Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: WhAwRPnS2Lnh5BFb24frBDVUKc9yjr1DUiir+MyzDNw=
Subject key identifier: 83:55:EC:7C:90:D5:E5:07:B0:B6:D1:A3:79:22:7C:95:D2:F4:BA:3D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0E7DC8CEDACD49AB6092F8ED79445B348E5EE477
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Thu 09 Jul 2026 05:18:05 +0000
ROA not before: Thu 09 Jul 2026 05:13:05 +0000
ROA not after: Thu 08 Jul 2027 05:18:05 +0000
asID: 214432
IP address blocks: 51.146.0.0/22 maxlen: 24
51.194.235.0/24 maxlen: 24
51.241.180.0/22 maxlen: 24
51.241.204.0/22 maxlen: 24
51.241.220.0/22 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7d:c8:ce:da:cd:49:ab:60:92:f8:ed:79:44:5b:34:8e:5e:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 9 05:13:05 2026 GMT
Not After : Jul 8 05:18:05 2027 GMT
Subject: CN=8355EC7C90D5E507B0B6D1A379227C95D2F4BA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:2b:05:ad:e6:42:95:23:d2:13:b7:0b:ef:
4c:fc:ab:1d:99:46:ae:b3:3e:18:15:60:52:62:d6:
45:3a:86:d0:2d:fa:a9:03:a2:f7:56:e1:e6:11:e6:
62:c9:4b:09:d2:41:08:f8:fe:ee:56:f2:09:5c:f4:
ef:1a:4a:6e:df:92:8e:f0:db:15:7a:0f:23:fb:df:
92:64:23:07:5b:ce:bc:a5:02:53:94:c4:24:2e:65:
b1:e2:b1:8e:fe:c6:8d:87:11:e1:e5:af:f3:38:14:
ab:41:26:db:ea:f8:f3:ef:ac:f6:74:97:87:ab:05:
ee:b4:d3:fe:e3:67:8d:84:fa:7d:54:2d:56:29:bd:
57:29:f3:f8:f5:52:89:70:5b:3c:07:ec:a1:e2:35:
cb:48:4a:d9:d6:49:81:02:ed:37:fa:10:f4:3e:b4:
c9:2e:d6:25:0c:cd:77:e1:0a:e1:a9:ba:f4:b7:37:
cc:31:d6:3c:b5:35:7e:fe:d2:2f:ae:53:42:48:e8:
1b:e9:96:f2:98:d2:6b:0d:8d:76:37:28:ed:33:be:
6d:af:d9:d5:87:3f:e8:ef:b8:ba:08:90:b6:e9:46:
09:a4:ff:97:84:a6:ed:6d:4e:22:98:26:c3:dd:d5:
ef:e9:46:5c:7f:c2:de:9c:7a:e9:78:99:16:67:be:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:EC:7C:90:D5:E5:07:B0:B6:D1:A3:79:22:7C:95:D2:F4:BA:3D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/22
51.194.235.0/24
51.241.180.0/22
51.241.204.0/22
51.241.220.0/22
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c7:15:38:49:95:90:bd:e0:0b:70:35:80:f0:4a:eb:3d:11:
43:b1:c1:97:39:2a:9d:7b:c2:22:fa:79:5e:11:e0:eb:39:09:
b1:67:1c:ca:08:6e:fa:86:25:b9:48:b8:df:56:f3:ac:54:61:
56:0d:84:95:4c:a5:62:c9:b9:44:db:4b:dd:94:d7:13:c5:0d:
1e:53:d3:a2:0e:27:f2:b2:94:26:68:dc:76:5c:eb:aa:1a:3d:
78:ac:cb:84:78:58:f0:76:6b:1b:cf:68:fa:aa:f3:a1:0f:73:
15:40:f4:e0:e2:78:78:f9:4d:17:9c:c6:bc:9d:0c:0f:fd:52:
9f:25:7d:d4:ce:ab:02:80:49:ce:5f:cf:0a:1e:de:01:34:b4:
c5:6d:57:8a:5c:8b:4e:5b:bd:b2:fe:41:e4:f5:02:7a:9d:aa:
cb:9d:41:e0:6f:72:3c:55:69:4c:2c:e6:74:90:65:c9:7f:20:
b7:49:eb:9e:18:9a:8f:9a:c8:46:14:46:98:c2:cd:6b:a2:a2:
64:1f:af:65:51:e8:fd:44:16:8f:ae:8e:fc:ef:55:61:f4:be:
6b:35:b6:95:cc:e7:12:97:4e:91:8f:b1:08:2b:c6:14:bb:53:
1e:8b:ae:7f:d9:e7:2a:70:34:70:9b:51:44:a0:16:2b:83:6c:
10:a2:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:35 2026 by rpki-client