Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214663.roa
File: AS214663.roa (raw, json)
Hash identifier: K6wlG6rYqo2hX6gCA67PGzTaKM2UdsP3svRV63UYtQI=
Subject key identifier: 85:67:92:E6:BC:D5:4C:AE:7A:C4:F9:28:42:18:C3:54:D9:5A:1E:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0467971F193611D38B007B63901C0863A8C949D7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214663.roa
Signing time: Fri 17 Jul 2026 05:16:37 +0000
ROA not before: Fri 17 Jul 2026 05:11:37 +0000
ROA not after: Fri 16 Jul 2027 05:16:37 +0000
asID: 214663
IP address blocks: 82.38.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:67:97:1f:19:36:11:d3:8b:00:7b:63:90:1c:08:63:a8:c9:49:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 17 05:11:37 2026 GMT
Not After : Jul 16 05:16:37 2027 GMT
Subject: CN=856792E6BCD54CAE7AC4F9284218C354D95A1EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:12:8c:7e:d1:c2:d0:67:01:dc:9b:97:cd:
fb:c4:51:99:33:3e:2b:af:72:5c:d5:6d:cc:80:8e:
9f:75:4b:8c:fb:4e:62:36:01:85:98:05:b7:7e:42:
96:55:7e:35:3d:60:f1:35:ab:28:f2:00:1c:8e:33:
bb:8d:98:5c:d7:02:7b:3c:4d:b6:16:ee:f0:a3:50:
e6:df:e0:a3:bb:1e:82:68:7a:da:81:fc:f0:fa:23:
57:60:89:7a:30:d9:d1:d2:d1:92:65:9c:da:26:08:
23:57:3a:ec:6d:88:b7:cd:cd:67:1d:40:74:bc:e3:
51:9e:a3:fb:00:d4:ed:e2:f5:dd:21:8f:a0:45:10:
85:83:b1:a1:66:09:7d:07:c7:ac:cf:66:43:d9:b6:
b0:8c:3b:98:f6:59:e4:61:57:b3:9f:29:75:b8:f8:
6b:0e:9e:b0:bb:bb:d7:5a:05:23:c8:2d:31:55:45:
f5:96:40:02:2e:87:06:8f:f3:0e:6c:76:37:b4:86:
ed:35:e1:d5:88:d7:aa:ff:d6:f3:cb:6b:07:a5:e2:
c3:1c:8c:f0:4e:35:8c:71:c6:b2:cd:99:c4:b3:61:
32:5b:5a:fa:ad:37:23:1c:0c:2e:bb:70:13:22:dd:
7d:16:da:70:c1:66:a2:cb:90:6c:83:ef:00:8e:bc:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:92:E6:BC:D5:4C:AE:7A:C4:F9:28:42:18:C3:54:D9:5A:1E:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:71:52:22:a2:da:89:7d:75:a1:9f:e4:d7:3e:1a:5f:b3:97:
18:64:a3:45:30:dd:54:f7:ca:a1:ff:7c:df:da:79:a2:f5:3b:
33:e2:b1:a6:95:4b:b0:bd:77:36:f5:83:9b:88:e0:d2:ff:36:
75:ce:bf:30:5b:03:f9:de:6b:21:54:43:76:f0:5f:40:6b:7f:
22:ee:67:8b:48:66:91:88:d7:61:c9:78:8a:f7:81:d8:82:d5:
06:9a:5e:e4:14:c9:5f:4a:88:f8:3e:2f:f3:89:6f:09:0d:4b:
62:fe:82:cf:d4:4f:aa:4b:2b:c6:e9:b8:20:b1:b6:57:33:39:
e5:c3:14:50:76:28:ee:5f:97:21:fd:0b:cc:03:93:4b:ee:f4:
e1:c4:5d:bc:c6:59:6a:93:4a:5c:1f:6d:7d:7d:0b:ec:4c:53:
f9:e2:a4:69:a9:39:02:63:5f:86:ba:88:d9:31:c6:64:d4:eb:
9b:5d:a0:4f:d8:0a:bd:4c:a6:65:dd:86:20:f3:3b:ea:af:c7:
bf:19:ea:19:1d:03:10:6a:72:1d:b9:e9:97:0c:69:92:f9:78:
2c:44:a0:e2:0b:ae:fa:84:22:ca:64:82:56:6e:ae:cd:5c:b9:
46:eb:fb:9b:d7:d6:67:a2:3b:50:20:26:8b:59:59:5f:d7:fd:
93:ff:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:57 2026 by rpki-client