Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
File: AS199746.roa (raw, json)
Hash identifier: XBKUgz4yRZqDoRIoFhgxhDIxhdB8I+H2jjJwoJmonfw=
Subject key identifier: 96:65:D6:90:58:3A:F0:2D:23:3F:8D:04:3C:DC:97:4B:44:99:84:4B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 135E8566FD5EB04ED722AB50068D2E26CDB49551
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
Signing time: Fri 29 May 2026 12:13:44 +0000
ROA not before: Fri 29 May 2026 12:08:44 +0000
ROA not after: Fri 28 May 2027 12:13:44 +0000
asID: 199746
IP address blocks: 2a14:7585::/32 maxlen: 32
2a14:7587::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5e:85:66:fd:5e:b0:4e:d7:22:ab:50:06:8d:2e:26:cd:b4:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 29 12:08:44 2026 GMT
Not After : May 28 12:13:44 2027 GMT
Subject: CN=9665D690583AF02D233F8D043CDC974B4499844B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:6b:f4:8f:2e:b5:14:4b:fa:13:d9:1e:b9:
a9:56:80:02:08:80:4e:1d:57:70:a7:a4:c2:28:8c:
f9:6c:9a:e0:28:3a:47:98:d3:4d:fb:d7:03:8a:b1:
2d:53:82:cc:f1:d1:8a:6d:07:bb:ae:0d:52:40:ff:
c9:6b:79:f9:91:52:a9:7c:4c:f8:df:b1:26:8f:12:
ff:18:78:c3:c0:0b:54:95:7e:5b:43:6e:3a:7c:64:
ba:af:63:ca:80:96:83:02:3f:dd:05:8a:6f:5c:68:
ae:b8:fa:db:25:ea:b7:03:80:b6:cf:e8:80:81:b2:
2e:76:54:dd:e7:42:fa:7f:7e:8d:4c:ad:5c:96:df:
9a:c7:b0:3b:a0:0c:57:1b:11:b0:42:f3:60:ca:92:
a7:25:e8:2b:b7:98:3f:c9:1e:73:58:9c:df:e7:d2:
00:7b:d8:cb:be:a9:55:68:1d:7e:2b:f5:58:4d:5e:
dc:b2:97:98:9f:57:cb:3e:71:67:7c:19:fd:8c:39:
07:3b:97:81:2f:e0:eb:14:66:52:97:0b:3e:f7:ac:
d5:e6:04:ad:7f:a0:dc:ac:8a:be:94:f4:44:f3:05:
3a:da:05:1d:60:dc:a2:53:3b:28:e6:57:1a:80:1a:
85:69:80:fa:e6:14:a7:fc:54:c1:47:3d:db:f6:03:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:D6:90:58:3A:F0:2D:23:3F:8D:04:3C:DC:97:4B:44:99:84:4B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585::/32
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
79:6a:1f:f1:2d:fe:0d:c5:02:98:20:fe:ae:79:36:33:bb:73:
b1:9c:70:6e:b2:7b:00:53:cc:08:d8:05:59:fb:59:0e:97:a8:
8b:f9:2a:6d:79:57:a6:e3:52:b4:55:ac:09:47:45:97:80:8a:
56:5b:9b:91:cf:20:3b:c0:ed:14:a3:0b:ec:50:48:3b:34:3b:
d9:28:3f:6a:b7:4f:7a:90:7c:f5:62:6b:e9:3c:c5:ea:6d:71:
5e:e5:58:b7:18:da:a9:2b:24:cb:c7:3c:36:21:77:5c:23:01:
15:09:b7:85:55:d7:1c:8e:0d:a5:d1:86:b0:50:ad:98:19:2f:
b6:8e:9b:d1:0a:cd:17:b6:d3:b7:ae:fe:86:2e:6a:1a:9d:05:
ad:8c:90:8c:32:77:2b:46:0c:ef:df:f8:63:38:7a:e4:88:c2:
44:fb:78:8a:6f:37:81:b5:60:5c:39:1b:01:dc:c0:8a:92:c7:
5c:09:5b:24:cf:e7:bf:4b:ab:0e:8b:46:9f:41:20:16:e9:70:
5c:1c:4d:6c:3c:22:f9:1c:bc:a0:90:56:3b:91:f9:7c:a3:86:
50:d2:a9:c8:dc:c3:f1:36:0c:1f:03:4a:7e:6e:48:44:a8:50:
19:51:0f:bc:aa:08:29:02:4e:de:af:06:0e:30:ac:20:eb:5c:
24:2f:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:05:48 2026 by rpki-client