Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202260.roa
File: AS202260.roa (raw, json)
Hash identifier: ehHR7E868jlbxKsJyxsDWXvoVsuuLmqWifBPy+FinGI=
Subject key identifier: 34:C3:13:CA:45:AB:E1:0A:87:C1:1E:88:29:4A:A4:C3:23:E9:F2:01
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 34FD4F5D4809DF635309283A26F728DD34BD58C0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202260.roa
Signing time: Wed 27 May 2026 06:12:38 +0000
ROA not before: Wed 27 May 2026 06:07:38 +0000
ROA not after: Wed 26 May 2027 06:12:38 +0000
asID: 202260
IP address blocks: 2a14:7580:ff9d::/48 maxlen: 48
2a14:7580:ff9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fd:4f:5d:48:09:df:63:53:09:28:3a:26:f7:28:dd:34:bd:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 27 06:07:38 2026 GMT
Not After : May 26 06:12:38 2027 GMT
Subject: CN=34C313CA45ABE10A87C11E88294AA4C323E9F201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:4b:7f:87:1a:63:2c:36:61:4c:44:9f:02:
8d:92:22:12:f5:be:bd:c7:65:20:8b:cd:6c:2f:c4:
42:f5:88:db:20:89:b3:14:dc:b4:7d:f5:db:0d:10:
10:fa:15:c1:9e:ea:15:47:61:79:3f:fe:e5:af:ed:
80:0c:b6:3b:a8:3b:89:03:bf:5c:15:4a:50:4a:36:
1a:56:56:2b:32:e9:34:8e:ff:f7:a4:5c:32:17:e6:
84:0d:b3:82:29:a5:4e:64:f1:64:1c:c6:52:05:7d:
50:7b:e1:11:3a:cc:fd:a1:bd:86:e6:7f:72:a0:d6:
78:3d:3f:9c:a1:a0:cb:61:f2:9f:47:64:e6:ed:ca:
26:8c:2b:3a:3f:01:79:e6:d5:b0:42:25:6a:c5:96:
3f:bc:27:5b:87:7f:11:ae:d4:96:40:23:02:60:fe:
5f:9c:36:43:92:8b:73:4a:7a:32:7c:60:89:eb:f9:
24:7f:7e:44:23:5c:86:da:1d:ec:b5:10:e5:22:33:
c9:af:46:27:0a:21:dd:b4:1b:0e:e0:ae:fe:ca:ee:
35:ef:97:6b:f3:70:6a:c6:3e:e6:92:ba:66:07:f1:
7f:8e:65:1d:fe:99:4c:52:46:46:b9:5e:a5:fd:4b:
10:28:3b:be:3f:30:30:da:18:f2:7e:a4:17:c9:62:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:13:CA:45:AB:E1:0A:87:C1:1E:88:29:4A:A4:C3:23:E9:F2:01
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9d::/48
2a14:7580:ff9f::/48
Signature Algorithm: sha256WithRSAEncryption
69:fe:b9:56:be:8f:8e:66:a2:1e:84:ca:fd:5c:b7:3e:25:41:
65:ca:3c:39:24:93:e5:c9:5e:06:f5:01:99:4c:d9:5f:e5:82:
d3:c6:71:fa:e0:a0:7e:c2:29:d2:3c:cd:da:bb:a3:63:e8:56:
91:ea:74:14:6c:87:c7:44:5c:20:c8:c3:fc:40:c4:3e:b8:21:
2f:33:50:d6:47:01:f1:48:d7:fb:f7:f0:b6:99:0c:f7:fd:d2:
bd:df:25:02:84:a4:47:39:93:f7:2d:14:fb:e1:92:d9:43:ce:
b0:82:e4:23:a4:b6:80:bb:84:ba:c5:a7:fb:a8:94:77:bf:0e:
8a:ca:d9:ff:75:0f:bb:b1:56:e3:3f:c0:13:11:ab:2f:a7:56:
ea:88:72:1b:bb:2a:58:5b:af:a1:9c:ff:50:14:e3:f6:6c:98:
0a:c7:cb:75:d1:3f:29:3f:d3:b6:cc:27:7f:36:b3:c3:8a:0b:
51:8b:e0:ab:22:58:91:bb:d9:10:bf:39:e8:79:f3:69:79:7a:
c8:23:11:48:43:70:1e:f2:1f:34:26:a6:fa:b9:51:75:1e:01:
52:69:3a:af:9c:79:ff:d4:8c:a5:0a:8c:1f:56:d4:a5:92:7a:
f2:a0:1a:79:f5:e1:55:b2:ab:c3:30:d5:3c:6c:b5:45:a6:59:
45:dd:aa:cc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUNP1PXUgJ32NTCSg6Jvco3TS9WMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA1MjcwNjA3MzhaFw0yNzA1MjYwNjEyMzhaMDMxMTAvBgNV
BAMTKDM0QzMxM0NBNDVBQkUxMEE4N0MxMUU4ODI5NEFBNEMzMjNFOUYyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHEt/hxpjLDZhTESfAo2SIhL1
vr3HZSCLzWwvxEL1iNsgibMU3LR99dsNEBD6FcGe6hVHYXk//uWv7YAMtjuoO4kD
v1wVSlBKNhpWVisy6TSO//ekXDIX5oQNs4IppU5k8WQcxlIFfVB74RE6zP2hvYbm
f3Kg1ng9P5yhoMth8p9HZObtyiaMKzo/AXnm1bBCJWrFlj+8J1uHfxGu1JZAIwJg
/l+cNkOSi3NKejJ8YInr+SR/fkQjXIbaHey1EOUiM8mvRicKId20Gw7grv7K7jXv
l2vzcGrGPuaSumYH8X+OZR3+mUxSRka5XqX9SxAoO74/MDDaGPJ+pBfJYpffAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUNMMTykWr4QqHwR6IKUqkwyPp8gEwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAyMjYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhR1
gP+dAwcAKhR1gP+fMA0GCSqGSIb3DQEBCwUAA4IBAQBp/rlWvo+OZqIehMr9XLc+
JUFlyjw5JJPlyV4G9QGZTNlf5YLTxnH64KB+winSPM3au6Nj6FaR6nQUbIfHRFwg
yMP8QMQ+uCEvM1DWRwHxSNf79/C2mQz3/dK93yUChKRHOZP3LRT74ZLZQ86wguQj
pLaAu4S6xaf7qJR3vw6Kytn/dQ+7sVbjP8ATEasvp1bqiHIbuypYW6+hnP9QFOP2
bJgKx8t10T8pP9O2zCd/NrPDigtRi+CrIliRu9kQvznoefNpeXrIIxFIQ3Ae8h80
Jqb6uVF1HgFSaTqvnHn/1IylCowfVtSlknryoBp59eFVsqvDMNU8bLVFpllF3arM
-----END CERTIFICATE-----
Generated at Sat Jun 6 04:01:30 2026 by rpki-client