Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: XQzZlb0R/iW+1Pv7F2hu3mHuZXc7BPITMsMZcnQIi3w=
Subject key identifier: D3:C6:5A:60:AD:52:28:03:32:81:25:DC:48:F5:07:C1:32:1A:BD:C8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6EA7FB545C7B2BC3D9F21386957AE65C1128A88F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
Signing time: Tue 16 Jun 2026 14:46:10 +0000
ROA not before: Tue 16 Jun 2026 14:41:10 +0000
ROA not after: Tue 15 Jun 2027 14:46:10 +0000
asID: 214483
IP address blocks: 84.75.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a7:fb:54:5c:7b:2b:c3:d9:f2:13:86:95:7a:e6:5c:11:28:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 16 14:41:10 2026 GMT
Not After : Jun 15 14:46:10 2027 GMT
Subject: CN=D3C65A60AD522803328125DC48F507C1321ABDC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:0d:a7:f1:37:7f:96:0d:01:c9:81:72:f9:
0e:3e:40:b7:2d:f2:63:26:86:89:e5:c6:d5:6a:cd:
76:09:f7:b1:c0:d7:ef:c7:98:e1:6a:e4:08:58:34:
28:f5:79:13:b3:16:f6:79:55:1e:7a:99:22:19:12:
f1:bb:50:b0:ee:92:5d:19:7e:67:41:77:03:20:b7:
d3:f5:0f:df:9c:62:4c:b6:77:78:c4:a5:34:f8:50:
35:d0:8a:96:d8:f5:69:2a:15:be:96:25:c9:fb:3d:
63:85:81:e7:5c:d0:f5:86:00:38:b0:21:a0:16:56:
1b:26:4d:11:aa:f5:6b:f1:8a:aa:1f:3b:41:f1:91:
8c:6a:f1:b1:ba:b3:b4:bb:4b:24:0e:23:f7:ae:6c:
e9:fd:c4:84:c1:80:8b:38:fc:2d:f7:6b:ba:d3:cc:
2b:16:e9:17:72:71:6e:0e:69:56:d4:07:88:e0:fd:
8a:cc:fa:40:9a:db:b3:67:30:e4:98:9c:dc:7c:eb:
d0:07:95:a3:d3:32:e9:f3:8e:52:23:79:f0:a1:d3:
df:b8:19:c8:bd:06:72:d8:f0:cf:5c:8b:32:61:da:
50:61:79:c5:f3:d1:19:04:50:ed:d6:0b:d8:82:6d:
c2:02:5b:42:a7:97:b6:83:60:8d:36:a8:73:2a:20:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:5A:60:AD:52:28:03:32:81:25:DC:48:F5:07:C1:32:1A:BD:C8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:74:85:72:cd:35:e6:53:74:4b:28:26:4c:59:b0:ba:74:a8:
64:ff:d2:07:3f:e9:95:31:bb:69:04:f6:07:a3:78:88:14:51:
b5:83:6a:37:41:b2:43:5b:02:c3:1e:08:2c:5d:75:eb:ee:92:
42:37:f9:a1:f0:d0:05:67:75:67:b1:b8:21:d4:bc:28:d2:17:
3e:a2:4c:16:0e:fa:05:c5:f0:79:16:1b:b6:11:34:bb:7c:f6:
3f:c9:7e:6b:2e:1e:ac:0e:ba:39:b3:f1:99:d2:1c:61:0e:c7:
54:e0:44:7c:1f:7f:a4:66:e1:5d:da:1b:c3:27:e0:b1:b7:dd:
2e:ba:f7:05:92:e1:91:ad:31:5b:f1:eb:f8:51:8e:bd:15:a7:
82:5f:b6:81:4d:30:44:1f:27:de:9c:ca:c3:ac:c0:6f:33:6f:
f4:0f:5e:eb:09:46:34:3d:f2:32:f5:f4:30:5a:16:88:5c:b6:
17:e8:9e:8f:5f:b4:04:a6:fb:84:bd:93:fb:bf:9e:94:24:76:
10:c1:d4:62:97:ff:f2:1d:08:81:18:a4:ba:cb:86:e8:fd:fe:
fd:9b:ff:3a:e0:bd:dc:c9:54:9e:d1:5b:d7:37:9e:70:bf:18:
3a:61:db:19:7d:d5:47:87:f8:18:47:76:8a:54:c3:5e:b8:82:
2d:ca:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:57 2026 by rpki-client