Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: DbAEDMxqFMk5fAiWDR1If/hni52Ra4oTeBtlvu16buE=
Subject key identifier: D4:EC:04:1A:F0:FD:76:52:BD:0D:45:0F:47:39:A2:03:55:8C:D0:BA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 057FF3BFA964FB51A28401446A2BA6B7C3BE50D3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
Signing time: Tue 21 Jul 2026 07:32:39 +0000
ROA not before: Tue 21 Jul 2026 07:27:39 +0000
ROA not after: Tue 20 Jul 2027 07:32:39 +0000
asID: 214432
IP address blocks: 82.21.125.0/24 maxlen: 24
82.23.13.0/24 maxlen: 24
82.25.37.0/24 maxlen: 24
82.26.202.0/24 maxlen: 24
82.39.187.0/24 maxlen: 24
82.39.211.0/24 maxlen: 24
82.41.57.0/24 maxlen: 24
82.41.74.0/24 maxlen: 24
82.41.97.0/24 maxlen: 24
82.47.11.0/24 maxlen: 24
82.47.12.0/24 maxlen: 24
84.75.129.0/24 maxlen: 24
178.83.16.0/24 maxlen: 24
178.83.102.0/24 maxlen: 24
178.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7f:f3:bf:a9:64:fb:51:a2:84:01:44:6a:2b:a6:b7:c3:be:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 07:27:39 2026 GMT
Not After : Jul 20 07:32:39 2027 GMT
Subject: CN=D4EC041AF0FD7652BD0D450F4739A203558CD0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:fb:3b:c3:77:aa:ed:0c:64:fa:bf:0e:88:
b4:20:0b:11:75:06:7f:75:dd:18:7f:6c:cb:db:36:
b8:7f:8a:be:67:cb:53:85:b5:f5:f3:84:b6:f5:3b:
b3:8e:21:85:43:e8:1f:01:81:80:21:60:79:04:7c:
5f:db:0e:a3:d7:64:63:1c:3c:19:24:34:a1:ce:e4:
9a:30:b5:ff:93:2f:a7:05:87:ce:00:5a:2a:c5:4b:
2c:34:b2:0e:ee:e6:6d:b4:53:ea:5e:c6:0e:ac:7b:
75:0f:68:8e:5e:29:35:12:35:70:1d:5e:30:1d:e9:
ed:99:7a:d7:1c:c1:37:30:55:e7:11:a1:0b:6c:8e:
dc:03:81:81:64:56:07:5f:8e:1e:6d:dd:43:1b:eb:
4d:9b:88:1e:f6:a6:ad:ae:32:74:97:01:36:b4:04:
48:c4:59:c5:36:aa:9a:84:46:c9:6a:80:80:3d:37:
e7:7f:6f:da:c8:c2:30:e6:37:4b:49:23:23:ed:c7:
3b:5d:95:bc:72:48:e0:38:a4:3a:2f:18:f8:21:71:
00:d5:61:07:8a:05:b1:d9:65:b9:58:b1:af:ab:58:
74:c6:e2:fd:8a:dd:90:a7:0d:af:ce:f4:d2:de:ca:
49:9c:49:8c:4f:b2:3b:3f:b7:13:53:51:52:a5:21:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EC:04:1A:F0:FD:76:52:BD:0D:45:0F:47:39:A2:03:55:8C:D0:BA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.125.0/24
82.23.13.0/24
82.25.37.0/24
82.26.202.0/24
82.39.187.0/24
82.39.211.0/24
82.41.57.0/24
82.41.74.0/24
82.41.97.0/24
82.47.11.0-82.47.12.255
84.75.129.0/24
178.83.16.0/24
178.83.102.0/23
Signature Algorithm: sha256WithRSAEncryption
17:96:b7:5c:70:42:f8:a2:1c:4f:12:cf:08:ee:5a:84:e5:a3:
df:97:82:70:b7:20:72:b2:aa:74:59:f1:df:86:2c:ca:03:db:
76:97:1d:39:26:f9:b4:1b:eb:80:8a:80:7e:d2:3d:63:6f:8c:
49:22:de:7f:12:57:17:46:17:df:11:df:bb:63:7b:c6:1e:30:
17:82:7f:d5:dd:92:89:79:75:e0:0a:1f:a2:bc:6b:1c:58:4b:
21:a7:6b:9d:d3:b4:7a:0c:c2:42:45:06:cc:76:72:3f:a2:3a:
07:74:01:95:1b:7b:05:a1:2a:8a:78:1e:69:86:61:4b:5e:25:
36:00:2b:46:57:08:9a:e2:d0:af:85:b6:de:1b:73:1f:0e:49:
f1:a0:b1:85:6f:52:af:72:83:bd:f3:6f:50:d1:45:d5:bc:29:
ba:a9:d7:7b:27:06:9e:78:ad:38:65:03:d8:c6:24:30:9b:6c:
d0:b5:17:87:cd:1d:7e:d7:78:b5:54:e3:1a:28:fb:d0:24:db:
1b:f7:35:29:97:4a:dc:72:12:0b:e8:f0:04:ac:fe:f6:24:71:
6f:b0:09:13:19:c7:4f:14:1c:3c:be:68:58:3d:88:e4:ee:a6:
37:22:2a:98:3a:4f:ef:d2:c6:bc:ed:c8:f5:ef:ed:e8:b0:20:
f8:65:46:b8
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUBX/zv6lk+1GihAFEaiumt8O+UNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjEwNzI3MzlaFw0yNzA3MjAwNzMyMzlaMDMxMTAvBgNV
BAMTKEQ0RUMwNDFBRjBGRDc2NTJCRDBENDUwRjQ3MzlBMjAzNTU4Q0QwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9fs7w3eq7Qxk+r8OiLQgCxF1
Bn913Rh/bMvbNrh/ir5ny1OFtfXzhLb1O7OOIYVD6B8BgYAhYHkEfF/bDqPXZGMc
PBkkNKHO5Jowtf+TL6cFh84AWirFSyw0sg7u5m20U+pexg6se3UPaI5eKTUSNXAd
XjAd6e2ZetccwTcwVecRoQtsjtwDgYFkVgdfjh5t3UMb602biB72pq2uMnSXATa0
BEjEWcU2qpqERslqgIA9N+d/b9rIwjDmN0tJIyPtxztdlbxySOA4pDovGPghcQDV
YQeKBbHZZblYsa+rWHTG4v2K3ZCnDa/O9NLeykmcSYxPsjs/txNTUVKlIbrbAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU1OwEGvD9dlK9DUUPRzmiA1WM0LowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAUhV9
AwQAUhcNAwQAUhklAwQAUhrKAwQAUie7AwQAUifTAwQAUik5AwQAUilKAwQAUilh
MAwDBABSLwsDBABSLwwDBABUS4EDBACyUxADBAGyU2YwDQYJKoZIhvcNAQELBQAD
ggEBABeWt1xwQviiHE8SzwjuWoTlo9+XgnC3IHKyqnRZ8d+GLMoD23aXHTkm+bQb
64CKgH7SPWNvjEki3n8SVxdGF98R37tje8YeMBeCf9Xdkol5deAKH6K8axxYSyGn
a53TtHoMwkJFBsx2cj+iOgd0AZUbewWhKop4HmmGYUteJTYAK0ZXCJri0K+Ftt4b
cx8OSfGgsYVvUq9yg73zb1DRRdW8Kbqp13snBp54rThlA9jGJDCbbNC1F4fNHX7X
eLVU4xoo+9Ak2xv3NSmXStxyEgvo8ASs/vYkcW+wCRMZx08UHDy+aFg9iOTupjci
Kpg6T+/SxrztyPXv7eiwIPhlRrg=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:40:31 2026 by rpki-client