Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219013.roa
File: AS219013.roa (raw, json)
Hash identifier: 2UhJHf1UaPLTUkd/2W3hf0Vn/5s9pAWjZ9ZKEvfJx3w=
Subject key identifier: 0E:22:6D:F5:AD:B2:D1:9C:75:EB:B9:8B:5E:BE:1B:AB:43:57:52:2B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 01ACC0C2831E4DE66022C001ADFDB672286508B4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219013.roa
Signing time: Mon 10 Aug 2026 10:38:27 +0000
ROA not before: Mon 10 Aug 2026 10:33:27 +0000
ROA not after: Mon 09 Aug 2027 10:38:27 +0000
asID: 219013
IP address blocks: 2a14:7580:fff5::/48 maxlen: 48
2a14:7581:5900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ac:c0:c2:83:1e:4d:e6:60:22:c0:01:ad:fd:b6:72:28:65:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 10 10:33:27 2026 GMT
Not After : Aug 9 10:38:27 2027 GMT
Subject: CN=0E226DF5ADB2D19C75EBB98B5EBE1BAB4357522B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:bf:31:11:f0:0c:5f:33:b9:8b:fe:f9:3c:
d7:d9:b0:88:0f:a8:3f:18:64:de:c8:c6:3c:7a:e1:
24:6c:22:be:12:ad:09:b5:62:68:74:4d:68:66:d6:
1a:65:1a:e0:dd:8b:9b:d0:56:3e:3a:b9:22:b2:ab:
91:17:2d:2b:66:10:6b:82:f3:a5:ca:1d:5e:24:82:
02:aa:84:3c:8e:86:25:77:cf:3e:28:b8:e3:18:5e:
8e:20:a2:3a:3e:f3:5d:93:2c:a4:3e:4a:11:74:5a:
39:90:04:98:0c:6e:e3:91:d3:60:48:94:be:93:53:
8c:17:10:b2:89:b9:4c:35:b1:c0:29:6e:15:ba:83:
27:87:86:0d:96:57:54:e1:db:e3:c5:d9:a8:44:ec:
38:d0:b9:e8:a3:66:14:3a:27:3e:e8:76:f7:7e:92:
64:15:3a:19:cd:6d:7f:33:11:25:0e:2b:3f:5e:73:
5f:8b:8e:b8:9d:9c:0c:da:da:05:d0:8f:84:a2:f0:
8a:24:d2:10:cc:2f:4e:78:12:3b:e0:24:1b:91:c7:
17:2f:f4:f2:87:f8:f2:18:28:14:7d:4c:bb:76:67:
32:e4:c0:22:91:aa:fe:07:25:46:b4:c8:1b:19:3e:
e3:8a:1f:e2:5a:a8:5e:ad:03:18:90:11:19:9d:5d:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:6D:F5:AD:B2:D1:9C:75:EB:B9:8B:5E:BE:1B:AB:43:57:52:2B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219013.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff5::/48
2a14:7581:5900::/40
Signature Algorithm: sha256WithRSAEncryption
31:a0:17:e1:c3:cf:c3:be:4c:16:9c:1d:21:e9:2c:27:54:ec:
fa:3b:c0:79:fc:b9:d6:99:5c:96:6e:bb:e8:59:6a:87:79:39:
40:7e:72:8e:72:34:bf:2a:80:d9:6b:16:06:10:28:6e:8f:9f:
89:30:04:5c:9a:3c:08:83:ff:58:43:3f:af:f6:b5:e2:54:11:
69:ca:82:ac:1c:09:b6:c5:bb:76:01:68:c4:4f:c2:2c:29:da:
78:dc:c7:7f:90:07:bc:42:d7:9b:31:1b:28:a7:4f:6c:f7:a4:
87:d7:e1:7f:5f:cf:20:66:89:1b:3e:88:58:0b:4a:61:8a:06:
fc:55:0c:fb:c1:8b:72:d7:54:df:46:6f:08:61:3f:d4:5a:c1:
7f:81:28:0f:67:19:25:ab:dc:f3:7b:65:54:4f:1c:88:0e:6d:
05:1b:23:75:e1:70:13:e6:40:32:90:59:87:8e:28:14:22:b1:
f2:86:dc:cb:09:9e:d1:cc:27:0d:39:d1:fb:f5:42:26:e4:12:
fc:72:b6:58:2b:81:50:a3:20:6c:90:78:6f:a4:f0:89:5e:8e:
2e:71:f1:52:26:0c:45:57:c2:2c:4b:21:48:22:bb:2d:de:a9:
fa:7b:03:66:1c:68:dc:39:dd:a2:0f:a1:3c:0d:37:c4:0c:9d:
89:6b:b0:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:20 2026 by rpki-client