Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
File: AS214979.roa (raw, json)
Hash identifier: VoChX10xE5XnNkCzKbJYAXQwBza2E4k9BolP6xQ/SN4=
Subject key identifier: F8:BA:ED:09:9B:79:A8:DF:37:87:04:AF:07:B5:BB:0E:12:B1:30:9B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2719EDB091A1068B56C59FCD40AD1522B140EB38
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
Signing time: Mon 13 Oct 2025 11:36:57 +0000
ROA not before: Mon 13 Oct 2025 11:31:57 +0000
ROA not after: Mon 12 Oct 2026 11:36:57 +0000
asID: 214979
IP address blocks: 82.22.55.0/24 maxlen: 24
82.26.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:19:ed:b0:91:a1:06:8b:56:c5:9f:cd:40:ad:15:22:b1:40:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 13 11:31:57 2025 GMT
Not After : Oct 12 11:36:57 2026 GMT
Subject: CN=F8BAED099B79A8DF378704AF07B5BB0E12B1309B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:e6:62:9c:7b:2c:27:88:da:5c:60:87:a3:
32:2f:b1:f4:0c:83:fc:d5:70:7f:4f:d0:a3:a1:f8:
51:19:20:0e:c5:1f:1f:f1:48:7f:ab:12:b8:56:c4:
bd:97:29:8a:56:8a:59:3f:fc:f0:bd:2e:22:6e:13:
87:c4:16:c1:97:e4:b3:dc:e1:34:54:86:51:04:42:
db:f5:6d:63:71:70:0f:48:91:46:a2:fa:ca:47:67:
a8:89:75:6a:0f:92:5d:41:7c:29:8b:7c:60:b8:7d:
8b:35:48:33:3b:73:28:b4:02:5a:ec:e4:a7:d7:5e:
2c:87:80:36:b6:51:70:16:6c:42:c2:b3:20:cc:e5:
44:9f:9d:b9:86:c1:74:d7:77:31:32:11:d2:8f:76:
0f:c7:3e:80:8b:66:88:1d:32:ad:4d:ad:e3:eb:bb:
71:21:33:38:08:a1:41:d5:3c:2e:c4:1a:97:a4:7a:
36:c6:bd:bb:da:4a:57:23:6c:b8:ff:45:e7:06:7c:
1b:43:91:1c:2c:ae:26:d0:48:08:aa:15:3b:5f:37:
61:54:e8:35:93:75:be:64:c4:18:62:6c:97:96:11:
15:be:5b:0e:27:04:81:36:86:c8:c3:d0:9f:3f:4c:
38:a1:10:3e:88:58:fc:18:57:02:b0:f3:59:24:eb:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:ED:09:9B:79:A8:DF:37:87:04:AF:07:B5:BB:0E:12:B1:30:9B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.55.0/24
82.26.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f4:f7:98:b2:78:d4:6b:52:07:73:5c:a4:ee:fb:a7:d1:7d:
5c:82:bd:81:1f:76:88:0c:e4:04:6a:47:b8:a5:b0:0a:25:51:
93:d6:41:39:66:72:5f:ee:6a:68:8c:f7:2d:3b:2a:12:0f:b6:
67:8a:1f:45:20:d0:b9:cb:43:86:78:c2:c0:ce:b1:db:e2:e9:
45:4e:3a:bf:1d:cc:66:68:09:ca:61:0a:9c:26:07:02:14:7a:
c1:6e:b4:17:7f:05:3b:58:fd:c3:87:bc:14:f4:58:b2:14:37:
d2:23:8b:78:cd:62:39:00:09:b3:79:d0:e1:a6:73:70:1c:8d:
51:67:26:2b:0c:79:73:1b:cb:74:9e:9e:4e:54:d9:6e:d0:82:
f4:f8:1f:45:14:8c:7d:62:dc:91:f9:43:62:0f:6e:3c:c3:14:
6e:84:a9:fa:18:8c:89:be:07:76:77:82:b0:c4:e4:78:a7:d2:
33:90:dc:18:7c:c4:1a:71:d3:67:2e:ba:00:8a:9d:74:7d:02:
01:0e:3b:d7:ed:23:10:e1:c6:fe:c1:3f:36:34:93:a8:5f:40:
b1:a8:82:18:39:9d:5b:8d:5d:a9:17:61:3b:91:e1:c9:69:d6:
ca:02:2c:99:82:4e:62:f0:35:72:6f:5a:68:9d:ec:d3:ca:b6:
b4:62:d6:b2
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJxntsJGhBotWxZ/NQK0VIrFA6zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEwMTMxMTMxNTdaFw0yNjEwMTIxMTM2NTdaMDMxMTAvBgNV
BAMTKEY4QkFFRDA5OUI3OUE4REYzNzg3MDRBRjA3QjVCQjBFMTJCMTMwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuc+ZinHssJ4jaXGCHozIvsfQM
g/zVcH9P0KOh+FEZIA7FHx/xSH+rErhWxL2XKYpWilk//PC9LiJuE4fEFsGX5LPc
4TRUhlEEQtv1bWNxcA9IkUai+spHZ6iJdWoPkl1BfCmLfGC4fYs1SDM7cyi0Alrs
5KfXXiyHgDa2UXAWbELCsyDM5USfnbmGwXTXdzEyEdKPdg/HPoCLZogdMq1NrePr
u3EhMzgIoUHVPC7EGpekejbGvbvaSlcjbLj/RecGfBtDkRwsribQSAiqFTtfN2FU
6DWTdb5kxBhibJeWERW+Ww4nBIE2hsjD0J8/TDihED6IWPwYVwKw81kk6wb3AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU+LrtCZt5qN83hwSvB7W7DhKxMJswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0OTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhY3
AwQAUhpDMA0GCSqGSIb3DQEBCwUAA4IBAQBt9PeYsnjUa1IHc1yk7vun0X1cgr2B
H3aIDOQEake4pbAKJVGT1kE5ZnJf7mpojPctOyoSD7Znih9FINC5y0OGeMLAzrHb
4ulFTjq/HcxmaAnKYQqcJgcCFHrBbrQXfwU7WP3Dh7wU9FiyFDfSI4t4zWI5AAmz
edDhpnNwHI1RZyYrDHlzG8t0np5OVNlu0IL0+B9FFIx9YtyR+UNiD248wxRuhKn6
GIyJvgd2d4KwxOR4p9IzkNwYfMQacdNnLroAip10fQIBDjvX7SMQ4cb+wT82NJOo
X0CxqIIYOZ1bjV2pF2E7keHJadbKAiyZgk5i8DVyb1ponezTyra0Ytay
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:04:29 2025 by rpki-client