Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: djDO4uIgqN3rvaybLdLa8XF/THWN0Udn+0LS1+F7100=
Subject key identifier: F7:51:01:9F:0C:90:58:2A:3F:15:C7:81:AC:0A:63:5A:A9:92:96:18
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1C3EE603A85326598AB020691DAB93418B52ADA6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Wed 26 Aug 2026 06:21:45 +0000
ROA not before: Wed 26 Aug 2026 06:16:45 +0000
ROA not after: Wed 25 Aug 2027 06:21:45 +0000
asID: 214432
IP address blocks: 51.194.235.0/24 maxlen: 24
51.241.8.0/22 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
188.220.90.0/23 maxlen: 24
188.221.66.0/23 maxlen: 24
188.221.82.0/23 maxlen: 24
188.221.88.0/22 maxlen: 24
188.221.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3e:e6:03:a8:53:26:59:8a:b0:20:69:1d:ab:93:41:8b:52:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 26 06:16:45 2026 GMT
Not After : Aug 25 06:21:45 2027 GMT
Subject: CN=F751019F0C90582A3F15C781AC0A635AA9929618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:fa:9b:b5:ca:3f:e3:fb:cf:91:4b:be:82:
75:47:41:a6:37:3f:58:0b:59:a5:37:e3:f6:af:38:
a0:90:f0:19:03:77:3e:59:79:4b:0e:c0:12:b3:6d:
22:aa:8d:83:f2:57:96:7e:a1:b2:48:53:d3:a7:fa:
20:c3:e2:c7:89:f3:45:6d:06:f7:07:5c:e6:7b:29:
ca:40:d6:24:af:82:c0:c5:03:f8:68:25:1a:d8:03:
89:bf:64:4d:0f:94:51:72:db:46:9b:d3:44:86:24:
fe:47:f4:db:ab:6f:a8:b8:46:a5:af:3d:45:c9:c0:
47:bf:00:dc:78:b4:5d:15:13:cd:ba:1c:6e:81:70:
39:f8:eb:c7:77:94:d0:c5:96:07:e4:08:8c:d6:86:
e6:cb:c5:31:37:0f:e2:f8:2c:0b:15:53:b2:5e:90:
33:3c:0b:9b:72:5b:48:4d:d5:76:de:1e:1c:d5:d5:
6f:1b:6d:ca:b1:bd:07:a5:54:f5:76:9d:ad:3d:84:
41:98:61:24:04:97:1e:d2:1c:96:80:14:a7:33:aa:
0c:aa:70:87:af:ee:e2:0d:64:e7:7b:31:fa:b3:11:
6d:ad:37:85:d7:84:3e:0a:77:08:82:76:50:ca:b4:
b2:dd:3f:03:7d:4a:89:ec:d7:00:68:4d:6d:d8:f2:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:01:9F:0C:90:58:2A:3F:15:C7:81:AC:0A:63:5A:A9:92:96:18
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.235.0/24
51.241.8.0/22
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
188.220.90.0/23
188.221.66.0/23
188.221.82.0/23
188.221.88.0/22
188.221.120.0/23
Signature Algorithm: sha256WithRSAEncryption
36:6d:99:cf:03:a0:57:29:64:28:7c:16:b8:6e:57:c9:50:4b:
32:86:9b:c9:3f:3d:68:50:c1:52:db:20:bb:9e:7c:00:f9:21:
ac:ee:f5:cd:b8:29:4f:1f:7a:2a:30:64:7d:f5:41:4d:2b:bc:
b7:12:5f:ad:82:29:a6:41:16:13:96:e5:b1:3c:85:f3:92:ce:
79:76:26:23:35:29:14:fa:6a:65:79:0b:60:9f:b0:8c:bc:b9:
a3:f0:a8:8d:50:01:8e:17:d2:ba:b5:ce:e1:c2:b4:b5:30:41:
97:aa:1f:bd:6d:85:f2:61:ea:88:37:50:cf:4d:9f:a9:6d:33:
d8:c1:18:8b:c2:86:3e:38:bd:b1:7d:4d:89:f4:eb:df:cc:61:
d6:e5:1b:93:a4:b6:93:ff:de:64:6e:bf:15:3b:33:3a:74:e7:
14:6e:70:cb:4c:72:6b:d2:b4:10:b3:7f:b3:fd:3c:17:bc:e8:
8b:ae:9f:25:54:6d:01:cc:4a:29:22:32:6f:41:41:8e:85:20:
45:4a:49:d2:8e:7d:2b:25:13:ab:4b:02:e8:08:7d:2b:05:c8:
a0:63:a2:5d:de:1b:4c:6d:10:66:88:42:b9:36:e7:4d:66:d1:
cc:95:ca:42:6c:11:a9:b5:3b:68:f1:c0:40:0e:69:b7:9e:e3:
7a:69:6d:81
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUHD7mA6hTJlmKsCBpHauTQYtSraYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjYwNjE2NDVaFw0yNzA4MjUwNjIxNDVaMDMxMTAvBgNV
BAMTKEY3NTEwMTlGMEM5MDU4MkEzRjE1Qzc4MUFDMEE2MzVBQTk5Mjk2MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPx/qbtco/4/vPkUu+gnVHQaY3
P1gLWaU34/avOKCQ8BkDdz5ZeUsOwBKzbSKqjYPyV5Z+obJIU9On+iDD4seJ80Vt
BvcHXOZ7KcpA1iSvgsDFA/hoJRrYA4m/ZE0PlFFy20ab00SGJP5H9Nurb6i4RqWv
PUXJwEe/ANx4tF0VE826HG6BcDn468d3lNDFlgfkCIzWhubLxTE3D+L4LAsVU7Je
kDM8C5tyW0hN1XbeHhzV1W8bbcqxvQelVPV2na09hEGYYSQElx7SHJaAFKczqgyq
cIev7uINZOd7MfqzEW2tN4XXhD4KdwiCdlDKtLLdPwN9Sons1wBoTW3Y8vtRAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU91EBnwyQWCo/FceBrApjWqmSlhgwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAM8Lr
AwQCM/EIAwQATmnYAwQBTmnaAwQATmndAwQBTmnoMAwDBAJOaewDBABOae4DBABO
afMDBAG83FoDBAG83UIDBAG83VIDBAK83VgDBAG83XgwDQYJKoZIhvcNAQELBQAD
ggEBADZtmc8DoFcpZCh8FrhuV8lQSzKGm8k/PWhQwVLbILuefAD5Iazu9c24KU8f
eiowZH31QU0rvLcSX62CKaZBFhOW5bE8hfOSznl2JiM1KRT6amV5C2CfsIy8uaPw
qI1QAY4X0rq1zuHCtLUwQZeqH71thfJh6og3UM9Nn6ltM9jBGIvChj44vbF9TYn0
69/MYdblG5OktpP/3mRuvxU7Mzp05xRucMtMcmvStBCzf7P9PBe86IuunyVUbQHM
SikiMm9BQY6FIEVKSdKOfSslE6tLAugIfSsFyKBjol3eG0xtEGaIQrk2501m0cyV
ykJsEam1O2jxwEAOabee43ppbYE=
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:01 2026 by rpki-client