Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
File: AS214882.roa (raw, json)
Hash identifier: kfWs3MTIblmVuye527jxKqbulpCtA/FffFnNSkbUC88=
Subject key identifier: FE:6D:16:C9:9F:F6:02:30:22:5D:3E:F1:10:8B:AE:FF:44:31:EF:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4E60A3FDB8E53E97F5887902256111861EC5B7D1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
Signing time: Sun 21 Jun 2026 00:33:01 +0000
ROA not before: Sun 21 Jun 2026 00:28:01 +0000
ROA not after: Sun 20 Jun 2027 00:33:01 +0000
asID: 214882
IP address blocks: 178.83.188.0/24 maxlen: 24
2a13:9500:190::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:a3:fd:b8:e5:3e:97:f5:88:79:02:25:61:11:86:1e:c5:b7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 21 00:28:01 2026 GMT
Not After : Jun 20 00:33:01 2027 GMT
Subject: CN=FE6D16C99FF60230225D3EF1108BAEFF4431EFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:bd:48:24:01:67:e9:5e:c1:51:88:b0:0b:
cb:19:09:c1:4d:46:4d:11:45:ee:3f:bd:da:d1:d8:
b8:4a:bc:35:a2:ea:26:e2:3c:ab:62:0c:7e:1c:3c:
02:64:b6:0c:f5:74:9b:91:05:c3:4c:4e:4a:dd:6b:
7c:28:fb:97:2a:0a:3a:a8:2e:cd:e9:e8:9b:b7:01:
e3:18:d4:2c:45:d4:78:2d:4a:1d:c4:66:d7:d9:fd:
91:00:66:fc:6d:62:c3:36:92:bc:10:33:51:d1:c4:
96:0c:e0:95:d4:a2:20:93:92:c0:bf:7c:7e:86:56:
04:2b:76:e3:54:a9:d2:52:82:30:d8:cb:c9:e6:67:
4f:6d:bf:d1:fc:98:5c:ff:9e:cf:26:39:b6:39:14:
32:fe:a0:cb:79:41:0c:a7:d6:69:d5:d8:12:1a:38:
ee:62:d3:62:8f:7d:71:ae:64:8d:61:cf:01:0f:de:
7c:8f:d6:ae:ec:2f:38:6e:c4:93:1f:33:60:0a:ac:
ae:8e:3d:66:b9:fb:82:6c:aa:61:70:10:9e:10:43:
5a:bd:82:6a:79:9f:d3:b6:22:cd:42:b7:d7:0e:37:
3d:dc:6e:0f:c9:a8:e2:77:b5:ab:fd:a4:df:d0:63:
25:2e:03:19:6b:b3:7f:71:00:44:dd:91:0a:ed:0b:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:16:C9:9F:F6:02:30:22:5D:3E:F1:10:8B:AE:FF:44:31:EF:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.188.0/24
IPv6:
2a13:9500:190::/48
Signature Algorithm: sha256WithRSAEncryption
28:46:0d:dd:f3:f2:dc:92:94:e1:42:00:a6:43:7a:9f:ca:f7:
88:5a:cb:8a:12:2c:ac:78:5c:bd:36:a8:49:61:98:2c:0c:60:
d4:19:38:bb:f5:b0:58:43:88:95:6b:3b:0d:1e:7d:33:e8:25:
c1:4c:cd:92:40:5d:a2:9a:0a:a1:33:e1:9a:ee:00:3e:48:44:
cb:c6:98:24:7b:6f:18:ea:36:67:09:dc:2b:ce:c4:57:65:36:
67:bc:69:8c:40:58:04:47:62:94:ee:39:cb:2f:e7:32:5a:cc:
77:94:ca:7d:1c:8e:ac:b5:0f:df:de:95:de:2a:56:ae:03:3a:
be:57:80:c0:9c:a4:fb:7a:19:73:5e:bb:3f:13:85:63:77:23:
9d:f4:5f:a6:8e:70:bf:5e:16:40:2b:d4:fb:f6:77:26:85:e6:
9b:04:34:3c:e6:07:6a:ef:ba:81:88:9a:87:23:e5:cc:07:44:
4d:b0:c3:b6:86:d2:49:23:20:f1:9c:46:fa:a0:f8:0b:76:e0:
0d:5d:ee:84:66:a9:7b:86:c4:76:a0:a8:eb:b4:cd:0c:62:34:
c4:95:15:7c:ab:01:46:8a:65:ff:e6:ba:95:60:a4:6f:93:f8:
78:e2:18:a0:e8:3b:e7:86:a4:2d:30:9e:39:6f:60:ce:93:d6:
82:fa:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:19 2026 by rpki-client