Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: /XTGPcu7ODyupoYJLKsK9ZNQGugLkLLTIo5gMshiLJ8=
Subject key identifier: 9E:82:23:0F:D9:71:7A:07:DD:47:DE:2B:3B:69:DF:7E:03:8B:FC:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3894B43CDFC004C6BADB2D7DF04B0611A59FE1C5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
Signing time: Sat 29 Aug 2026 05:28:38 +0000
ROA not before: Sat 29 Aug 2026 05:23:38 +0000
ROA not after: Sat 28 Aug 2027 05:28:38 +0000
asID: 214483
IP address blocks: 82.21.112.0/24 maxlen: 24
82.22.119.0/24 maxlen: 24
82.23.191.0/24 maxlen: 24
82.24.70.0/24 maxlen: 24
82.26.78.0/24 maxlen: 24
82.26.79.0/24 maxlen: 24
82.29.64.0/24 maxlen: 24
82.47.141.0/24 maxlen: 24
82.47.143.0/24 maxlen: 24
82.47.194.0/24 maxlen: 24
84.75.1.0/24 maxlen: 24
84.75.179.0/24 maxlen: 24
84.75.222.0/24 maxlen: 24
178.83.106.0/24 maxlen: 24
178.83.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:94:b4:3c:df:c0:04:c6:ba:db:2d:7d:f0:4b:06:11:a5:9f:e1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 29 05:23:38 2026 GMT
Not After : Aug 28 05:28:38 2027 GMT
Subject: CN=9E82230FD9717A07DD47DE2B3B69DF7E038BFC8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:33:95:26:e9:ef:6a:bb:f7:98:da:6f:eb:
e5:aa:93:93:7b:c0:1c:2e:83:e1:7f:28:38:4f:14:
3a:5c:a2:01:c6:4b:c3:4e:18:b4:8b:ad:d2:5c:df:
e5:b8:1f:fd:57:d9:d2:b7:e0:99:ec:cd:1b:57:66:
fc:6c:29:f5:63:d5:af:35:07:0b:57:e4:dd:6b:c6:
51:33:e5:25:9f:c6:f7:54:32:ca:ab:2c:c3:fb:db:
5e:3b:97:fd:36:90:11:8a:f3:4d:1c:31:5b:46:85:
86:96:e2:e7:77:5e:a1:5a:c7:54:af:62:14:00:e8:
90:d5:b9:01:5a:69:30:c0:18:00:7c:e5:d8:1f:1f:
7b:77:5d:c0:28:05:a1:e9:9f:a9:86:5e:41:6e:5a:
43:3f:29:99:10:a4:03:bc:ad:d2:29:45:fd:45:ed:
b7:c3:63:e7:04:c8:9d:e3:93:f4:aa:3d:cd:f8:e2:
97:73:0a:c0:f2:f7:e8:8a:ea:0e:9e:3c:9c:a8:bd:
9f:df:19:64:30:11:0d:5d:84:6e:73:57:33:a4:de:
48:50:a5:65:17:19:15:1d:38:bb:07:5f:55:8a:2c:
1c:fe:b1:d7:ef:e2:06:ff:0f:34:9d:e2:33:d8:36:
fb:0a:8e:f0:fd:ec:ab:52:24:49:6f:7e:f5:dd:10:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:23:0F:D9:71:7A:07:DD:47:DE:2B:3B:69:DF:7E:03:8B:FC:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.112.0/24
82.22.119.0/24
82.23.191.0/24
82.24.70.0/24
82.26.78.0/23
82.29.64.0/24
82.47.141.0/24
82.47.143.0/24
82.47.194.0/24
84.75.1.0/24
84.75.179.0/24
84.75.222.0/24
178.83.106.0/24
178.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:b2:d8:33:67:23:68:b9:79:6d:5a:1f:fe:85:18:41:50:
e8:7f:8e:eb:aa:70:6e:64:b9:06:ad:0a:6d:c2:91:d1:22:63:
15:bd:be:8f:41:c7:37:57:e2:2e:97:8d:02:bb:55:88:b5:c6:
18:d1:4e:02:cc:8f:f4:67:2c:47:18:75:2a:ed:92:16:93:1e:
9d:ce:ff:aa:bb:c4:74:90:f8:75:fd:b5:e5:42:37:4c:c3:2d:
37:cf:33:ea:32:ac:99:be:3d:65:a3:fc:3a:d6:1b:45:fc:d6:
18:06:19:fb:9c:c7:d6:c7:a8:b3:2b:b5:68:fb:ca:ab:c0:ce:
8e:8f:42:c6:67:c7:fd:09:d2:d7:18:57:c1:84:18:d0:77:57:
f5:41:da:57:1f:79:14:f1:ec:7f:c6:4a:f9:d2:ea:bf:a2:cf:
25:4a:b5:00:5d:23:58:10:5a:f6:06:47:98:2e:90:8c:a2:9a:
60:44:8b:2b:42:f3:15:41:e0:83:b8:5c:2c:66:b0:1e:93:02:
ae:0a:3d:dc:98:d6:37:2f:70:13:48:6e:35:3b:3f:cf:13:df:
c8:19:81:e7:4a:06:d5:f0:02:29:24:05:66:19:6b:dd:af:08:
e2:9b:c8:e3:6c:3a:25:f3:39:a2:60:ca:fe:2b:26:1c:ab:b7:
c5:a3:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:29:55 2026 by rpki-client