Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: 8LZ6qYOdUnAB9TGgW7P/nEcHBFZ7jLzzqo6RnzbL86c=
Subject key identifier: AB:B6:69:B3:D9:E4:2C:BC:47:2C:35:11:DD:AC:2F:CD:EF:65:94:12
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 0A7C30F9566F409C4B432A3036388FD907602C99
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa
Signing time: Tue 10 Nov 2026 12:54:29 +0000
ROA not before: Tue 10 Nov 2026 12:49:29 +0000
ROA not after: Tue 09 Nov 2027 12:54:29 +0000
asID: 214432
IP address blocks: 79.176.29.0/24 maxlen: 24
79.176.92.0/24 maxlen: 24
79.176.104.0/24 maxlen: 24
79.176.144.0/24 maxlen: 24
79.180.44.0/24 maxlen: 24
79.180.45.0/24 maxlen: 24
79.180.46.0/24 maxlen: 24
79.180.48.0/24 maxlen: 24
79.180.49.0/24 maxlen: 24
79.180.50.0/24 maxlen: 24
79.180.51.0/24 maxlen: 24
79.180.56.0/24 maxlen: 24
79.180.57.0/24 maxlen: 24
79.180.58.0/24 maxlen: 24
79.182.58.0/24 maxlen: 24
79.182.72.0/24 maxlen: 24
79.182.229.0/24 maxlen: 24
79.182.238.0/24 maxlen: 24
79.183.9.0/24 maxlen: 24
79.183.39.0/24 maxlen: 24
79.183.56.0/24 maxlen: 24
79.183.65.0/24 maxlen: 24
79.183.80.0/24 maxlen: 24
79.183.102.0/24 maxlen: 24
79.183.107.0/24 maxlen: 24
79.183.182.0/24 maxlen: 24
79.183.234.0/24 maxlen: 24
109.64.31.0/24 maxlen: 24
109.64.51.0/24 maxlen: 24
109.64.87.0/24 maxlen: 24
109.65.99.0/24 maxlen: 24
109.65.107.0/24 maxlen: 24
109.66.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7c:30:f9:56:6f:40:9c:4b:43:2a:30:36:38:8f:d9:07:60:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Nov 10 12:49:29 2026 GMT
Not After : Nov 9 12:54:29 2027 GMT
Subject: CN=ABB669B3D9E42CBC472C3511DDAC2FCDEF659412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:dc:ce:bd:38:97:1d:5b:70:ab:b6:fd:7c:
cf:62:51:ec:fb:37:fc:c2:75:11:56:85:68:cf:8e:
45:da:b3:7a:f9:7d:4e:8d:8d:d9:0a:2a:93:4d:14:
0e:a9:fc:c9:f6:de:2d:75:2d:d1:67:2f:3e:37:5d:
f2:f8:41:46:64:2a:0d:77:7c:02:11:aa:df:4f:89:
5b:4c:0a:95:f1:d6:aa:2a:e1:88:0c:59:3d:bf:b7:
ef:0e:3c:25:69:7c:f1:92:3a:47:b3:1b:ed:07:ab:
a7:04:ae:51:ce:7a:f2:53:04:9d:4d:6b:c7:f5:4e:
bf:83:d7:28:78:97:00:e5:85:02:65:2d:cc:15:1b:
71:33:e7:7f:a7:15:8b:ae:72:c1:e7:e9:35:eb:3c:
89:74:6e:1e:bf:e8:97:1d:fb:37:a4:dd:d7:c1:46:
f9:f7:77:d8:7a:ab:13:f7:03:bf:fc:27:b5:53:f1:
33:94:a1:65:b0:24:69:f5:46:f6:4e:3a:bc:f9:30:
ce:ec:2d:00:19:3d:61:60:8e:4a:64:5b:04:5f:cd:
6e:09:49:e8:6d:73:aa:3c:1e:35:46:36:a5:0a:d6:
04:f4:5a:44:0c:ae:9f:f7:8a:92:55:ba:02:96:de:
0b:4a:d2:34:7a:ec:3a:ac:2f:ab:c6:fb:50:5c:7a:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B6:69:B3:D9:E4:2C:BC:47:2C:35:11:DD:AC:2F:CD:EF:65:94:12
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.29.0/24
79.176.92.0/24
79.176.104.0/24
79.176.144.0/24
79.180.44.0-79.180.46.255
79.180.48.0/22
79.180.56.0-79.180.58.255
79.182.58.0/24
79.182.72.0/24
79.182.229.0/24
79.182.238.0/24
79.183.9.0/24
79.183.39.0/24
79.183.56.0/24
79.183.65.0/24
79.183.80.0/24
79.183.102.0/24
79.183.107.0/24
79.183.182.0/24
79.183.234.0/24
109.64.31.0/24
109.64.51.0/24
109.64.87.0/24
109.65.99.0/24
109.65.107.0/24
109.66.81.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bf:29:96:f5:86:57:72:73:9a:82:e5:e5:e3:d5:db:59:84:
f8:fa:a4:da:7d:18:fc:a8:ac:be:0f:00:83:c8:8b:fc:5a:a9:
09:22:5d:8d:07:7d:d6:5c:6c:9d:5e:13:e1:16:d6:8d:59:c8:
4e:4d:f7:15:4f:03:2f:a6:3d:7d:77:03:97:4a:87:fb:50:47:
db:09:b1:af:0a:99:3e:e3:b2:cf:dc:2f:7d:34:c6:ee:24:e8:
95:09:7d:5f:14:9b:ba:87:98:cd:2a:16:d7:8d:36:df:84:c6:
5b:33:b9:74:e0:59:1f:c2:3e:52:ff:6b:30:2c:45:03:6e:3f:
9a:be:64:1c:20:b8:6d:5f:0f:e9:1a:f1:62:ce:2b:5f:03:ee:
d7:24:3e:c4:86:49:55:bd:69:c0:f6:3d:83:de:27:24:1b:5e:
7d:14:b0:6a:1e:ed:7b:f1:f9:52:16:f8:2b:00:fd:dc:be:e7:
41:3e:52:3a:b5:02:d4:a6:f2:97:c2:bc:0e:88:3e:c2:a6:ad:
b8:be:6a:cc:46:fe:a8:1b:87:97:0c:b9:ef:90:43:e6:16:66:
47:e6:1e:35:a1:6b:38:16:30:77:0e:4f:cc:62:02:8e:f2:08:
19:9e:90:c5:f6:ec:98:24:48:5c:cf:a4:00:fe:4e:d4:92:af:
7a:b6:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:46 2026 by rpki-client