Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa
File: AS214036.roa (raw, json)
Hash identifier: 4wkAl+BpYvWLklSAO6b8wCIYHiLMajCshHRBUlMztEQ=
Subject key identifier: C1:E1:4C:63:F9:14:19:AB:B8:89:23:58:5A:FC:1A:98:13:39:FC:CC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31D09EFF72D5D5116F091C723C922ECB81159D17
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa
Signing time: Sun 08 Nov 2026 10:20:11 +0000
ROA not before: Sun 08 Nov 2026 10:15:11 +0000
ROA not after: Sun 07 Nov 2027 10:20:11 +0000
asID: 214036
IP address blocks: 82.22.18.0/24 maxlen: 24
82.38.15.0/24 maxlen: 24
82.38.63.0/24 maxlen: 24
82.39.107.0/24 maxlen: 24
82.40.23.0/24 maxlen: 24
82.41.58.0/24 maxlen: 24
82.41.181.0/24 maxlen: 24
178.83.164.0/24 maxlen: 24
178.83.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d0:9e:ff:72:d5:d5:11:6f:09:1c:72:3c:92:2e:cb:81:15:9d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 8 10:15:11 2026 GMT
Not After : Nov 7 10:20:11 2027 GMT
Subject: CN=C1E14C63F91419ABB88923585AFC1A981339FCCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:6b:8c:15:97:21:41:4e:ca:1e:23:4b:a5:
38:67:21:91:b6:30:1f:52:5b:5d:40:7d:a4:fe:c7:
3e:c8:fb:e0:b3:c9:02:06:e8:2d:9a:5b:34:76:24:
f9:1d:58:e0:1b:48:9b:9e:65:43:bd:17:3c:f2:2c:
2c:b9:1d:02:3c:5c:a9:de:d9:4f:0f:50:8e:6c:ce:
06:9d:9b:7d:26:f3:75:b5:1e:b8:7c:6d:a7:ce:b3:
c4:57:cd:23:f8:d6:5a:6e:66:2f:f1:04:93:11:62:
21:7a:29:5a:86:8b:52:00:ad:f5:95:36:33:0c:5b:
03:93:20:d8:0b:a0:80:9f:ff:a1:9e:fb:73:47:99:
8f:8b:65:c8:2e:43:b7:a2:96:75:da:c5:d2:83:b2:
f5:60:82:9b:8e:77:16:a3:6f:9e:6c:92:08:f5:bb:
4e:af:f9:da:5e:0b:c7:3d:1b:92:d6:55:49:37:1e:
78:ec:54:8d:ff:be:9c:c2:32:64:5c:c1:2a:a1:21:
95:a8:a2:a2:f7:b7:ff:95:fb:23:9c:37:bd:1b:79:
c6:ae:ff:35:5b:38:09:4b:05:c4:e4:fc:76:92:a4:
a5:ec:6b:d0:ff:e1:46:c3:1e:5f:ef:89:95:49:92:
8c:8e:31:a6:91:89:cf:59:28:54:3f:de:1e:fb:f0:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:4C:63:F9:14:19:AB:B8:89:23:58:5A:FC:1A:98:13:39:FC:CC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.18.0/24
82.38.15.0/24
82.38.63.0/24
82.39.107.0/24
82.40.23.0/24
82.41.58.0/24
82.41.181.0/24
178.83.164.0/24
178.83.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:da:4a:3c:97:eb:67:08:25:68:34:09:14:80:03:00:f6:53:
53:48:44:fc:f7:49:3d:23:b3:5d:87:e4:6f:c1:70:b0:60:c8:
a9:f2:5e:c7:7f:3b:1f:79:ec:34:db:da:08:58:41:71:f9:cc:
11:f6:23:f4:12:62:ae:d8:c5:a8:ef:80:29:a2:2b:d4:83:3f:
ec:3a:26:7a:4e:88:ca:cb:78:84:10:95:68:76:54:19:1a:01:
d3:d8:41:6c:76:67:97:31:b5:9b:87:3b:79:a7:06:04:46:51:
ac:cf:eb:0e:15:03:70:4f:03:eb:27:34:c1:55:43:b9:12:f1:
33:87:11:e7:4f:86:2e:32:44:61:8c:a4:44:c0:e2:37:66:51:
82:0c:fb:e5:f6:fc:64:e5:1b:b9:10:a0:b3:67:a8:16:6e:25:
2a:15:2b:f9:61:21:6a:50:c0:92:52:42:a9:ac:ab:7c:98:d7:
01:69:41:67:51:aa:2c:6a:d8:3d:81:9b:13:f6:67:b4:b8:5f:
e2:b1:af:da:6d:7a:ab:1d:ed:a3:ef:11:2a:9c:f7:c1:30:ca:
30:7a:ab:95:d1:bf:1f:cc:a7:b4:82:0c:1f:1e:5f:89:d0:96:
21:72:7c:7b:6f:fe:f7:b1:36:ce:a8:15:19:24:b1:a3:c2:ae:
5a:66:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:43:00 2026 by rpki-client