Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: hcf+8YoA9YElxOGAcgqP/OZ6YWVDkijXxwCs8J3dnBw=
Subject key identifier: 64:61:78:22:DD:63:8F:76:11:6C:AB:69:E3:2E:91:E0:A2:4A:EB:17
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 299E0DC36DD4466C48A2F140E7AF268780D59B29
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
Signing time: Sun 08 Nov 2026 00:00:44 +0000
ROA not before: Sat 07 Nov 2026 23:55:44 +0000
ROA not after: Sun 07 Nov 2027 00:00:44 +0000
asID: 214483
IP address blocks: 91.124.28.0/24 maxlen: 24
91.124.43.0/24 maxlen: 24
91.124.149.0/24 maxlen: 24
91.124.240.0/24 maxlen: 24
95.134.30.0/24 maxlen: 24
95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
95.134.252.0/22 maxlen: 24
95.135.252.0/24 maxlen: 24
178.93.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:9e:0d:c3:6d:d4:46:6c:48:a2:f1:40:e7:af:26:87:80:d5:9b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 7 23:55:44 2026 GMT
Not After : Nov 7 00:00:44 2027 GMT
Subject: CN=64617822DD638F76116CAB69E32E91E0A24AEB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:ae:b6:64:68:1e:8b:c9:03:fe:2c:b0:6c:
24:c1:ec:5a:48:52:7e:0e:5d:8a:a0:c2:17:27:8a:
ba:2e:bf:68:54:07:37:ea:87:56:13:ba:ac:7f:4b:
47:dd:ef:cd:e9:f1:a3:c2:ad:5e:3b:9a:8f:73:f2:
6f:5e:8b:db:bd:4b:37:fe:fe:c1:7c:a8:08:fe:3e:
71:e5:d7:bc:21:5c:bb:7c:ad:e1:78:a1:83:88:86:
69:5d:b5:60:6c:6d:55:61:90:ca:52:3e:7a:90:ba:
8b:56:4f:a8:80:52:fa:c7:a3:44:d3:1b:e5:87:43:
21:c8:1c:83:3c:0a:09:dd:77:37:28:09:84:e8:e9:
4a:e8:09:4e:d6:2c:9d:16:7f:d0:fd:d1:d2:5f:fc:
82:28:00:97:ca:fa:f8:8b:24:6c:8d:58:e7:8d:33:
a7:0b:92:e7:9f:fa:1a:b4:a8:e1:70:e6:7e:73:6a:
64:32:05:f4:d1:3c:1e:b9:48:2f:db:63:7b:de:a2:
7f:cf:e8:8e:40:d8:79:4a:d5:76:8a:93:7a:90:fb:
8c:02:7c:5b:b1:f4:c5:0d:af:f7:db:28:22:60:45:
97:a1:eb:99:fa:13:ff:3f:26:1e:4a:5a:82:b1:0c:
44:09:75:c4:d8:f7:9f:c9:39:a7:40:f9:9f:b1:a2:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:78:22:DD:63:8F:76:11:6C:AB:69:E3:2E:91:E0:A2:4A:EB:17
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.28.0/24
91.124.43.0/24
91.124.149.0/24
91.124.240.0/24
95.134.30.0/24
95.134.240.0/20
95.135.252.0/24
178.93.17.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bf:46:06:5c:14:69:e8:5e:b2:66:3c:e6:1d:ac:60:e9:d9:
dc:ef:03:39:7f:a4:fe:0e:22:be:4f:b0:30:73:34:86:a1:61:
a3:3a:e9:9a:93:bc:07:5a:aa:da:55:eb:76:07:65:6e:cc:25:
e9:2e:8b:00:ed:d7:b0:3a:cc:9b:c2:29:e5:51:ce:5d:51:15:
e2:02:4a:e0:88:9a:51:9f:47:dd:a1:61:51:6e:38:0a:5e:8e:
8d:6a:71:0b:91:6d:3a:35:07:06:92:b3:04:47:a9:0d:b9:46:
2a:f6:34:dc:b3:58:b8:1d:c4:97:12:24:46:68:92:29:cd:54:
41:48:dd:59:1a:de:19:71:d8:40:b6:f7:5c:3c:99:f7:a7:d3:
a6:c4:9c:27:29:67:3c:1a:9c:55:52:ef:7d:9f:8f:84:ab:1b:
73:7c:d2:de:d6:d2:e9:e0:15:66:83:af:3d:ea:19:ad:e8:b5:
e2:34:80:d4:d2:6d:08:ed:60:98:c2:6c:c0:38:ec:d0:78:ee:
a3:4b:9a:ad:ba:5d:41:dd:bc:95:a7:57:37:77:82:dd:35:7d:
86:c3:0c:91:cd:ef:40:dd:6d:00:e1:2f:ea:bd:20:d3:3f:f6:
17:46:9c:02:8c:79:c5:6c:57:12:5f:df:24:12:26:c7:78:e3:
2a:18:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:04:39 2026 by rpki-client