Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: 1/QmoAAearTtQM3UtbSZn2JJ43jCa3et2sWOfYi4I8I=
Subject key identifier: 4D:9A:B7:E8:FF:0E:5B:FB:D5:EC:40:0F:00:43:D7:64:84:8E:B2:39
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 44229AE96DDBD0B5AA245EC2C8A3A35785C6D386
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
Signing time: Wed 11 Nov 2026 00:02:07 +0000
ROA not before: Tue 10 Nov 2026 23:57:07 +0000
ROA not after: Wed 10 Nov 2027 00:02:07 +0000
asID: 214483
IP address blocks: 66.132.200.0/24 maxlen: 24
66.234.10.0/24 maxlen: 24
69.90.117.0/24 maxlen: 24
69.90.226.0/24 maxlen: 24
155.117.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:22:9a:e9:6d:db:d0:b5:aa:24:5e:c2:c8:a3:a3:57:85:c6:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 10 23:57:07 2026 GMT
Not After : Nov 10 00:02:07 2027 GMT
Subject: CN=4D9AB7E8FF0E5BFBD5EC400F0043D764848EB239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:5c:9c:89:da:ab:6d:f4:1b:f9:a7:dd:67:
be:d1:47:64:9e:d4:3c:28:8a:91:04:ca:08:95:bb:
ee:ab:88:6f:73:52:cd:fa:85:b2:e1:c2:db:52:06:
37:94:c8:46:e4:e8:40:c7:e0:9d:ac:dd:5b:7c:00:
f2:49:30:aa:e9:f0:8c:b7:fa:f5:87:87:61:1f:c8:
7d:88:00:55:4b:fa:57:76:09:5a:aa:35:04:72:a6:
fe:ad:7d:ad:76:b3:3d:4a:d4:e8:04:a6:92:09:58:
2f:8c:d3:05:23:90:00:ee:73:be:de:4e:0f:8f:65:
2c:c9:dd:1f:6b:52:f0:8a:77:23:b1:50:8f:a1:20:
eb:ea:15:8f:3c:9f:fd:94:70:d4:16:39:dc:54:6e:
8f:b5:73:fe:90:ae:c1:2f:ef:92:d8:5f:f0:77:40:
e3:9b:fd:df:97:73:8d:0b:20:44:70:7b:b4:c0:31:
43:06:36:d1:f9:ad:c6:4d:03:ce:fe:9d:0a:6d:ff:
41:d3:e0:49:c3:fd:82:ca:de:83:39:29:a0:49:17:
37:38:ef:7f:bb:12:e1:af:ee:1e:63:95:06:ae:44:
50:52:88:42:c1:35:6e:ae:29:10:b6:a6:85:30:3f:
2e:db:d9:2a:26:bf:76:4d:b1:82:7e:bd:7d:59:d2:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:B7:E8:FF:0E:5B:FB:D5:EC:40:0F:00:43:D7:64:84:8E:B2:39
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.200.0/24
66.234.10.0/24
69.90.117.0/24
69.90.226.0/24
155.117.166.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7c:01:b0:1f:3f:97:a1:83:84:5c:d4:93:12:81:09:c0:90:
c7:a2:74:b1:17:6f:fb:6c:62:cb:f6:70:af:86:b4:c5:82:4f:
6e:c1:3c:53:19:b8:c0:f7:aa:5d:91:d2:b9:a4:96:1e:a6:e4:
5b:03:89:a7:14:e7:8b:32:3a:14:43:5d:50:b9:92:e0:05:01:
6b:6f:40:3e:7b:59:b0:d9:69:8d:cd:e5:94:11:76:5b:19:cd:
b5:30:a1:d0:0c:ea:ac:d2:55:b1:01:22:c3:46:1a:2a:62:01:
f6:64:88:d4:39:da:f7:da:5a:56:26:fa:ed:95:7a:ed:20:43:
b0:38:f9:b7:ec:85:2b:ec:ab:8d:66:6a:9f:8a:3b:4e:23:b1:
82:d7:2c:b2:67:d2:b8:30:df:c7:3c:d6:c4:85:70:13:67:c3:
f4:df:3e:58:e3:47:7a:2e:46:4d:f0:b6:9a:c0:59:26:cb:8b:
dd:96:9b:e1:e1:48:95:ef:53:8b:69:d4:58:8f:3f:b6:62:6d:
81:34:f0:d3:38:a4:a4:e8:60:2a:cc:f8:ea:06:70:2b:cf:54:
93:df:50:bc:31:32:4c:72:a4:91:11:90:87:34:a4:a8:94:85:
32:a9:ac:e1:43:bb:ef:7c:2b:8f:f3:d4:5f:34:6f:92:e7:eb:
fa:49:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:50:23 2026 by rpki-client