Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: LcSzMJfC69qn/GL6valSykqcCaWDCWArQPH4ZzeFSSo=
Subject key identifier: ED:72:0B:4A:F0:CC:81:90:9F:FB:1C:1D:50:C8:60:24:99:29:1B:AA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4913D49C9148A534C7623C1CECE7B63034E54C06
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
Signing time: Tue 22 Sep 2026 16:45:45 +0000
ROA not before: Tue 22 Sep 2026 16:40:45 +0000
ROA not after: Tue 21 Sep 2027 16:45:45 +0000
asID: 214483
IP address blocks: 66.132.185.0/24 maxlen: 24
66.132.200.0/24 maxlen: 24
66.234.10.0/24 maxlen: 24
69.90.117.0/24 maxlen: 24
69.90.226.0/24 maxlen: 24
143.14.47.0/24 maxlen: 24
143.14.81.0/24 maxlen: 24
143.14.111.0/24 maxlen: 24
143.14.120.0/24 maxlen: 24
143.14.128.0/24 maxlen: 24
143.14.131.0/24 maxlen: 24
143.14.174.0/24 maxlen: 24
155.117.124.0/24 maxlen: 24
155.117.126.0/24 maxlen: 24
155.117.159.0/24 maxlen: 24
155.117.166.0/24 maxlen: 24
155.117.178.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.205.0/24 maxlen: 24
155.117.215.0/24 maxlen: 24
155.117.242.0/24 maxlen: 24
162.141.184.0/24 maxlen: 24
162.141.186.0/24 maxlen: 24
162.141.189.0/24 maxlen: 24
167.148.40.0/24 maxlen: 24
167.148.89.0/24 maxlen: 24
167.148.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:13:d4:9c:91:48:a5:34:c7:62:3c:1c:ec:e7:b6:30:34:e5:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 16:40:45 2026 GMT
Not After : Sep 21 16:45:45 2027 GMT
Subject: CN=ED720B4AF0CC81909FFB1C1D50C8602499291BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:2a:11:99:5b:bb:c0:c2:ac:8e:3e:88:7c:
5f:69:ea:42:3c:f6:eb:5d:e2:b7:10:50:74:03:f2:
54:24:39:c0:57:0c:a8:2e:0b:3d:dc:00:2f:45:02:
1e:bd:d6:47:f4:57:22:31:7a:98:d5:d5:27:5f:34:
22:0e:2f:92:13:78:a3:20:35:8c:67:d9:fc:83:bf:
d5:47:50:c2:fc:39:42:f5:37:a4:0d:21:89:83:9d:
7f:e3:49:55:c3:0b:2b:42:2a:40:1f:44:00:4e:45:
21:c3:d5:cf:82:c8:34:f8:c7:45:8b:fd:7a:4c:19:
01:d5:0b:29:f1:50:5b:2b:c3:fc:b6:d7:73:2f:96:
1e:9a:cb:bc:2a:1e:44:67:3a:87:07:8b:ca:a2:fa:
9c:aa:bd:72:d2:6b:6c:0d:b5:b6:38:26:56:3c:2b:
0d:bc:6b:26:50:7a:7a:c7:9a:4a:80:84:75:9e:ec:
7b:04:ad:bc:14:4a:58:6c:8c:86:17:51:e5:e3:e8:
61:88:2e:ca:98:6f:c2:1a:b5:1a:76:09:57:71:e9:
9d:27:db:e4:48:c2:31:7d:c2:0d:87:e6:8f:8f:1a:
9b:e7:71:fa:a6:ba:83:3b:9c:a4:c9:00:19:e9:ab:
1e:91:2c:8d:88:11:59:d5:3e:9b:25:a6:52:f6:9a:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:0B:4A:F0:CC:81:90:9F:FB:1C:1D:50:C8:60:24:99:29:1B:AA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.185.0/24
66.132.200.0/24
66.234.10.0/24
69.90.117.0/24
69.90.226.0/24
143.14.47.0/24
143.14.81.0/24
143.14.111.0/24
143.14.120.0/24
143.14.128.0/24
143.14.131.0/24
143.14.174.0/24
155.117.124.0/24
155.117.126.0/24
155.117.159.0/24
155.117.166.0/24
155.117.178.0/24
155.117.190.0/24
155.117.205.0/24
155.117.215.0/24
155.117.242.0/24
162.141.184.0/24
162.141.186.0/24
162.141.189.0/24
167.148.40.0/24
167.148.89.0/24
167.148.91.0/24
Signature Algorithm: sha256WithRSAEncryption
34:50:1e:3d:da:24:cd:29:39:28:24:29:65:29:3c:d3:9e:e0:
fe:8a:58:ba:b5:d5:71:ff:74:08:70:84:d1:d5:82:52:72:d4:
5f:b5:97:83:d7:ad:ee:52:ef:09:9a:21:82:48:50:84:d4:0e:
67:4c:fe:e0:3d:75:64:af:cc:59:26:9a:6a:7b:93:ef:8c:70:
4c:9b:be:0a:7c:da:d7:2e:ca:44:6c:a9:ac:6a:59:72:c9:f5:
88:a3:26:11:54:ba:77:f2:4c:08:6d:b1:6c:88:40:fa:b4:a0:
8e:ef:96:71:81:f5:f1:5b:d4:4a:7a:10:90:b7:67:b4:27:d3:
b6:6b:36:e5:46:86:c5:ef:c8:ef:ef:de:b2:5c:cc:86:80:53:
34:7b:ba:d2:51:4f:d1:27:5b:c6:44:68:45:07:fc:32:38:79:
45:6b:51:9d:5c:8b:7d:04:f7:3c:b0:5f:b6:7a:ae:a1:10:c6:
20:2e:e3:0e:32:dd:22:dd:41:45:4d:a2:03:c2:2f:3c:02:ec:
56:6f:84:b1:bc:b4:0c:dd:fa:cb:28:48:01:0e:ce:1f:3f:e2:
be:75:d6:34:88:a1:b5:90:c8:16:61:f2:ee:1d:d8:24:e2:6c:
06:38:68:be:18:b8:f7:74:85:55:91:39:56:f8:4e:c2:88:e8:
97:00:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:10 2026 by rpki-client