Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: c06HmYavjFOL909J+vFhiO5AeEdIIleRyxviYI0+MYY=
Subject key identifier: 3C:48:22:30:79:1B:EB:18:BD:2F:0F:B4:AB:E6:76:B8:19:0D:F6:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4CBF9F5689E725D95FD2CBDF4E38DC047898D4E8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214025.roa
Signing time: Wed 25 Mar 2026 10:16:10 +0000
ROA not before: Wed 25 Mar 2026 10:11:10 +0000
ROA not after: Wed 24 Mar 2027 10:16:10 +0000
asID: 214025
IP address blocks: 82.26.88.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
84.75.10.0/24 maxlen: 24
84.75.27.0/24 maxlen: 24
178.83.143.0/24 maxlen: 24
178.83.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bf:9f:56:89:e7:25:d9:5f:d2:cb:df:4e:38:dc:04:78:98:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 25 10:11:10 2026 GMT
Not After : Mar 24 10:16:10 2027 GMT
Subject: CN=3C482230791BEB18BD2F0FB4ABE676B8190DF6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:5d:ad:1d:7f:e3:0b:63:b9:12:cc:7d:96:
55:3a:8a:b9:ca:26:c7:f5:1c:0b:3e:d6:a2:99:57:
77:ab:fb:e4:8c:27:98:63:d0:0c:33:3d:4f:f6:21:
9a:1a:96:80:5d:db:cf:e8:21:63:7b:11:39:8a:66:
f0:d9:07:24:fa:d6:01:5d:21:4f:5c:ea:87:4d:38:
f0:c8:9b:27:03:60:aa:43:05:1f:a9:6e:d5:d0:b9:
48:0c:a0:b7:73:ca:f5:5f:e6:de:f2:1f:ab:2c:cb:
26:8c:05:be:a4:b0:d2:34:c1:39:2c:b8:68:ad:ce:
6f:14:d7:1e:c2:22:75:cf:42:fd:6f:eb:a8:13:61:
79:00:e8:2e:bc:fe:c5:03:6b:b4:71:ee:b4:49:b2:
34:91:24:7e:f8:77:02:27:bd:ce:e9:7d:0d:d5:79:
d5:dc:50:e5:1e:48:b4:1a:38:99:df:8c:4a:7c:88:
16:3b:d8:38:b5:40:04:49:3f:7c:ec:88:97:77:36:
de:80:f9:c2:55:3c:57:b5:f4:ff:5f:9e:6f:7c:3d:
34:b6:8f:2a:eb:c7:c2:05:c1:d1:5c:08:6c:b3:3f:
8a:eb:dd:da:a5:a9:fa:9a:63:77:e6:88:28:32:6c:
64:98:4d:a4:28:44:66:7f:5a:82:54:7a:b3:ce:75:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:22:30:79:1B:EB:18:BD:2F:0F:B4:AB:E6:76:B8:19:0D:F6:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.88.0/24
82.29.48.0/24
84.75.10.0/24
84.75.27.0/24
178.83.143.0/24
178.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
52:dc:59:2e:9d:96:33:ee:53:0c:af:c6:92:66:cb:f2:5b:1d:
04:43:d6:f9:ca:11:6a:75:26:da:02:69:dd:0f:10:3a:36:b6:
0f:6d:80:f1:51:2a:cb:3e:ce:91:fe:f3:aa:b9:bf:81:f8:80:
fb:45:89:6b:36:31:df:ac:39:68:fc:9a:ac:5d:25:f0:65:a6:
07:b0:7d:9a:fd:32:5b:d6:3a:ba:23:42:f2:cd:62:3e:48:12:
cd:ad:50:3e:dd:d4:53:40:6b:a3:ec:bb:2c:b5:67:26:c2:30:
ed:bb:0d:9b:cc:8b:7e:e5:f6:d6:d3:b7:21:3d:ac:68:49:ae:
eb:27:0d:5e:cd:81:88:ea:59:39:3c:51:46:44:9e:0e:43:51:
ae:3c:67:cb:4c:08:ed:44:71:9e:20:f3:f7:ed:aa:b6:ab:5e:
bf:0c:2a:a5:da:22:e6:49:b2:e5:5b:2f:2a:3a:bc:1a:5d:41:
b4:60:27:e0:3a:3a:cd:8e:de:17:d7:56:ad:f3:01:df:d4:2d:
74:1f:e6:51:35:98:f3:26:e9:7e:b9:bc:1d:da:6f:30:c2:e2:
35:b5:d7:bc:d2:a0:f4:55:7c:a2:d0:e1:61:86:55:03:93:aa:
23:b1:be:53:d6:13:b0:5e:77:6a:8e:c6:e2:ac:b0:11:70:51:
87:6f:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:31 2026 by rpki-client