Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: RYFIjRF/yLXIpy3b7FMDFnmyt2P4sfbZQPZ5LPUqok8=
Subject key identifier: B9:A3:EA:53:D5:1E:5B:47:8A:99:25:D3:D7:51:DE:78:03:EF:D3:19
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7FB21E070A712B5751235BDFACDD3C98DB08F933
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
Signing time: Wed 23 Sep 2026 11:47:09 +0000
ROA not before: Wed 23 Sep 2026 11:42:09 +0000
ROA not after: Wed 22 Sep 2027 11:47:09 +0000
asID: 214483
IP address blocks: 51.146.32.0/24 maxlen: 24
51.146.33.0/24 maxlen: 24
51.146.34.0/24 maxlen: 24
51.146.35.0/24 maxlen: 24
51.146.94.0/24 maxlen: 24
51.146.120.0/24 maxlen: 24
51.146.121.0/24 maxlen: 24
51.146.245.0/24 maxlen: 24
51.194.249.0/24 maxlen: 24
51.194.251.0/24 maxlen: 24
51.241.8.0/24 maxlen: 24
51.241.10.0/24 maxlen: 24
188.220.72.0/24 maxlen: 24
188.220.73.0/24 maxlen: 24
188.220.106.0/24 maxlen: 24
188.220.198.0/24 maxlen: 24
188.220.231.0/24 maxlen: 24
188.221.104.0/24 maxlen: 24
188.221.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b2:1e:07:0a:71:2b:57:51:23:5b:df:ac:dd:3c:98:db:08:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 11:42:09 2026 GMT
Not After : Sep 22 11:47:09 2027 GMT
Subject: CN=B9A3EA53D51E5B478A9925D3D751DE7803EFD319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:49:86:ea:5d:f5:c1:81:06:4f:4c:67:c4:42:
58:2f:6a:ca:a4:0b:83:ab:11:28:cf:c1:83:d1:09:
c5:e3:a7:b2:f4:42:d4:23:a3:65:ba:82:5b:35:66:
d6:3b:9a:a0:34:bf:7d:29:df:5f:41:58:15:eb:47:
30:3b:96:5e:59:26:9c:03:57:85:c9:2c:e4:0a:39:
a8:ec:63:0c:71:56:74:63:de:10:6f:3f:5d:b7:21:
65:26:9c:fd:0e:fd:5e:90:ae:d0:9e:3c:88:4e:e9:
3e:ba:c1:c2:da:21:2b:5b:4c:9d:cf:da:98:79:df:
2f:7f:8e:9e:e5:74:6f:21:0d:a3:c3:be:1f:62:d9:
b2:0f:a0:a1:ab:37:e0:15:b9:c9:6b:7b:09:fa:fb:
3a:4c:c1:a4:5f:bc:8f:1d:bb:07:cb:df:eb:98:98:
80:f2:fb:db:91:83:76:d2:09:9d:c9:42:37:bd:d5:
ea:d1:5d:04:b8:f9:b9:bd:0d:dd:ad:11:d4:45:aa:
03:cf:db:f1:ae:15:02:21:61:d8:66:31:5d:90:66:
01:9b:48:cd:40:3c:5b:8b:41:75:3c:e1:fa:9f:8b:
d9:cb:3d:86:75:42:de:4c:ef:d5:1e:6f:75:f9:8c:
d6:d5:aa:26:c7:25:86:a3:70:16:f6:97:ab:56:fa:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:EA:53:D5:1E:5B:47:8A:99:25:D3:D7:51:DE:78:03:EF:D3:19
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.32.0/22
51.146.94.0/24
51.146.120.0/23
51.146.245.0/24
51.194.249.0/24
51.194.251.0/24
51.241.8.0/24
51.241.10.0/24
188.220.72.0/23
188.220.106.0/24
188.220.198.0/24
188.220.231.0/24
188.221.104.0/24
188.221.212.0/24
Signature Algorithm: sha256WithRSAEncryption
09:31:54:48:97:b6:0e:59:ac:90:39:6b:9a:3c:0a:00:0f:e6:
22:f0:06:5b:02:d3:d1:9c:df:25:be:50:1c:8d:c8:62:39:07:
90:a7:d6:19:02:31:69:0f:ed:15:d9:55:d2:c6:bc:7d:9d:a8:
7e:61:8e:94:76:48:7e:ae:6a:cb:0b:f6:e9:f4:08:25:df:e9:
8a:e7:a7:56:85:31:12:aa:57:b5:fc:5a:fc:c8:e5:48:b9:8e:
4e:e3:3d:c0:e6:c4:dd:fe:0b:32:2d:28:00:01:35:c4:c7:44:
6f:9f:dc:a6:56:fd:26:c1:80:3a:a8:fa:c2:75:b5:7b:5b:f4:
b3:63:20:38:bb:02:97:ac:27:cc:56:90:43:40:ce:bf:91:ee:
8b:b6:e9:df:a1:b7:c5:21:7e:13:f1:c5:92:d9:d5:60:0e:88:
e5:fd:1b:d6:aa:27:c0:63:06:01:0f:a0:01:1e:70:a0:cf:45:
39:69:0b:d7:8d:47:80:a9:a7:4d:68:4c:26:36:3a:07:f6:15:
22:e4:64:eb:6d:22:70:d7:c7:45:ac:fd:92:bd:e6:95:90:f7:
68:92:a1:05:3b:fc:41:7b:a8:0c:bf:23:42:49:d8:4e:55:df:
88:4d:ff:8d:4e:10:45:00:ec:ea:87:98:ed:e0:c3:c5:6c:99:
48:86:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:16:22 2026 by rpki-client