Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: 8OWa3yPZQsPx1+Q49qdyXC2o3QVC6klcA+ENWP4/N2Q=
Subject key identifier: 32:CF:82:D1:C5:6B:30:46:09:66:63:89:55:C7:14:82:FD:14:11:FF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 74A74D8A40D4685F5377D42297C1F9BFFFA37FE0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
Signing time: Sun 15 Jun 2025 00:00:26 +0000
ROA not before: Sat 14 Jun 2025 23:55:26 +0000
ROA not after: Sun 14 Jun 2026 00:00:26 +0000
asID: 214483
IP address blocks: 95.134.232.0/21 maxlen: 24
95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
95.134.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a7:4d:8a:40:d4:68:5f:53:77:d4:22:97:c1:f9:bf:ff:a3:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 14 23:55:26 2025 GMT
Not After : Jun 14 00:00:26 2026 GMT
Subject: CN=32CF82D1C56B30460966638955C71482FD1411FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:21:68:fb:6e:99:a1:c2:8d:16:27:8c:36:
04:f7:48:c6:75:fe:a2:9f:52:f8:8a:ab:b6:9c:15:
20:c9:2f:b4:6d:37:5d:7a:86:dd:12:98:ba:96:27:
f1:23:ba:54:b5:54:d7:56:9b:53:8f:29:e9:3a:2d:
a2:5b:74:28:c8:a3:f3:56:a5:c7:7a:0a:d0:92:60:
b3:62:d9:0b:ca:49:f2:c9:76:22:76:0f:2c:3a:31:
aa:aa:c3:90:42:ad:0c:76:60:bd:94:85:f0:f4:6b:
db:5e:20:40:69:75:e1:16:0e:f5:5f:9d:be:b6:c3:
f6:b6:c1:7d:a0:c2:7b:f4:fa:81:92:1b:43:a3:27:
47:21:80:e1:97:4f:32:85:75:cb:8a:dc:7e:7c:82:
9b:e4:a4:c9:b5:2f:d8:e2:97:4d:cb:28:ad:ba:65:
24:7b:f2:0d:ca:f1:00:f0:7f:6b:bd:f5:69:20:ae:
a9:81:18:0e:50:93:73:7a:ec:6c:54:e9:8d:1a:f6:
ab:39:f9:3b:c8:61:f9:9c:28:49:ec:7e:4b:ab:04:
dc:e9:a0:be:35:03:82:5d:cf:e4:eb:d5:6b:0a:95:
d9:c4:d9:bb:27:a4:b9:5a:21:fc:75:25:22:1d:2c:
e6:95:ce:d0:62:ae:93:f1:02:ce:62:ed:8e:fc:c9:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:82:D1:C5:6B:30:46:09:66:63:89:55:C7:14:82:FD:14:11:FF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.232.0-95.134.255.255
Signature Algorithm: sha256WithRSAEncryption
79:99:35:c5:39:37:92:d8:33:f2:f7:82:98:3a:87:b0:e0:38:
21:72:de:90:19:c2:77:f5:a4:82:9b:bd:1b:5d:37:d4:3e:85:
80:fc:d6:1e:52:86:a4:17:e4:ba:65:19:eb:25:f5:2c:f2:26:
dd:f7:49:9b:0f:8b:e7:fe:9a:6f:08:ae:f1:63:bf:5e:15:77:
22:ac:dd:c5:51:b9:20:fa:53:fd:68:f0:a8:0c:ce:b8:98:0b:
75:7c:e6:49:d6:2f:e4:3d:32:79:de:2e:ce:76:c2:5b:72:0b:
61:cb:ad:af:b1:e5:86:31:a7:fa:91:08:be:2b:49:84:2d:3e:
3c:a4:cc:1c:2d:07:13:ec:82:da:6b:ab:83:af:d5:a1:92:7c:
a4:57:a7:bc:b6:84:00:21:5a:8d:d3:61:2a:f1:2d:fc:22:88:
81:92:0a:53:bd:8a:6d:69:d2:31:9b:e2:fb:c3:25:12:33:b5:
39:a4:88:0e:47:d8:2c:f8:45:90:10:cd:12:22:23:40:d4:5b:
e4:9b:51:ef:6c:d0:da:12:70:3d:78:4c:5e:12:62:9a:41:f0:
71:64:1d:46:52:3c:b4:94:3c:72:43:1c:23:20:c2:4d:6b:ec:
7e:13:ee:fe:01:c5:ca:7c:f3:34:38:e4:55:f7:9b:31:76:14:
76:d1:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:59:47 2025 by rpki-client