Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa
File: AS202986.roa (raw, json)
Hash identifier: Dz8GC7Fch29kKi+guNA6nOxoWx47MYDIKm2HHiqbvaA=
Subject key identifier: 52:F9:B1:C4:CF:2C:68:A1:11:01:A8:FA:A9:83:A0:9E:B9:AB:27:BE
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4A9ADE5A35D33D9F2BFEE9F65D919EE9EEC4B256
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa
Signing time: Thu 03 Sep 2026 13:55:39 +0000
ROA not before: Thu 03 Sep 2026 13:50:39 +0000
ROA not after: Thu 02 Sep 2027 13:55:39 +0000
asID: 202986
IP address blocks: 2a14:7580:f100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9a:de:5a:35:d3:3d:9f:2b:fe:e9:f6:5d:91:9e:e9:ee:c4:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 3 13:50:39 2026 GMT
Not After : Sep 2 13:55:39 2027 GMT
Subject: CN=52F9B1C4CF2C68A11101A8FAA983A09EB9AB27BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:8e:99:d0:81:4f:25:56:90:75:c7:83:32:
3c:c3:9b:3e:36:56:78:ca:aa:00:73:30:aa:cd:f8:
63:c1:e8:ad:ce:60:7c:c3:5f:85:93:90:eb:10:72:
20:85:ef:4a:82:2b:f3:be:be:06:a1:b5:6d:e3:d6:
6c:de:b3:dd:1c:9a:de:43:98:2a:15:b3:bc:77:5a:
ea:8e:ed:f8:e0:d4:0b:51:77:60:44:36:47:50:63:
be:4b:d3:ed:8c:bd:80:47:1a:c6:ce:11:6b:eb:de:
40:69:e3:02:df:b5:75:df:97:61:6b:90:64:4a:38:
30:58:8c:13:e5:a9:42:ca:40:9c:af:fb:c7:02:ce:
33:b7:fe:aa:b2:99:a8:4e:17:9f:d5:aa:fa:c2:00:
ff:9b:1e:89:9e:58:61:f5:70:d4:6a:86:35:36:73:
1d:a0:0e:fe:b3:1d:48:e3:40:80:73:04:a1:98:f1:
04:57:23:10:e3:19:fd:0a:7f:6a:e5:f8:9f:3a:80:
d0:52:c0:0f:f8:44:83:bc:6d:0e:68:e2:6c:6c:26:
a2:cc:ac:4d:e5:ef:d9:02:54:c5:d1:1e:df:72:31:
ca:71:50:44:0a:73:a5:ce:c5:1b:15:3e:12:fc:66:
12:9a:5f:5c:bd:1d:32:dd:40:b2:f9:fc:ca:6d:1d:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:B1:C4:CF:2C:68:A1:11:01:A8:FA:A9:83:A0:9E:B9:AB:27:BE
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f100::/40
Signature Algorithm: sha256WithRSAEncryption
84:a9:74:96:f1:17:33:fd:6b:df:6f:25:73:dd:74:16:38:05:
43:be:6f:e1:3f:31:ff:ca:b3:50:79:1b:93:03:25:20:e9:08:
66:81:ff:52:ac:bd:82:60:9e:4b:ed:45:25:a5:21:bc:0e:7d:
9f:2f:c6:53:f4:52:29:9f:75:ce:84:8d:df:85:d9:83:11:be:
5c:3b:5c:9c:e7:01:27:79:c8:5f:7b:e8:25:ca:7d:9a:8c:ac:
f7:80:48:d0:9b:28:e6:4f:95:e4:4b:f3:88:e7:db:79:a3:77:
14:e6:19:3e:83:4f:bb:91:15:29:3d:f0:85:b0:34:25:84:25:
f4:76:ab:be:cf:41:b4:8b:7e:79:47:1a:50:a1:54:f3:10:54:
f3:38:be:18:4f:ec:db:1c:ec:47:03:a4:fd:73:17:89:bb:f0:
a9:b9:f9:07:7a:1e:d6:04:53:2b:56:22:7f:59:15:42:a9:52:
5a:c8:95:5d:0d:3f:42:3b:bb:61:0f:ac:9f:dd:9e:d5:27:93:
eb:68:ad:4c:df:dd:72:35:81:07:1c:83:90:6c:60:06:be:84:
54:6a:0e:b0:52:3a:9c:9a:0d:28:fc:66:9b:3b:a2:33:ab:17:
d7:38:3c:08:83:0c:45:33:b8:6f:97:0f:fd:a5:22:cb:4a:28:
12:9c:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:11:28 2026 by rpki-client