba:97:bd:03:
a1:f8:b4:24:54:29:2d:1e:c2:65:a8:2b:90:84:f9:d3:d8:9c:
4f:db:24:1e:81:e7:2d:e3:71:33:3b:70:26:d4:ca:0e:cd:7d:
56:f7:30:fd:e9:cc:de:8a:2a:d1:58:88:88:94:18:e3:46:f9:
01:d1:4c:61:f8:29:7d:8b:b2:41:5f:d6:b4:17:ae:b0:3d:a1:
69:87:6c:09:ab:03:b7:ee:08:3b:7a:38:8f:aa:25:48:3f:3d:
53:26:20:0e:37:92:b5:1b:2c:8b:6a:19:61:6c:44:36:62:f6:
ce:90:4d:27:6b:9f:e1:3d:fc:3c:0e:19:5c:14:35:22:a5:7d:
e9:fb:c2:80:a7:6a:d8:38:bc:56:6e:10:5f:60:87:e5:53:d3:
24:30:93:5c:e0:68:a9:11:b0:b0:db:e0:4f:9d:18:62:f3:fb:
41:40:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:33 2026 by rpki-client