Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: H94uyftfBdrGAOslV5U0XvHnmJ8OPxnsSqZ4cFcYsDk=
Subject key identifier: FB:BC:B7:C3:9E:C7:B9:ED:C2:BC:1A:14:9D:D9:6D:62:0C:08:D9:B5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3FB1F013E28C73533B017D590D55CD0EA3CE5F69
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
Signing time: Sat 14 Nov 2026 00:02:20 +0000
ROA not before: Fri 13 Nov 2026 23:57:20 +0000
ROA not after: Sat 13 Nov 2027 00:02:20 +0000
asID: 214483
IP address blocks: 89.19.50.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
191.96.231.0/24 maxlen: 24
191.101.22.0/24 maxlen: 24
191.101.123.0/24 maxlen: 24
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:f0:13:e2:8c:73:53:3b:01:7d:59:0d:55:cd:0e:a3:ce:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 13 23:57:20 2026 GMT
Not After : Nov 13 00:02:20 2027 GMT
Subject: CN=FBBCB7C39EC7B9EDC2BC1A149DD96D620C08D9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:9d:c1:de:e8:d2:61:09:62:c9:ec:82:b1:
72:56:d3:ed:25:42:28:a0:cf:b3:57:94:b5:79:43:
87:97:91:3e:08:cd:c7:ed:02:7f:0a:26:80:bd:f9:
ed:1d:9a:05:67:b8:de:1a:8b:51:42:03:36:e4:e6:
9d:fb:3e:5c:eb:5f:54:5f:06:6f:db:01:ae:67:75:
04:96:dd:5f:0c:40:03:a4:ae:7d:bb:53:e2:c8:be:
a2:29:4e:e0:70:6a:1f:24:d2:79:2d:57:89:72:50:
7f:45:aa:9f:e3:78:a2:3e:e1:19:8e:2a:3a:13:76:
94:70:36:97:ef:35:06:96:3b:82:ff:b6:bf:12:8b:
28:bb:a8:ab:db:7b:2a:37:12:27:14:bd:1d:a3:54:
ce:d9:6f:dc:9b:36:e2:07:21:80:c8:ff:c2:bb:a2:
4a:9d:c9:ca:b0:80:1f:68:90:8f:2a:b4:9d:ea:f8:
a8:be:20:d2:5b:2c:23:d3:ca:7f:b2:e4:32:87:e0:
83:15:3d:82:05:de:0f:c8:14:27:8f:25:6a:c3:67:
87:57:83:c5:8b:ae:e6:c4:0f:dc:b1:ba:89:26:fd:
d6:40:62:ea:10:d2:d9:f9:ef:c3:7f:e2:91:9d:ae:
52:cd:f3:cc:96:5a:04:ae:c9:69:b9:62:8b:6a:bc:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:B7:C3:9E:C7:B9:ED:C2:BC:1A:14:9D:D9:6D:62:0C:08:D9:B5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.50.0/24
181.214.2.0/24
181.214.33.0/24
181.214.132.0/24
181.214.205.0/24
191.96.231.0/24
191.101.22.0/24
191.101.123.0/24
IPv6:
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
3e:13:65:d4:40:8e:55:6d:2c:63:a1:9d:8a:ae:5c:34:e5:90:
53:56:a1:e0:e7:cb:17:28:6e:eb:65:4e:66:ba:b6:fd:59:70:
f6:91:81:3c:51:cf:f0:09:e7:32:a0:6f:a3:2a:41:fd:be:d2:
49:11:63:e9:71:cd:33:38:aa:bf:15:8a:56:d8:bd:c2:78:cd:
eb:3b:cd:37:45:96:6c:74:31:f1:1f:4e:2e:b4:2d:a3:55:26:
28:67:f9:df:fa:80:74:b3:f4:59:75:6c:b9:8a:ce:a5:07:56:
61:5e:7c:f0:3c:e8:2d:7b:ea:26:15:0b:9c:73:eb:de:9e:bd:
bf:96:04:4a:4b:7d:e6:6a:0a:f1:a5:38:9a:52:22:bf:1f:e2:
d1:1e:f9:f7:2d:88:71:1b:54:27:71:0a:c9:2f:f8:24:29:dc:
27:f7:7b:b8:3d:60:2d:7c:47:1a:e4:cc:33:7d:9b:56:12:8e:
fe:a6:f4:84:36:27:19:6a:58:41:b7:40:0a:4e:89:27:5c:aa:
f3:8c:30:54:ba:21:df:15:df:70:55:1b:70:7f:44:37:2a:cb:
5f:ae:f7:69:7e:32:68:1e:83:6f:a0:0a:a6:39:cc:92:05:e1:
12:e4:88:07:3e:4f:32:0a:3f:57:8c:63:c7:e5:09:7a:09:40:
ef:ba:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:55:33 2026 by rpki-client