Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: A12uEpeZ3yEL8qwDpdoTpkLGPn6LItw+MwfmQZXU5fE=
Subject key identifier: 78:6F:2A:FF:86:32:19:D8:28:04:80:88:F5:9D:4D:CC:5D:62:58:92
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5733EE34A28D649B5DD7BACF0791F36D8A881549
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Thu 24 Sep 2026 08:25:47 +0000
ROA not before: Thu 24 Sep 2026 08:20:47 +0000
ROA not after: Thu 23 Sep 2027 08:25:47 +0000
asID: 214432
IP address blocks: 51.194.235.0/24 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
188.220.90.0/23 maxlen: 24
188.221.66.0/23 maxlen: 24
188.221.82.0/23 maxlen: 24
188.221.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:33:ee:34:a2:8d:64:9b:5d:d7:ba:cf:07:91:f3:6d:8a:88:15:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 08:20:47 2026 GMT
Not After : Sep 23 08:25:47 2027 GMT
Subject: CN=786F2AFF863219D828048088F59D4DCC5D625892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:1f:99:20:41:44:87:61:59:17:cc:e9:a2:
46:60:1c:41:c5:37:3b:9c:f0:17:56:b8:0b:61:c1:
80:f9:a2:d2:f6:6c:63:24:d7:af:83:3a:f6:93:2c:
4a:0a:1f:4f:1e:71:e9:cd:c7:1a:5e:04:a8:f5:e8:
13:4c:4d:b5:43:ac:3f:eb:92:67:3a:58:75:f8:fb:
66:4f:0e:e1:fc:b0:ef:39:05:18:e4:15:4c:5d:6b:
d8:85:92:85:42:2a:89:b2:ae:20:6d:7f:cf:a3:37:
93:10:7f:e2:84:bf:3a:21:c6:15:08:07:8e:a3:47:
20:d1:74:c0:b8:a0:14:95:46:2d:d6:d2:0d:45:55:
27:61:48:09:f2:db:61:98:bd:d9:e7:6a:cb:e4:cf:
88:5b:2f:19:d9:72:36:cc:b2:90:62:01:e1:4c:ed:
ff:b0:c7:7d:8d:69:fe:b1:54:75:6f:06:d2:ff:80:
b8:27:34:ee:5d:92:8b:a0:00:15:98:ae:b5:e6:a4:
57:74:e7:85:8b:30:10:6d:05:0a:ab:16:ba:e5:39:
ed:6a:2e:12:c1:ce:c4:c5:33:ba:f8:55:fc:7b:5b:
4e:19:99:2a:e3:54:47:96:9a:1f:a2:4a:91:47:70:
b1:77:53:30:ae:85:70:57:84:f4:b7:72:e9:b7:a0:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:2A:FF:86:32:19:D8:28:04:80:88:F5:9D:4D:CC:5D:62:58:92
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.235.0/24
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
188.220.90.0/23
188.221.66.0/23
188.221.82.0/23
188.221.120.0/23
Signature Algorithm: sha256WithRSAEncryption
68:0d:24:32:95:64:16:5b:f0:a0:e4:95:36:d9:7e:a7:99:72:
0b:89:60:1b:75:aa:f6:a6:89:47:25:4b:e7:8c:51:d3:62:44:
9d:aa:f6:0f:17:79:ce:d5:1a:84:f1:8b:4e:38:1f:ac:a6:52:
5d:23:b8:b7:78:48:01:c2:ae:0e:dd:0e:58:49:63:2e:c3:60:
c5:6e:ef:cd:3f:cf:31:6f:21:cc:c3:0b:fa:bc:f7:27:e2:fd:
1a:e0:91:0d:4d:a0:4e:53:8c:59:80:39:4e:31:ba:9d:4f:b9:
11:de:70:93:0d:cb:cc:d2:2e:4b:c0:7e:64:42:f8:05:05:42:
fb:06:15:7d:ac:08:64:57:e4:f5:e1:fa:fe:0c:ae:de:50:7e:
3b:26:4f:5f:92:17:ac:7e:e3:61:1c:62:37:6b:18:3a:3c:33:
1d:c1:ec:42:ed:6a:78:56:98:41:f6:b4:83:93:47:e8:4f:9f:
c1:e8:ea:26:42:22:08:00:45:3e:7c:e8:f2:2a:45:11:2d:18:
f1:85:63:8d:45:fd:ae:21:33:d7:06:3f:50:4c:e0:4c:9c:d9:
e4:e2:48:45:10:88:4d:b8:c6:99:63:44:7a:40:c2:7e:83:18:
a4:0b:0e:4e:02:0a:4e:83:3e:e7:3b:6d:41:63:fe:be:20:ea:
a5:b0:19:d9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVzPuNKKNZJtd17rPB5HzbYqIFUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjQwODIwNDdaFw0yNzA5MjMwODI1NDdaMDMxMTAvBgNV
BAMTKDc4NkYyQUZGODYzMjE5RDgyODA0ODA4OEY1OUQ0RENDNUQ2MjU4OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/B+ZIEFEh2FZF8zpokZgHEHF
Nzuc8BdWuAthwYD5otL2bGMk16+DOvaTLEoKH08ecenNxxpeBKj16BNMTbVDrD/r
kmc6WHX4+2ZPDuH8sO85BRjkFUxda9iFkoVCKomyriBtf8+jN5MQf+KEvzohxhUI
B46jRyDRdMC4oBSVRi3W0g1FVSdhSAny22GYvdnnasvkz4hbLxnZcjbMspBiAeFM
7f+wx32Naf6xVHVvBtL/gLgnNO5dkougABWYrrXmpFd054WLMBBtBQqrFrrlOe1q
LhLBzsTFM7r4Vfx7W04ZmSrjVEeWmh+iSpFHcLF3UzCuhXBXhPS3cum3oPkNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUeG8q/4YyGdgoBICI9Z1NzF1iWJIwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAM8Lr
AwQATmnYAwQBTmnaAwQATmndAwQBTmnoMAwDBAJOaewDBABOae4DBABOafMDBAG8
3FoDBAG83UIDBAG83VIDBAG83XgwDQYJKoZIhvcNAQELBQADggEBAGgNJDKVZBZb
8KDklTbZfqeZcguJYBt1qvamiUclS+eMUdNiRJ2q9g8Xec7VGoTxi044H6ymUl0j
uLd4SAHCrg7dDlhJYy7DYMVu780/zzFvIczDC/q89yfi/RrgkQ1NoE5TjFmAOU4x
up1PuRHecJMNy8zSLkvAfmRC+AUFQvsGFX2sCGRX5PXh+v4Mrt5QfjsmT1+SF6x+
42EcYjdrGDo8Mx3B7ELtanhWmEH2tIOTR+hPn8Ho6iZCIggART586PIqRREtGPGF
Y41F/a4hM9cGP1BM4Eyc2eTiSEUQiE24xpljRHpAwn6DGKQLDk4CCk6DPuc7bUFj
/r4g6qWwGdk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:49:39 2026 by rpki-client