Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: GhnNRvnLHpBkxYLQGfNZg/C5Kusmjml7fhlwivX0PV0=
Subject key identifier: EF:A6:61:4A:86:DE:FE:9D:36:D9:48:1E:80:5D:B6:1A:91:5D:95:2F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 27777FA466F2FC30F04AE192DE797661A663A561
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
Signing time: Wed 02 Sep 2026 12:44:17 +0000
ROA not before: Wed 02 Sep 2026 12:39:17 +0000
ROA not after: Wed 01 Sep 2027 12:44:17 +0000
asID: 214483
IP address blocks: 51.146.32.0/24 maxlen: 24
51.146.33.0/24 maxlen: 24
51.146.34.0/24 maxlen: 24
51.146.35.0/24 maxlen: 24
51.146.38.0/24 maxlen: 24
188.220.106.0/24 maxlen: 24
188.220.198.0/24 maxlen: 24
188.220.249.0/24 maxlen: 24
188.221.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:77:7f:a4:66:f2:fc:30:f0:4a:e1:92:de:79:76:61:a6:63:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 2 12:39:17 2026 GMT
Not After : Sep 1 12:44:17 2027 GMT
Subject: CN=EFA6614A86DEFE9D36D9481E805DB61A915D952F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:72:a1:bb:b1:0b:94:4e:88:94:e3:7d:fc:
88:23:3e:c6:fb:79:9e:a3:86:04:49:17:d2:54:48:
5b:7f:0b:77:83:42:ce:48:28:74:da:ef:53:e1:34:
8d:b9:f1:e1:36:ac:09:0b:a1:45:d7:28:19:99:97:
2b:84:65:4b:ab:2a:33:18:d5:30:b4:bc:01:20:64:
4f:1f:a8:61:4c:f5:ae:cd:99:f5:50:05:3d:78:61:
a9:1b:4a:7b:6c:ed:66:3b:11:a1:f1:32:1e:4b:ee:
d8:c9:1b:f7:f5:9e:ab:13:7e:55:ef:a8:0c:a4:ff:
21:58:4b:41:d5:d9:f1:61:52:e6:f3:8f:ec:cc:d0:
0c:47:c0:6f:99:a0:d5:e1:22:0d:1d:2a:81:ed:4c:
b0:db:9d:f8:3e:17:73:6a:1a:25:b2:fd:f3:83:89:
5e:67:96:08:66:53:26:f0:0b:2c:40:a0:9d:db:2c:
1a:b8:85:d5:1d:23:97:4e:5c:a0:2d:9d:d5:5b:40:
db:98:af:7e:07:d1:3c:a4:b2:62:00:05:30:97:56:
8e:8e:90:e3:31:65:ce:66:82:92:5c:f0:b9:88:cf:
47:b8:c4:3e:c2:60:23:b9:84:b5:8d:98:80:14:8b:
1d:6d:7c:c0:86:8b:b5:05:9b:aa:51:48:90:35:2c:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:61:4A:86:DE:FE:9D:36:D9:48:1E:80:5D:B6:1A:91:5D:95:2F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.32.0/22
51.146.38.0/24
188.220.106.0/24
188.220.198.0/24
188.220.249.0/24
188.221.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f8:9a:1e:07:c3:bc:e1:bc:79:a0:c8:da:05:17:36:63:20:
69:ac:d6:a7:1a:de:b9:75:80:ab:17:bc:e0:d6:7f:77:8b:d3:
15:28:b0:7e:a3:e8:ca:70:83:23:d6:50:bc:51:10:65:6e:93:
a3:71:8c:fa:36:c4:1d:87:19:30:6b:a4:5c:d8:2f:28:31:e2:
c1:a0:f9:10:32:28:03:65:cf:ae:9c:31:53:a2:fb:fa:62:51:
16:71:29:a7:46:db:14:3e:cb:8b:69:28:d4:65:08:e4:01:13:
f0:2e:ce:90:fd:12:6b:c1:91:2f:75:2c:f8:ec:8e:4e:2d:04:
bc:76:50:72:9e:b3:2f:a8:28:df:43:3b:82:ae:f7:1a:75:69:
74:24:17:fa:f9:a1:c7:60:81:c1:81:c4:64:5d:23:7b:52:27:
72:9c:69:97:27:4d:be:18:f2:2f:48:17:af:71:8c:f3:47:6c:
89:17:19:bd:3c:9d:c5:4a:45:e0:d7:ef:1e:a0:e2:cd:bd:3f:
60:48:a6:f7:f4:55:24:75:33:e3:ee:ab:17:e3:a9:c4:bc:f2:
02:58:90:1d:09:cd:b3:a3:69:c3:ca:47:12:07:a2:e9:3a:07:
90:3b:e0:09:ad:4c:08:71:37:c8:86:26:20:7e:75:4b:f8:66:
3d:23:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:00 2026 by rpki-client