Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214140.roa
File: AS214140.roa (raw, json)
Hash identifier: 2nacDsg8cr+sgBVAH6vVc3D9bjD94DPjfjpJhbe+WvI=
Subject key identifier: B3:7D:13:C5:0B:6A:37:60:20:2E:1E:30:6E:0C:96:75:D4:01:E3:76
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C0847D1DD68DECE8F54CDA4963D9A12F248A5EE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214140.roa
Signing time: Wed 28 Oct 2026 16:49:39 +0000
ROA not before: Wed 28 Oct 2026 16:44:39 +0000
ROA not after: Wed 27 Oct 2027 16:49:39 +0000
asID: 214140
IP address blocks: 82.38.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:08:47:d1:dd:68:de:ce:8f:54:cd:a4:96:3d:9a:12:f2:48:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 28 16:44:39 2026 GMT
Not After : Oct 27 16:49:39 2027 GMT
Subject: CN=B37D13C50B6A3760202E1E306E0C9675D401E376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:c6:27:19:28:22:cf:70:7f:61:14:99:98:
e7:d6:3c:54:b0:09:16:f3:19:cd:30:9b:f8:e7:34:
3f:23:a3:10:3b:ed:f7:13:f3:fc:66:9e:49:0d:4b:
dc:99:fa:1d:3b:3f:78:a6:52:80:6d:e8:08:ad:41:
ee:b0:80:8d:b8:d5:85:07:d1:2b:05:3f:9f:df:82:
5d:96:5e:83:78:4c:24:a9:2d:35:34:a6:87:8c:3e:
a0:c4:b7:cf:51:38:9e:0e:92:7c:28:a9:10:a7:4d:
50:92:69:9d:dc:74:cb:bc:dd:1c:88:b1:7c:97:87:
5e:ba:23:7b:fd:9a:8a:45:43:dc:fa:22:9d:6e:e7:
92:2d:a1:f3:e7:f2:e8:df:c2:3b:32:d7:31:5f:90:
c8:5d:a3:c2:be:90:f3:fc:cc:9b:3e:71:65:bc:11:
33:dd:28:17:51:54:c8:17:3d:38:4d:5a:f9:2a:b7:
dc:a4:18:fb:b3:5c:6d:32:c3:e2:cb:77:ed:86:a7:
26:cc:90:5e:91:9a:0a:be:60:62:91:d9:84:b6:10:
36:43:10:b5:01:e3:b9:3f:a4:7a:cf:cc:01:2b:49:
42:97:fa:a5:67:a1:45:82:32:1e:32:49:ca:29:0b:
d6:61:dd:8e:08:96:b4:53:5d:3f:82:0f:c6:e7:da:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:13:C5:0B:6A:37:60:20:2E:1E:30:6E:0C:96:75:D4:01:E3:76
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214140.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f7:34:a9:eb:ef:c0:a6:7c:10:20:1a:ad:fe:24:aa:0a:17:
cf:14:76:7b:1f:84:de:be:33:27:ae:e4:d4:00:8f:df:4b:c6:
ec:9f:76:51:4d:34:52:a6:d9:d8:99:61:7d:79:3b:40:65:9b:
53:fa:30:06:88:60:c1:6c:0f:8f:b7:ab:3d:03:30:69:01:8c:
01:07:bb:6d:04:21:dd:0f:b5:37:82:2c:d0:09:53:db:11:52:
61:5e:ec:49:4d:02:53:61:03:cb:0e:a1:37:ed:25:22:9d:81:
de:80:a7:3f:a3:5d:b5:5a:37:8d:75:b0:a1:8a:dd:d2:42:24:
32:6f:ac:95:fa:97:c4:3f:ac:79:dd:a9:3c:05:a0:cf:c5:26:
cd:cd:dd:e6:24:66:a1:0a:64:6e:ef:33:47:39:57:e6:2a:72:
a9:04:29:f0:22:82:2e:81:67:97:df:e1:e4:6f:6b:0e:f5:8a:
7e:91:48:ac:74:5a:c8:7f:05:2b:8f:c1:fe:60:4f:2d:26:3c:
be:86:89:1d:4a:e9:88:90:eb:29:25:34:7b:7e:e1:ee:56:67:
6a:c7:99:aa:92:12:92:9b:a9:42:d0:56:c1:6f:c0:c3:2f:6b:
0b:4e:be:ec:e2:50:ed:0d:f3:79:c7:82:d0:f2:04:3b:6b:c7:
61:f0:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:29:07 2026 by rpki-client