Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
File: AS214882.roa (raw, json)
Hash identifier: hUNVPM537oKoibIAfR181De5+2Sn50EwVM6u8n7sSrU=
Subject key identifier: 23:E7:F9:83:F3:EF:99:17:00:24:50:2C:3A:E5:41:61:75:BC:B6:1F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 24B9CACCE5C9F0FCC660D2C2A2B570E9A530AEA2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
Signing time: Thu 12 Mar 2026 16:28:31 +0000
ROA not before: Thu 12 Mar 2026 16:23:31 +0000
ROA not after: Thu 11 Mar 2027 16:28:31 +0000
asID: 214882
IP address blocks: 178.83.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b9:ca:cc:e5:c9:f0:fc:c6:60:d2:c2:a2:b5:70:e9:a5:30:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 12 16:23:31 2026 GMT
Not After : Mar 11 16:28:31 2027 GMT
Subject: CN=23E7F983F3EF99170024502C3AE5416175BCB61F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:b8:9c:91:0f:2e:e4:05:06:ce:5d:47:46:
6d:dd:4b:9f:fd:ae:cb:2d:80:37:44:29:65:9e:70:
82:cc:46:b2:9d:1f:e8:55:a1:53:d9:52:dc:92:b2:
72:47:b8:40:e3:27:70:23:ff:f7:b7:67:e6:d8:c3:
4a:ec:6b:a3:f8:62:62:03:bb:62:1e:9e:d8:4d:de:
3d:b9:39:90:cf:f7:57:e7:f6:1a:b0:e0:4f:5c:4e:
b4:be:18:5c:6c:91:a4:98:65:96:00:26:23:ab:09:
25:52:40:18:e7:cf:f5:6e:69:3e:c6:db:51:d7:34:
f8:ae:06:31:6d:65:cb:f0:26:be:22:34:b0:98:39:
0d:10:03:cc:7a:69:c3:bb:03:15:c8:37:2b:13:e9:
aa:60:66:a9:9e:c7:72:52:a5:7b:90:b7:31:8d:75:
83:e5:04:46:cf:9b:1b:25:fc:4a:88:60:7f:32:5a:
2d:f0:38:97:88:e2:61:65:43:5c:12:00:0a:f0:e7:
20:0b:e8:f5:13:68:4d:89:f5:68:62:0e:92:39:2a:
54:fb:41:e1:2e:32:8f:69:92:70:72:19:8f:5b:84:
7b:69:fe:c7:38:fc:f8:30:62:32:99:33:8a:1b:cc:
b9:af:c3:d2:20:04:34:00:d2:08:7b:d5:30:95:f4:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:F9:83:F3:EF:99:17:00:24:50:2C:3A:E5:41:61:75:BC:B6:1F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.188.0/24
Signature Algorithm: sha256WithRSAEncryption
10:44:b6:73:d7:c8:67:63:23:33:54:8e:f9:99:92:a4:14:57:
f6:66:44:a4:4b:36:8d:fd:b2:35:c6:07:19:6b:e5:55:39:e9:
15:88:eb:b8:6f:03:ea:44:14:0a:dd:f1:b1:cc:c3:7d:25:a0:
13:4c:70:45:27:4f:2c:15:93:ae:92:d7:bc:47:ee:18:d5:57:
e7:cd:18:e7:d0:2e:7a:75:bf:16:93:7c:3d:b1:c8:52:eb:8b:
09:ad:c2:3d:ea:13:15:96:bb:55:03:b7:53:6d:43:fd:d6:b0:
5c:03:5e:c9:35:ac:a3:24:ab:8a:8b:81:a9:46:3f:4c:bf:24:
e4:e1:e0:b8:b3:77:0b:36:f2:eb:c0:ec:60:6b:82:ea:b3:f3:
fc:ad:87:96:bc:dc:7e:a7:52:df:1c:fc:25:91:ba:f0:12:df:
96:c2:3c:57:03:e2:3e:70:1b:11:6b:d7:d5:64:0e:d2:be:dc:
b7:60:cb:62:5d:9f:3b:1a:45:a9:8b:ef:c4:15:a5:2a:68:de:
99:7a:56:ad:fa:1e:cc:59:f2:60:61:1d:97:05:98:30:cc:9d:
f6:78:a5:0f:f9:91:8b:60:70:ba:b3:d0:a5:5c:02:32:f9:13:
18:6b:bc:10:29:75:10:71:a6:b7:c9:58:27:94:fb:80:ae:f9:
81:ed:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:43 2026 by rpki-client