Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: z3cLE6Xt/ZKq/wHnLPinIjy+lI1ENm66gmQ33FVwm2E=
Subject key identifier: 97:E5:1C:CE:B4:A2:59:5F:C2:71:F2:CF:C9:2D:51:FE:EF:60:D2:C6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 29C625B17CDFA95780DF13FA42FA2911C591E7E9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
Signing time: Tue 22 Sep 2026 16:45:18 +0000
ROA not before: Tue 22 Sep 2026 16:40:18 +0000
ROA not after: Tue 21 Sep 2027 16:45:18 +0000
asID: 214483
IP address blocks: 82.21.97.0/24 maxlen: 24
82.21.112.0/24 maxlen: 24
82.22.119.0/24 maxlen: 24
82.22.166.0/24 maxlen: 24
82.23.143.0/24 maxlen: 24
82.23.168.0/24 maxlen: 24
82.23.191.0/24 maxlen: 24
82.24.68.0/24 maxlen: 24
82.24.70.0/24 maxlen: 24
82.25.47.0/24 maxlen: 24
82.26.112.0/24 maxlen: 24
82.27.32.0/24 maxlen: 24
82.27.33.0/24 maxlen: 24
82.27.38.0/24 maxlen: 24
82.27.42.0/24 maxlen: 24
82.27.44.0/24 maxlen: 24
82.27.46.0/24 maxlen: 24
82.27.47.0/24 maxlen: 24
82.27.64.0/24 maxlen: 24
82.27.66.0/24 maxlen: 24
82.27.68.0/24 maxlen: 24
82.27.75.0/24 maxlen: 24
82.27.76.0/24 maxlen: 24
82.38.101.0/24 maxlen: 24
82.39.128.0/24 maxlen: 24
82.47.123.0/24 maxlen: 24
82.47.200.0/24 maxlen: 24
84.75.1.0/24 maxlen: 24
84.75.37.0/24 maxlen: 24
84.75.48.0/24 maxlen: 24
84.75.52.0/24 maxlen: 24
84.75.61.0/24 maxlen: 24
84.75.69.0/24 maxlen: 24
84.75.141.0/24 maxlen: 24
84.75.143.0/24 maxlen: 24
84.75.178.0/24 maxlen: 24
84.75.179.0/24 maxlen: 24
84.75.181.0/24 maxlen: 24
84.75.182.0/24 maxlen: 24
84.75.184.0/24 maxlen: 24
84.75.186.0/24 maxlen: 24
84.75.187.0/24 maxlen: 24
84.75.188.0/24 maxlen: 24
84.75.189.0/24 maxlen: 24
84.75.191.0/24 maxlen: 24
84.75.197.0/24 maxlen: 24
84.75.201.0/24 maxlen: 24
84.75.210.0/24 maxlen: 24
178.83.15.0/24 maxlen: 24
178.83.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c6:25:b1:7c:df:a9:57:80:df:13:fa:42:fa:29:11:c5:91:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 16:40:18 2026 GMT
Not After : Sep 21 16:45:18 2027 GMT
Subject: CN=97E51CCEB4A2595FC271F2CFC92D51FEEF60D2C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:21:15:d1:d5:55:9c:c0:69:4c:57:d2:bc:3e:
e4:ef:be:f1:2d:02:d5:8b:2c:89:e2:da:c8:44:16:
7f:3e:70:ac:a5:12:8b:4b:7d:e7:c2:c2:e5:21:c5:
03:a2:4f:35:cd:37:b3:2e:e9:1a:bc:9b:bb:4c:da:
e6:7a:06:a9:01:e5:ed:56:4a:d3:04:d9:b4:2a:56:
9f:c8:88:e0:2a:3e:c2:dc:d4:a8:17:e9:3f:08:9d:
23:f8:df:f0:6c:db:06:c1:5d:21:0f:83:da:56:64:
57:6e:f0:cd:66:0a:ea:2b:e1:e5:40:b5:a8:62:83:
52:40:1a:6a:0d:07:a8:29:47:f7:8f:f1:64:ba:87:
14:07:18:83:60:e4:f5:27:09:24:66:dd:93:eb:4f:
95:f1:fb:af:7b:66:86:1a:08:3a:8f:05:18:83:11:
95:50:48:33:28:c5:6a:1b:a5:3a:ba:6c:69:3e:27:
a6:fa:3a:f5:a1:e2:34:f2:0a:9a:df:d5:0f:dc:57:
90:f7:73:5d:bf:cd:5f:9c:ac:09:78:65:06:23:31:
98:30:3d:85:1c:57:8e:15:a3:5e:71:fe:25:66:32:
34:94:f9:72:05:7e:78:15:65:3d:9b:c3:a8:00:02:
c4:5c:c0:5e:ab:97:91:7e:84:6b:6c:87:4d:e9:84:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:1C:CE:B4:A2:59:5F:C2:71:F2:CF:C9:2D:51:FE:EF:60:D2:C6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.97.0/24
82.21.112.0/24
82.22.119.0/24
82.22.166.0/24
82.23.143.0/24
82.23.168.0/24
82.23.191.0/24
82.24.68.0/24
82.24.70.0/24
82.25.47.0/24
82.26.112.0/24
82.27.32.0/23
82.27.38.0/24
82.27.42.0/24
82.27.44.0/24
82.27.46.0/23
82.27.64.0/24
82.27.66.0/24
82.27.68.0/24
82.27.75.0-82.27.76.255
82.38.101.0/24
82.39.128.0/24
82.47.123.0/24
82.47.200.0/24
84.75.1.0/24
84.75.37.0/24
84.75.48.0/24
84.75.52.0/24
84.75.61.0/24
84.75.69.0/24
84.75.141.0/24
84.75.143.0/24
84.75.178.0/23
84.75.181.0-84.75.182.255
84.75.184.0/24
84.75.186.0-84.75.189.255
84.75.191.0/24
84.75.197.0/24
84.75.201.0/24
84.75.210.0/24
178.83.15.0/24
178.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e8:95:e0:ce:3b:48:78:1b:66:fe:5c:96:38:fa:2b:3c:8e:
72:70:94:38:e2:71:5c:0e:af:07:ee:74:a2:7f:dc:7e:46:38:
5d:cc:0f:70:49:21:45:e6:d7:2b:9b:96:77:de:fb:ca:f6:ee:
27:f1:d1:c2:d7:12:8e:71:96:b4:b8:80:12:9c:8b:95:5d:46:
ca:ce:35:6b:0f:fe:04:ee:12:d0:42:d4:d1:18:3d:f0:8a:23:
8d:61:d1:e6:eb:f2:83:d7:8d:0f:42:de:8f:3a:96:52:76:d0:
31:43:65:ac:e5:78:f6:87:c8:24:0f:9a:72:16:32:49:fc:a9:
5a:e7:ea:24:2f:68:e4:a4:bd:ae:2e:47:a8:dd:9f:40:3f:a8:
a9:f3:48:7c:c5:f5:b3:f4:b1:d5:fd:31:6f:73:1f:c4:97:05:
66:df:21:cf:47:eb:c3:e0:fe:78:72:15:6b:96:f2:65:62:21:
85:cd:dd:29:df:d2:c6:fa:51:e6:f8:45:98:b2:bf:46:71:df:
a8:31:d4:2b:ea:c7:b9:f1:81:58:67:a5:4e:20:a6:d3:c8:66:
ec:45:73:08:ce:6d:79:43:5a:19:34:bb:7a:c5:da:3a:d5:9e:
1b:12:c6:b8:75:4e:c2:08:02:89:ef:d3:9c:ac:7a:2c:20:d7:
21:89:6d:23
-----BEGIN CERTIFICATE-----
MIIGGDCCBQCgAwIBAgIUKcYlsXzfqVeA3xP6QvopEcWR5+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjIxNjQwMThaFw0yNzA5MjExNjQ1MThaMDMxMTAvBgNV
BAMTKDk3RTUxQ0NFQjRBMjU5NUZDMjcxRjJDRkM5MkQ1MUZFRUY2MEQyQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2IRXR1VWcwGlMV9K8PuTvvvEt
AtWLLIni2shEFn8+cKylEotLfefCwuUhxQOiTzXNN7Mu6Rq8m7tM2uZ6BqkB5e1W
StME2bQqVp/IiOAqPsLc1KgX6T8InSP43/Bs2wbBXSEPg9pWZFdu8M1mCuor4eVA
tahig1JAGmoNB6gpR/eP8WS6hxQHGINg5PUnCSRm3ZPrT5Xx+697ZoYaCDqPBRiD
EZVQSDMoxWobpTq6bGk+J6b6OvWh4jTyCprf1Q/cV5D3c12/zV+crAl4ZQYjMZgw
PYUcV44Vo15x/iVmMjSU+XIFfngVZT2bw6gAAsRcwF6rl5F+hGtsh03phH0ZAgMB
AAGjggMiMIIDHjAdBgNVHQ4EFgQUl+UczrSiWV/CcfLPyS1R/u9g0sYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0NDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgAB
MIIBFAMEAFIVYQMEAFIVcAMEAFIWdwMEAFIWpgMEAFIXjwMEAFIXqAMEAFIXvwME
AFIYRAMEAFIYRgMEAFIZLwMEAFIacAMEAVIbIAMEAFIbJgMEAFIbKgMEAFIbLAME
AVIbLgMEAFIbQAMEAFIbQgMEAFIbRDAMAwQAUhtLAwQAUhtMAwQAUiZlAwQAUieA
AwQAUi97AwQAUi/IAwQAVEsBAwQAVEslAwQAVEswAwQAVEs0AwQAVEs9AwQAVEtF
AwQAVEuNAwQAVEuPAwQBVEuyMAwDBABUS7UDBABUS7YDBABUS7gwDAMEAVRLugME
AVRLvAMEAFRLvwMEAFRLxQMEAFRLyQMEAFRL0gMEALJTDwMEALJTajANBgkqhkiG
9w0BAQsFAAOCAQEApOiV4M47SHgbZv5cljj6KzyOcnCUOOJxXA6vB+50on/cfkY4
XcwPcEkhRebXK5uWd977yvbuJ/HRwtcSjnGWtLiAEpyLlV1Gys41aw/+BO4S0ELU
0Rg98IojjWHR5uvyg9eND0LejzqWUnbQMUNlrOV49ofIJA+achYySfypWufqJC9o
5KS9ri5HqN2fQD+oqfNIfMX1s/Sx1f0xb3MfxJcFZt8hz0frw+D+eHIVa5byZWIh
hc3dKd/SxvpR5vhFmLK/RnHfqDHUK+rHufGBWGelTiCm08hm7EVzCM5teUNaGTS7
esXaOtWeGxLGuHVOwggCie/TnKx6LCDXIYltIw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:16:47 2026 by rpki-client