Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
File: AS214882.roa (raw, json)
Hash identifier: bKVKfcDuvfF9tJPdK3ORovUSqYIkt1ejem7V2sSAo4o=
Subject key identifier: 3F:29:69:B0:DE:AB:E6:69:BB:CF:CB:FD:E1:CE:02:CC:A2:0D:07:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7AFD574493D31F96BD763AF94F94C673DC119AFA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
Signing time: Wed 11 Feb 2026 14:55:24 +0000
ROA not before: Wed 11 Feb 2026 14:50:24 +0000
ROA not after: Wed 10 Feb 2027 14:55:24 +0000
asID: 214882
IP address blocks: 178.83.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fd:57:44:93:d3:1f:96:bd:76:3a:f9:4f:94:c6:73:dc:11:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 11 14:50:24 2026 GMT
Not After : Feb 10 14:55:24 2027 GMT
Subject: CN=3F2969B0DEABE669BBCFCBFDE1CE02CCA20D0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:33:cf:72:35:d8:87:78:34:c0:c1:e5:01:
b3:bf:82:4b:7b:d0:dd:1c:d2:b7:42:0c:bf:9c:13:
65:86:89:00:8d:45:71:da:d8:cb:e2:f0:85:15:5b:
3a:0a:fa:ba:f7:5a:cb:af:d3:08:2a:c7:48:33:e9:
4d:a3:b4:89:08:34:e2:07:f6:80:14:de:b1:6d:84:
f6:13:01:86:fc:c1:0a:62:cf:d8:35:b0:86:51:5e:
b7:e9:42:b5:e7:1b:8d:d0:07:db:11:d5:c7:9a:9d:
e5:3c:bf:a3:d9:92:b3:c6:4a:e2:95:9a:65:9c:65:
fb:c4:7d:56:58:d6:74:1b:87:89:f7:d1:7d:9f:5d:
4a:cf:16:c0:ac:2d:11:6e:fd:fc:57:48:83:85:de:
4d:73:7c:a5:6e:84:e7:14:20:7d:83:08:18:e5:22:
5f:c0:d1:02:09:50:c7:e9:d3:e6:f1:fd:1d:21:9e:
ae:b4:60:1f:ef:0e:b3:bd:8b:f0:bc:f8:18:6e:84:
c7:c2:1c:2f:2d:ad:2d:a6:3f:47:10:2d:fe:0b:4a:
37:79:4f:f6:67:40:3e:0e:d9:df:cf:f8:75:0e:f9:
4f:f7:8d:ea:74:4d:12:c0:41:73:c5:54:f5:93:47:
22:28:b9:3d:f6:ac:79:b9:dd:07:3d:a0:65:2a:aa:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:69:B0:DE:AB:E6:69:BB:CF:CB:FD:E1:CE:02:CC:A2:0D:07:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.188.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:4c:0f:f0:f1:c8:2f:27:70:34:6a:9b:27:92:99:2e:2a:
0a:37:18:78:f2:33:83:9a:af:07:cc:8e:fb:c3:13:cc:9b:f8:
c3:96:d4:32:0f:59:70:5f:7e:a5:66:a3:16:18:84:1a:30:85:
89:cf:c6:35:b5:0d:d2:c5:cb:7d:7a:25:a1:15:0b:dc:96:7b:
b8:c3:a3:76:dc:01:ae:d8:52:27:0d:55:85:a5:b3:b4:4a:31:
d6:18:8d:77:e1:c6:8d:cb:0d:ce:5f:0c:95:87:1e:65:66:bf:
17:eb:f7:6f:b3:b2:d5:a8:84:55:1a:db:b1:84:f2:a3:24:88:
ad:98:d1:04:d6:bb:bd:2c:51:07:66:b8:0b:51:b0:11:17:e6:
cb:a6:52:2a:81:ee:cc:67:4f:f6:83:94:cb:8f:34:ff:91:84:
49:5f:07:d7:ff:15:8c:fb:8a:9a:5e:68:71:92:af:8c:e7:9e:
e4:e2:bb:28:13:e9:c9:8a:3b:38:fc:55:94:ff:f5:51:a0:c0:
31:58:bd:9d:12:7e:72:5d:a6:f1:78:93:37:31:44:7c:fb:bc:
df:ed:47:19:0d:b7:d0:8b:6c:40:6b:7c:51:4b:f5:d2:e5:52:
02:dc:da:7c:69:60:d7:d9:f6:50:4c:84:29:72:bc:4b:1a:3b:
71:01:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:15:50 2026 by rpki-client