Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: ivJ2x7bjzY1eERhaJow2NcK3cxKctDy3luO1nCfkVdY=
Subject key identifier: 87:3D:46:1A:CA:1A:A1:E7:ED:E6:DD:38:30:E9:9F:CC:09:59:F9:04
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 39C32E0441BFB41A409D0BFAD22526F89EAB79AB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Thu 23 Jul 2026 07:13:36 +0000
ROA not before: Thu 23 Jul 2026 07:08:36 +0000
ROA not after: Thu 22 Jul 2027 07:13:36 +0000
asID: 214432
IP address blocks: 51.194.235.0/24 maxlen: 24
78.105.216.0/24 maxlen: 24
78.105.218.0/24 maxlen: 24
78.105.219.0/24 maxlen: 24
78.105.221.0/24 maxlen: 24
78.105.232.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
78.105.236.0/24 maxlen: 24
78.105.237.0/24 maxlen: 24
78.105.238.0/24 maxlen: 24
78.105.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c3:2e:04:41:bf:b4:1a:40:9d:0b:fa:d2:25:26:f8:9e:ab:79:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 23 07:08:36 2026 GMT
Not After : Jul 22 07:13:36 2027 GMT
Subject: CN=873D461ACA1AA1E7EDE6DD3830E99FCC0959F904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:33:e6:96:15:93:9b:3d:08:4d:9a:8e:83:ee:
e0:bf:2a:8f:5e:26:a8:a1:80:58:c4:f6:01:86:75:
ec:9d:2d:0b:20:04:7e:04:ec:21:f6:cb:6b:c4:f6:
3c:b3:8f:bd:05:ff:b7:4a:c3:cf:88:4d:99:ae:66:
86:2e:1a:43:ce:5b:46:5d:56:4a:0f:e7:7c:30:00:
cd:c3:f4:de:c2:b3:dd:6b:11:4e:59:d6:8e:3a:87:
e1:5a:f5:04:4a:60:84:5c:1a:df:0d:f6:7a:9a:6f:
7e:bb:51:dd:c1:b3:52:ec:e6:29:8d:24:78:5a:df:
d0:0f:b4:d2:f1:89:a4:1a:1a:dd:bf:b6:25:bd:b4:
1c:f9:35:ae:08:76:89:4c:9f:d6:5f:ef:4e:4c:55:
eb:1d:b6:4e:54:06:eb:12:cf:e4:c4:fe:aa:86:08:
e6:bf:a4:f4:22:db:58:69:cc:13:30:bb:ac:22:db:
f0:13:a5:b3:aa:ba:45:1a:03:b5:ef:fd:a2:1c:e7:
5a:34:0f:17:da:b7:c1:c0:5f:b7:76:ac:f3:d9:e5:
48:60:4a:09:e0:05:be:47:ce:31:3b:08:13:39:6a:
b0:ec:db:1c:ea:f6:38:5d:ef:04:e4:83:d4:8e:2a:
b4:02:bf:08:85:d6:47:a5:6e:e1:e1:6b:bc:14:2d:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3D:46:1A:CA:1A:A1:E7:ED:E6:DD:38:30:E9:9F:CC:09:59:F9:04
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.235.0/24
78.105.216.0/24
78.105.218.0/23
78.105.221.0/24
78.105.232.0/23
78.105.236.0-78.105.238.255
78.105.243.0/24
Signature Algorithm: sha256WithRSAEncryption
14:14:23:70:40:3c:c7:7e:f3:93:30:7d:36:0c:7b:d7:3e:c2:
b2:51:af:b7:c9:8c:51:0b:56:23:d6:8a:9d:dc:c7:af:6f:f0:
96:06:0e:93:ad:0d:cc:36:8c:dd:81:43:96:09:54:c2:c6:55:
82:a0:b0:d6:7a:ca:ba:8b:69:b5:a0:fd:60:a3:8f:70:29:7a:
5c:f1:23:7f:d9:85:fc:2e:38:dc:e2:65:c6:24:e1:f1:ed:03:
15:ea:99:ea:66:f0:d4:f7:b0:cf:1f:23:20:8f:4b:75:ef:40:
2d:27:cf:a8:f8:9f:31:f7:ae:8f:92:43:18:b8:51:73:2e:73:
bb:40:75:a5:8b:3e:d0:d1:b2:0d:9c:40:20:fa:19:bf:b8:f3:
d8:c8:06:25:0f:7b:b0:53:0c:f8:f0:9f:f0:5f:0e:b9:1f:47:
9c:43:ee:7c:ee:af:1d:03:53:dc:01:fc:f1:e1:e8:9e:2c:77:
4a:1b:bd:8c:bb:f0:3a:12:f8:5f:94:15:03:7f:bf:2b:24:9b:
1a:4c:3e:16:07:07:29:b9:31:2a:ed:6b:00:6d:31:b3:c7:a5:
71:bc:02:97:74:ff:35:4a:ff:8e:66:4d:ea:ef:0d:40:75:24:
7e:bc:33:47:64:22:f3:e6:fc:8f:72:93:03:a1:9c:76:c4:28:
b8:cd:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:09:26 2026 by rpki-client