Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: yXZd9B2ad/GvJ+no74MfJ8gTUpbmc3EAHnCuyewKvko=
Subject key identifier: 5C:6A:80:02:80:93:22:17:CA:31:FE:20:1A:34:35:2B:A0:9E:39:AD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3A19889F37CB7EF0C09C27B8C75DC7FC609CE252
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
Signing time: Tue 14 Jul 2026 14:27:49 +0000
ROA not before: Tue 14 Jul 2026 14:22:49 +0000
ROA not after: Tue 13 Jul 2027 14:27:49 +0000
asID: 214483
IP address blocks: 188.221.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:19:88:9f:37:cb:7e:f0:c0:9c:27:b8:c7:5d:c7:fc:60:9c:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 14 14:22:49 2026 GMT
Not After : Jul 13 14:27:49 2027 GMT
Subject: CN=5C6A800280932217CA31FE201A34352BA09E39AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:10:50:cf:c9:73:fd:89:f5:d2:0c:8f:66:
9e:d8:ab:29:58:e3:08:f1:ed:d3:b0:d1:2c:48:cc:
80:01:5a:9a:7a:85:3a:3e:09:2f:2c:bb:1f:2c:28:
d4:d6:e8:4f:a3:ff:af:73:3d:5f:2b:77:b8:15:5a:
ae:9a:2a:2d:87:67:56:08:bb:59:a2:68:39:38:30:
95:67:ed:1d:8b:af:54:91:20:e3:b0:38:2d:db:99:
1f:e5:f1:fc:ab:72:d5:38:98:7e:d6:f9:1f:2e:09:
39:5d:c5:de:7a:2f:7a:d0:90:ba:80:e6:63:de:5c:
ea:6c:2a:1f:fd:2a:1b:f0:a2:44:02:ac:cf:99:8f:
74:ff:68:3a:63:77:63:d5:1e:ff:e4:c2:09:0e:db:
6b:ef:87:d5:52:53:d5:00:f0:0a:cb:61:91:4f:ae:
b3:ab:0c:14:d4:a9:c2:a7:88:cd:2c:52:31:34:3d:
90:14:2c:0b:98:0e:5e:28:9e:2e:28:e4:c5:c4:67:
9a:90:e3:c1:43:8b:40:78:c3:91:1e:b7:d2:19:64:
0d:00:9c:3a:cd:bc:53:84:80:1c:06:ef:77:a8:d7:
00:de:54:3c:2d:d2:c7:52:3f:73:b1:21:6c:b5:37:
cd:b1:5a:35:6e:1d:c2:a6:2e:71:9b:71:f6:98:cb:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:80:02:80:93:22:17:CA:31:FE:20:1A:34:35:2B:A0:9E:39:AD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.47.0/24
Signature Algorithm: sha256WithRSAEncryption
01:84:a7:20:cd:f0:8e:e9:f5:d8:61:af:21:8e:aa:2b:ef:9f:
60:11:fc:0a:96:be:24:3f:c4:36:32:f1:ca:c3:9d:50:8a:8f:
dc:8d:b6:20:c2:3f:dc:a9:07:58:b2:d7:40:2f:e2:ec:be:71:
6a:b8:8b:95:7b:81:f3:4e:8b:41:75:99:f2:42:85:ba:d0:64:
7a:f7:bb:b2:03:fc:11:ca:ad:83:c0:35:44:ad:b3:dc:89:e0:
d8:2d:68:64:23:98:a6:f9:8c:39:27:50:9b:b0:24:ab:6a:2b:
11:92:50:c3:33:a6:be:94:23:f7:fb:e5:39:09:66:88:f5:5e:
90:dd:34:c5:89:2f:c8:95:4d:71:c4:f8:13:d5:f9:fe:c6:2e:
5e:28:ad:64:8d:a0:d6:ea:df:e9:ce:1d:49:b5:5a:53:de:85:
07:7d:1f:d1:15:58:77:17:8f:09:0e:20:84:ba:e8:ee:3f:1f:
2e:65:dc:1a:e8:b7:22:ab:ec:67:ea:29:1f:31:52:5f:75:73:
37:43:dd:3d:e4:dc:5a:5c:0e:40:e8:3d:79:60:11:42:6f:51:
53:cd:21:6d:09:77:ad:93:c5:d8:75:e9:27:89:6c:68:f3:5d:
af:87:cb:ee:f8:fe:99:50:1e:6e:5a:a9:bb:22:d9:5c:66:69:
25:9a:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:25 2026 by rpki-client