Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: 2wN7r2wDFrzgPCR7EUTaiOJIlk+i2b7zG7a0xKmbsII=
Subject key identifier: 81:F6:4B:15:E7:90:9D:FD:C0:AF:48:22:18:BC:88:F0:6D:17:2E:61
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 38E93C3D9A323FA9E6CEAE93CDA85A364D648A30
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
Signing time: Tue 16 Jun 2026 14:12:59 +0000
ROA not before: Tue 16 Jun 2026 14:07:59 +0000
ROA not after: Tue 15 Jun 2027 14:12:59 +0000
asID: 214483
IP address blocks: 95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
95.134.252.0/22 maxlen: 24
178.93.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e9:3c:3d:9a:32:3f:a9:e6:ce:ae:93:cd:a8:5a:36:4d:64:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 16 14:07:59 2026 GMT
Not After : Jun 15 14:12:59 2027 GMT
Subject: CN=81F64B15E7909DFDC0AF482218BC88F06D172E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:5c:d5:10:89:a8:53:4c:dc:91:2d:c6:20:
cc:ab:52:d9:ee:4e:bd:39:98:32:c1:6d:2f:2d:4b:
d1:86:5a:57:f5:97:72:0f:33:7a:ff:1a:c0:8e:9e:
4d:a5:42:d5:42:78:39:a3:7c:f7:a9:ef:08:a9:87:
bf:df:2f:c3:9d:26:13:f0:8e:8c:18:b5:3c:f7:75:
98:9b:61:bb:24:5e:22:c2:a2:2f:40:46:e2:73:87:
80:20:88:eb:c5:59:2a:11:df:26:06:31:32:a5:58:
fc:70:be:d6:ab:58:04:5a:11:3f:d3:e6:df:8c:7c:
8b:ab:d3:89:b9:3e:e0:a1:4c:b4:c6:b7:40:a3:79:
3a:cc:34:87:91:22:04:f1:21:80:c0:fc:4a:75:ce:
32:f1:88:9b:70:71:23:bb:f1:ad:eb:9d:44:34:13:
25:e6:9b:71:05:1c:f3:79:86:c4:d6:cf:7d:9b:92:
6a:68:aa:09:2e:a1:d8:e9:62:4c:b2:bf:fb:f5:be:
47:89:8e:a5:42:e4:b3:1c:87:75:2d:41:a0:fb:bd:
b8:19:64:5d:3c:35:61:e0:bb:0b:4a:8c:25:15:e1:
e5:d6:d3:27:9c:38:38:1a:73:23:d7:c4:0a:5b:f3:
9e:1b:7b:6a:b3:6e:10:c7:11:d4:d6:16:ae:49:0f:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:4B:15:E7:90:9D:FD:C0:AF:48:22:18:BC:88:F0:6D:17:2E:61
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.240.0/20
178.93.17.0/24
Signature Algorithm: sha256WithRSAEncryption
24:65:69:b7:8a:b9:ee:21:6b:a2:47:bb:43:c5:04:82:77:e7:
54:a7:d6:93:0d:72:f5:91:4a:4e:a8:da:e6:2f:41:30:88:bb:
e0:76:7e:fa:4c:90:92:39:fb:38:e0:ff:95:83:91:35:f5:a0:
ba:40:35:b4:75:03:3a:e3:00:92:aa:d0:92:f2:72:1f:aa:3b:
8a:bd:8e:29:bc:f6:9f:6b:5b:b6:56:bd:a4:11:f7:79:f7:ad:
1f:58:03:50:53:75:41:98:f6:13:c6:23:5d:a0:a9:90:55:c5:
ea:47:a7:7e:7c:40:90:16:34:86:b0:70:2f:83:8d:06:53:87:
e9:75:e9:dd:12:f4:e7:8f:e2:51:45:db:d9:dc:86:79:df:97:
97:da:e2:02:9e:85:b7:5b:ad:40:a2:a3:ea:2f:1d:69:8e:6e:
49:aa:71:7e:b5:84:61:a2:ca:2c:76:51:6e:f7:98:55:ab:6a:
91:e7:5d:f0:be:95:ec:b7:20:6d:98:f6:05:4c:06:a5:89:8c:
87:98:c5:50:47:5f:41:88:56:ee:30:62:73:d0:70:fc:f4:24:
04:d3:96:d3:2c:eb:3b:28:90:8f:71:e6:79:4f:1d:85:70:79:
50:8a:58:2e:15:8d:4b:7b:ee:4f:5a:f9:04:d7:49:c6:ca:b0:
92:1e:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 01:19:09 2026 by rpki-client