Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: aZ/M/YH46lWjFUeOjySks/ZD/0If9+kBKNiol7MZG/4=
Subject key identifier: 54:52:84:DB:71:49:D1:EA:BE:F3:D5:ED:35:FD:F1:2B:F7:45:CB:2D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5992576955895E1F71DCFE282DDDDB8D3AB83170
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214025.roa
Signing time: Tue 12 May 2026 12:19:27 +0000
ROA not before: Tue 12 May 2026 12:14:27 +0000
ROA not after: Tue 11 May 2027 12:19:27 +0000
asID: 214025
IP address blocks: 82.39.233.0/24 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.43.0/24 maxlen: 24
82.47.57.0/24 maxlen: 24
82.47.107.0/24 maxlen: 24
82.47.135.0/24 maxlen: 24
82.47.148.0/24 maxlen: 24
82.47.180.0/24 maxlen: 24
82.47.182.0/24 maxlen: 24
82.47.213.0/24 maxlen: 24
82.47.217.0/24 maxlen: 24
82.47.230.0/24 maxlen: 24
84.75.167.0/24 maxlen: 24
84.75.182.0/24 maxlen: 24
84.75.193.0/24 maxlen: 24
84.75.208.0/24 maxlen: 24
178.83.160.0/24 maxlen: 24
178.83.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:92:57:69:55:89:5e:1f:71:dc:fe:28:2d:dd:db:8d:3a:b8:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 12 12:14:27 2026 GMT
Not After : May 11 12:19:27 2027 GMT
Subject: CN=545284DB7149D1EABEF3D5ED35FDF12BF745CB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:c4:4c:71:f0:28:b0:d4:ec:24:0a:cf:87:
1d:93:e8:b6:55:ac:a2:66:9c:3a:7b:19:13:24:f7:
72:a1:a1:b5:09:75:97:48:72:c8:ee:b8:dc:9b:d3:
ed:24:aa:3d:66:db:26:43:6d:0a:b9:0c:3d:41:e2:
c6:fc:5c:b6:a8:07:d3:45:77:1f:b0:0c:25:40:a1:
39:ae:01:a0:ef:33:d0:aa:f1:0f:43:bb:73:de:e4:
23:5a:28:d7:c9:ef:08:d4:a4:2a:c4:70:da:52:a6:
7f:62:f9:1c:df:81:db:89:95:ba:85:00:e2:57:55:
fa:00:8b:a1:ea:8e:85:4d:bb:a9:19:21:ec:e5:86:
d0:9f:0e:e7:dd:65:4b:bc:1b:6a:cf:fb:98:de:9e:
52:9c:39:ef:f6:16:30:b9:36:3f:bb:18:a4:e2:a8:
a3:a7:e0:a2:d9:bd:7d:d6:c1:93:5c:96:40:fd:89:
bc:0e:bf:fa:57:13:8b:e0:41:a6:2e:74:4e:39:03:
8e:11:85:72:1b:a6:61:bf:9e:72:de:3c:a5:c1:9b:
3f:4d:e0:b9:2e:13:9e:5b:e0:77:18:c3:05:02:23:
d5:d0:aa:63:48:1b:d9:11:23:6f:21:e2:d9:4f:fa:
e4:52:8a:8f:12:82:58:b6:35:a1:83:59:2c:59:bf:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:84:DB:71:49:D1:EA:BE:F3:D5:ED:35:FD:F1:2B:F7:45:CB:2D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.233.0/24
82.47.23.0/24
82.47.43.0/24
82.47.57.0/24
82.47.107.0/24
82.47.135.0/24
82.47.148.0/24
82.47.180.0/24
82.47.182.0/24
82.47.213.0/24
82.47.217.0/24
82.47.230.0/24
84.75.167.0/24
84.75.182.0/24
84.75.193.0/24
84.75.208.0/24
178.83.160.0/24
178.83.162.0/24
Signature Algorithm: sha256WithRSAEncryption
92:32:80:86:f8:f1:a4:d1:63:cf:65:16:51:7f:6d:72:22:16:
6e:56:d6:e4:26:79:6a:4c:d4:9d:64:99:fb:2c:df:dc:be:3b:
42:c3:68:e8:ce:f8:47:41:3e:20:4d:6d:35:bb:14:8f:b0:ca:
9d:6a:ed:5f:02:7c:db:8d:de:94:9b:e9:c5:9f:35:ff:32:5e:
4c:3c:cf:81:3f:21:c6:c3:29:2e:63:d2:3d:11:48:ea:8e:18:
ba:11:de:e9:e5:42:e5:70:82:02:73:f1:5d:1c:31:57:45:af:
f0:94:a6:84:09:0c:a7:bf:93:01:9e:14:09:c1:44:a6:87:36:
0e:b2:d4:b7:9b:9a:02:d2:9c:10:2f:42:6b:02:ad:5b:1f:54:
7a:f2:f3:b1:3a:c8:4c:d2:2c:fc:df:af:d0:2c:4e:17:17:74:
77:9b:8c:fc:27:65:59:56:09:64:a2:5d:fe:e7:dc:86:e9:3a:
97:4f:01:51:ef:8d:3f:39:c2:ee:47:40:00:98:21:65:65:a1:
24:f7:d8:7d:f0:24:2b:60:e4:73:3b:23:f7:34:e3:8a:56:d5:
85:8e:5c:37:c0:2e:fc:9c:c5:b7:06:6a:dd:2f:6a:70:d6:f3:
2a:ba:04:6c:9d:2a:b7:92:ca:37:85:7e:3d:9e:62:c6:b5:65:
18:3d:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:39:47 2026 by rpki-client