Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214480.roa
File: AS214480.roa (raw, json)
Hash identifier: ZtIuHE4AwPaAzD/BG8w94Fvj/syGfB/0MRISbhQHHR4=
Subject key identifier: E3:D4:C8:34:07:74:B8:B1:F6:C8:DA:1D:C2:2D:D3:BB:C8:24:67:84
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6C8FA8CCD4DACE8E8AD2870EA274D1FBF697EDE1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214480.roa
Signing time: Mon 09 Nov 2026 14:49:41 +0000
ROA not before: Mon 09 Nov 2026 14:44:41 +0000
ROA not after: Mon 08 Nov 2027 14:49:41 +0000
asID: 214480
IP address blocks: 46.202.82.0/23 maxlen: 24
46.202.82.0/24 maxlen: 24
46.202.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8f:a8:cc:d4:da:ce:8e:8a:d2:87:0e:a2:74:d1:fb:f6:97:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 9 14:44:41 2026 GMT
Not After : Nov 8 14:49:41 2027 GMT
Subject: CN=E3D4C8340774B8B1F6C8DA1DC22DD3BBC8246784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:45:2f:1b:04:6c:bd:3b:47:e9:10:61:b5:
4e:8a:8c:17:11:48:6c:26:9b:6c:5b:d2:c0:29:de:
f0:c9:7e:e0:c5:1b:a5:d4:63:5f:89:97:26:b9:24:
8a:31:be:f0:67:e7:f1:2e:01:01:d6:81:f4:94:86:
c1:d2:5d:35:b0:8e:ee:37:e2:51:8d:e3:bf:9e:76:
a1:cf:19:cc:7f:af:a8:1b:ea:89:84:98:2f:e5:2f:
94:cb:c2:f7:e8:74:68:71:4e:36:91:af:ef:0c:aa:
62:e2:9d:f7:e1:8b:60:97:52:e8:b1:ee:ef:08:db:
a4:e7:5e:57:0a:5a:56:f8:3c:79:96:22:74:30:3d:
b3:6b:f5:a0:cc:89:74:14:0a:7c:12:54:dc:ee:13:
90:4f:32:c7:d8:b9:73:b8:dc:12:ed:45:f8:70:94:
92:c8:e2:1b:22:e1:6b:dd:0f:c9:5e:6e:7f:10:f3:
1c:43:4e:51:c3:40:5f:88:ee:98:9c:b8:a7:41:b0:
0f:95:e2:0d:8d:05:eb:71:23:60:38:f0:d9:49:bd:
4c:88:5d:9f:24:f3:52:d3:fa:61:6f:67:da:eb:f3:
ba:d2:85:92:26:cb:b9:5f:a3:93:cf:b1:40:11:7c:
55:2f:49:37:71:ac:ff:fd:15:73:6a:66:c9:71:63:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:C8:34:07:74:B8:B1:F6:C8:DA:1D:C2:2D:D3:BB:C8:24:67:84
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.82.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:a7:7f:e4:01:a0:a3:ba:af:db:3d:27:96:74:63:56:38:b0:
be:3f:c7:27:58:f7:c3:85:83:93:03:60:0b:3b:8b:ad:86:b7:
a2:f6:b4:fc:fd:0f:cc:f3:3a:98:a7:9d:e6:ba:10:0e:29:73:
f0:50:1c:6a:67:92:e2:d9:8b:39:c2:c4:da:89:73:18:78:48:
dd:8e:7d:67:3e:d0:5c:31:4b:2a:b3:c1:ff:14:3e:e8:67:49:
2d:8a:29:1e:50:97:ea:f5:a4:6a:bf:56:14:c1:80:0c:2c:31:
e5:69:ae:a4:e3:0c:75:e3:0e:31:0e:d3:e6:71:ba:2b:aa:c3:
71:93:63:43:db:f1:82:91:29:6f:28:9a:9f:63:9e:c9:04:b1:
9b:a3:fd:9e:5c:b4:69:4d:c5:92:d5:36:1d:39:db:fb:23:14:
c7:a9:41:54:e5:7b:67:c3:9b:fc:5f:f5:83:01:ac:22:7e:bd:
12:a1:86:f0:9e:33:69:c8:d6:1e:cd:3f:c1:71:1c:3d:e1:51:
5a:0f:03:0a:c2:f6:2d:6a:6e:76:e0:01:4c:43:5c:ba:bd:99:
ce:c4:32:2d:5f:25:1d:6c:ca:59:c3:24:65:89:4a:65:90:2c:
32:21:4e:63:99:d6:1e:ed:f8:11:cb:a1:86:7a:f6:43:74:9a:
29:10:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:14:06 2026 by rpki-client