Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: kBUW4jb5xi/8k11lKs7HXD+CIz9YLWdmQK6N9lgjTa8=
Subject key identifier: 3A:C5:C0:F7:B4:AD:C4:3C:7C:D6:E8:AE:BB:72:EE:ED:69:A9:97:59
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7728BDAEE6B136203BAEEDF91208FC5CBA41E95F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214481.roa
Signing time: Thu 16 Apr 2026 18:37:16 +0000
ROA not before: Thu 16 Apr 2026 18:32:16 +0000
ROA not after: Thu 15 Apr 2027 18:37:16 +0000
asID: 214481
IP address blocks: 82.25.56.0/24 maxlen: 24
82.39.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:28:bd:ae:e6:b1:36:20:3b:ae:ed:f9:12:08:fc:5c:ba:41:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 16 18:32:16 2026 GMT
Not After : Apr 15 18:37:16 2027 GMT
Subject: CN=3AC5C0F7B4ADC43C7CD6E8AEBB72EEED69A99759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:19:58:2d:23:c8:6f:18:8b:58:96:b3:cf:
dc:e9:70:a1:4e:2b:1e:0c:5b:61:03:8e:82:9b:8a:
81:3b:ef:bd:30:04:f5:74:fa:15:b5:a9:f5:f2:44:
00:ea:04:a4:77:24:18:fc:5f:15:a9:2d:9e:47:49:
18:fa:12:ca:5d:5e:1a:a9:8a:64:fa:3b:af:dc:b3:
7e:a2:d7:ff:6c:86:2d:41:42:ec:c6:e5:cb:3e:8c:
c4:4b:85:a5:25:8b:36:94:28:57:eb:87:9e:33:98:
af:aa:87:ad:db:29:27:4e:e9:1c:b7:e8:8c:87:c0:
bb:c1:91:42:8c:99:ef:e4:42:99:ef:c6:94:0c:ca:
49:a0:00:54:c2:e2:d2:33:0d:23:be:fb:2a:b8:40:
ca:08:0b:66:ad:91:38:b5:e5:04:21:23:9c:74:bd:
7b:af:f1:d5:4b:bb:7d:82:de:e6:fe:b7:23:2c:ea:
24:66:09:52:36:d3:be:82:30:94:55:46:1e:15:0b:
8a:58:bb:31:87:fb:02:e9:2e:cd:ae:db:0f:19:ee:
3d:6d:41:a9:cd:a7:15:49:f4:29:0b:1d:fe:48:ce:
73:c1:d6:2b:ee:8c:96:be:9d:54:b9:dd:bc:33:b5:
1b:07:06:4c:3a:29:21:b1:90:f8:e2:41:6c:06:4d:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:C0:F7:B4:AD:C4:3C:7C:D6:E8:AE:BB:72:EE:ED:69:A9:97:59
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.56.0/24
82.39.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:13:8b:32:ee:3c:0e:06:4b:9d:80:0b:af:41:19:53:bd:0d:
9a:41:89:04:7f:24:33:bb:3c:ce:d0:3b:f8:21:54:d8:76:0d:
6c:1c:8b:cc:85:6c:3d:84:82:cb:91:81:87:f8:8e:f4:02:30:
0d:40:80:75:f2:20:b7:6c:a4:5f:fa:aa:a2:0f:96:36:a3:15:
7b:81:2a:16:e7:53:59:de:35:b0:b2:55:c7:e6:2a:77:5f:db:
4b:ca:ce:63:28:29:8e:bd:77:48:5b:ce:0e:0d:4a:a5:db:b2:
0e:76:fc:34:46:3f:ea:e1:28:84:66:6e:f9:af:8c:d3:69:e4:
09:df:bf:00:d2:8c:0c:3f:3d:18:79:39:a1:55:3e:26:55:f0:
ae:fb:0a:2d:43:ce:b1:10:da:20:cf:45:3f:c4:85:c9:f0:c8:
08:3c:c3:77:f4:64:08:3f:85:2b:54:14:5c:de:3e:0d:c4:a8:
ed:0a:f8:20:26:d0:13:71:20:b1:4f:a9:40:24:98:25:d2:a0:
5c:0a:f6:c2:e0:2b:87:8e:ec:fa:98:79:cb:ef:44:5f:8f:f6:
ca:16:e7:c9:b6:cd:a0:67:65:87:c7:38:5c:8f:17:14:6a:67:
93:ed:77:e4:1f:1a:47:ae:47:d1:a2:c5:4e:38:ac:f2:bf:12:
ec:86:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:38:36 2026 by rpki-client