Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214456.roa
File: AS214456.roa (raw, json)
Hash identifier: 18X1PX+ZtFrM2ME19UpZab1ia4pUyFAzD7y3ERak5SM=
Subject key identifier: C1:7B:0B:72:21:7A:BE:4F:28:5F:5F:1E:3F:3F:48:4F:04:3C:9A:D8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26E6E2B19BC27D71BE354F8783CFC446913A7FDA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214456.roa
Signing time: Mon 16 Mar 2026 16:48:21 +0000
ROA not before: Mon 16 Mar 2026 16:43:21 +0000
ROA not after: Mon 15 Mar 2027 16:48:21 +0000
asID: 214456
IP address blocks: 178.83.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e6:e2:b1:9b:c2:7d:71:be:35:4f:87:83:cf:c4:46:91:3a:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 16 16:43:21 2026 GMT
Not After : Mar 15 16:48:21 2027 GMT
Subject: CN=C17B0B72217ABE4F285F5F1E3F3F484F043C9AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:3d:13:04:c1:be:28:f2:99:e9:8a:af:97:
6c:0c:42:e5:a7:f4:01:1e:0c:82:a5:a5:4f:34:f3:
43:de:5c:a3:52:65:c0:ee:cb:33:36:97:2f:40:c0:
77:e2:95:a1:ca:e3:6d:47:27:fa:50:b5:eb:5f:b4:
d2:f8:91:4f:1d:4b:35:e2:4c:96:df:14:0c:4d:e5:
a3:89:34:90:fd:73:80:84:24:b7:ad:3d:79:b4:83:
79:67:02:08:b0:db:3b:3c:0a:f6:b7:71:26:63:64:
cf:39:cc:08:d7:3a:70:bf:58:4b:4d:11:8c:ed:b5:
05:a4:3c:3c:3d:20:c4:8d:d2:6e:81:8c:bd:95:d0:
ae:2c:48:ef:aa:22:80:da:a9:32:33:ac:09:b3:ef:
7e:00:2d:8f:c1:38:af:7c:8f:1b:08:50:a2:e7:0d:
87:cc:7c:29:30:b7:05:17:3f:b1:f9:9d:a3:2e:6b:
c9:58:41:dd:7a:5b:78:f6:f2:10:05:98:ad:35:01:
b8:1c:05:fb:2a:dd:05:66:75:e0:e4:de:71:6a:fe:
73:18:d3:a1:1b:0a:40:85:73:d4:49:68:b9:20:61:
0a:d4:be:38:96:cd:39:40:6f:b1:72:b6:7b:81:13:
91:6d:e4:d6:e7:d6:20:55:6b:2d:97:95:20:99:de:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:0B:72:21:7A:BE:4F:28:5F:5F:1E:3F:3F:48:4F:04:3C:9A:D8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.9.0/24
Signature Algorithm: sha256WithRSAEncryption
49:06:92:81:50:84:1c:dc:94:38:aa:d6:d4:ec:55:1b:08:7a:
fd:3c:66:7b:f0:08:f2:34:b6:7d:47:e6:21:54:7f:4e:f9:e6:
2e:80:83:9f:d8:47:ad:94:f1:64:4f:c8:ea:43:bc:0f:fb:12:
87:d7:0a:76:78:23:68:74:cf:bc:22:81:ec:71:a6:1f:11:00:
3c:5d:3a:41:cc:ce:8a:48:29:f9:ff:6e:b2:52:fe:b4:3e:7c:
bf:fa:89:bd:94:f7:bb:dd:38:f1:24:9f:54:cd:5f:b8:e8:54:
ac:42:46:23:19:a8:21:74:f9:a8:f6:18:26:65:cc:46:33:cc:
90:a3:d4:0c:78:bc:71:0f:4f:1d:98:38:c2:b0:31:1f:b6:cb:
18:c6:0c:fa:cc:d3:9c:f2:78:7c:fc:eb:cd:67:7f:1c:f3:8b:
e6:13:22:ff:82:54:66:53:30:28:55:5c:32:a6:32:56:ff:3d:
9e:bf:bd:17:d9:4c:69:78:2f:dd:c5:92:28:28:9e:0d:1e:24:
97:5c:a5:18:e8:0c:79:8d:8a:06:cf:dc:be:96:92:5a:90:30:
b6:7a:4d:5c:22:a6:32:db:f2:4d:38:42:f6:bc:b6:1d:ee:58:
f8:1a:8a:c4:7c:5c:ce:eb:4e:ab:9f:04:e9:78:b7:42:ab:d1:
f4:70:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:41 2026 by rpki-client