
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: Kr5TROe4LlpnJssKWrEiqVaD8tOk6fDMfOiaAZISCDY=
Subject key identifier: 07:34:50:52:8A:57:84:E0:2E:0C:0B:8F:74:21:5A:C9:33:DE:7E:1A
Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial: 3D66EC7F63FEDA61743212CE30A8E1F9F0484E8D
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa
Signing time: Wed 11 Nov 2026 00:01:37 +0000
ROA not before: Tue 10 Nov 2026 23:56:37 +0000
ROA not after: Wed 10 Nov 2027 00:01:37 +0000
asID: 214483
IP address blocks: 177.177.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:66:ec:7f:63:fe:da:61:74:32:12:ce:30:a8:e1:f9:f0:48:4e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Validity
Not Before: Nov 10 23:56:37 2026 GMT
Not After : Nov 10 00:01:37 2027 GMT
Subject: CN=073450528A5784E02E0C0B8F74215AC933DE7E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:36:92:e8:c8:7b:33:4b:83:2b:3d:41:63:
e7:af:6a:9e:d3:1f:55:26:b0:22:ce:7b:55:66:d8:
75:a6:b9:cf:62:b5:62:16:af:2b:66:bb:7b:6d:bb:
2b:ee:13:7f:b1:7b:ec:30:2f:69:9c:f8:a9:35:8a:
c7:3b:a7:8c:d1:36:28:b1:d1:0a:32:83:a2:34:20:
09:b2:9c:9c:06:26:d1:f8:03:d5:6c:de:34:a6:9a:
f0:22:38:ff:ab:cb:64:d9:e8:24:50:af:ba:dd:c5:
08:23:94:ac:be:b5:2c:e4:bd:b9:a5:a7:7c:d0:e8:
6f:16:a1:a1:04:c7:5a:83:f2:7e:6b:ec:a9:fd:ba:
2f:ed:51:1b:3d:de:97:64:0a:2c:03:95:b3:2a:fd:
a8:c7:26:94:6e:d5:97:03:b7:80:f0:24:ad:01:0a:
7d:6e:eb:9f:c6:5b:01:6d:9f:5d:41:e4:17:01:f6:
02:46:64:1a:bb:61:a2:eb:65:78:4d:63:be:d1:75:
8c:56:c7:50:5a:87:79:46:13:af:3c:05:99:36:69:
07:4f:24:33:ec:87:e2:d0:2c:c6:f9:0d:b6:bb:42:
96:bf:b4:72:bc:02:f3:ef:b2:b7:29:d1:50:cf:b4:
0b:aa:1a:d9:af:7c:44:bd:7f:74:4d:b9:6d:ec:21:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:50:52:8A:57:84:E0:2E:0C:0B:8F:74:21:5A:C9:33:DE:7E:1A
X509v3 Authority Key Identifier:
keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2e:85:aa:34:e3:2a:bc:1c:70:ca:12:69:10:17:bc:56:05:
02:41:f1:f7:b3:51:b7:e4:ba:b2:fc:cc:39:93:96:5c:2f:47:
1e:4f:4e:54:65:fc:21:ac:ef:4c:a8:b4:e6:7a:89:32:6e:72:
02:fb:4a:1b:9b:fd:a5:d1:f5:36:7e:24:d3:e8:7a:38:0e:b1:
05:09:e9:ac:8a:97:9f:69:2b:b8:1c:35:7a:8c:f3:2f:fb:6c:
49:4e:89:a2:13:89:5d:b5:82:33:b5:a8:69:1f:97:60:a0:d0:
85:17:b6:83:b9:94:99:12:4b:65:f3:58:d4:5e:b0:84:92:43:
8e:c6:8f:88:99:10:52:ec:d0:bf:32:bd:71:86:8a:53:92:cb:
06:64:5e:dc:f5:8d:40:95:df:a8:32:95:f2:a0:a0:6f:30:85:
a0:e1:59:d0:83:04:3c:55:65:73:a9:09:83:31:a1:a1:a4:fc:
e4:77:89:6b:29:3a:f6:6f:7a:c1:d5:d4:68:e5:99:f3:c0:db:
76:d5:49:00:d9:d1:d3:33:3d:02:af:7f:54:3e:bc:c4:4b:e5:
89:f5:47:66:00:dc:9d:47:c9:3e:66:e4:75:c9:15:79:d4:30:
56:78:77:d7:58:f1:27:8b:22:62:14:e0:83:ea:7b:14:2e:78:
a0:a2:64:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:50:09 2026 by rpki-client