Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219034.roa
File: AS219034.roa (raw, json)
Hash identifier: s6/3jpvgznPpebPz1yz56L16esc4UWOWQoaxfv2XoF4=
Subject key identifier: 4C:D3:96:70:CA:12:E0:0C:0C:03:57:81:BA:18:01:CA:5A:53:F3:8B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3845A58255D6F2EB042AF6128C0A039B83BBA55A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219034.roa
Signing time: Fri 07 Aug 2026 08:00:58 +0000
ROA not before: Fri 07 Aug 2026 07:55:58 +0000
ROA not after: Fri 06 Aug 2027 08:00:58 +0000
asID: 219034
IP address blocks: 2a14:7583:efe9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:45:a5:82:55:d6:f2:eb:04:2a:f6:12:8c:0a:03:9b:83:bb:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 7 07:55:58 2026 GMT
Not After : Aug 6 08:00:58 2027 GMT
Subject: CN=4CD39670CA12E00C0C035781BA1801CA5A53F38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:a5:f9:52:32:f5:ff:da:62:7e:4c:30:23:
fe:a1:9c:67:d3:4c:3b:28:ff:8b:68:dc:d9:3e:17:
0e:9a:eb:07:78:e6:4a:19:09:c0:3a:b4:1a:19:0c:
a6:45:a0:ed:3c:d2:7c:ab:ca:55:35:a8:74:fa:8e:
60:65:22:5a:7b:cd:bc:8c:fe:83:63:71:bc:12:72:
1c:84:aa:be:a0:d1:1b:47:e7:11:a1:ee:49:fe:42:
d7:8b:4b:42:41:12:1e:e8:6a:a9:1d:7a:d1:6f:2d:
a4:84:03:05:f1:c1:84:28:00:84:52:6b:6f:b4:c0:
93:d3:8b:48:7a:6f:14:01:36:13:22:1d:5a:f4:53:
4c:d3:a2:f2:ea:94:d0:bc:5e:a2:f3:fd:97:ab:0c:
9d:a5:dd:32:40:73:da:f6:47:26:ef:af:63:f4:41:
e4:43:45:83:2e:af:8b:66:a1:b8:d2:ed:18:e7:f0:
5e:e0:00:a0:6b:1c:2b:59:25:5f:80:92:5e:ad:40:
c3:5f:99:4a:a2:e4:9d:7d:99:cb:00:87:44:8a:c6:
91:84:80:77:f7:cd:30:9e:51:e5:f6:71:d4:51:59:
bc:85:ca:34:67:cb:59:eb:26:e7:05:25:bc:18:5c:
4e:46:66:0e:86:b5:d1:37:88:92:5b:21:01:44:59:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:96:70:CA:12:E0:0C:0C:03:57:81:BA:18:01:CA:5A:53:F3:8B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efe9::/48
Signature Algorithm: sha256WithRSAEncryption
40:b6:19:6e:9f:d1:72:9b:58:5b:c4:78:15:fa:f9:1f:16:d9:
6b:e6:f5:d1:41:02:34:c5:0e:a2:f7:d6:c3:15:60:2a:57:3a:
89:a2:97:63:f6:cd:4d:a0:63:6e:3c:34:c5:1d:a2:ce:65:b6:
71:ca:65:9b:33:89:eb:92:ed:3d:ad:6b:51:5a:d5:06:11:42:
de:fa:12:76:1e:78:b9:1d:3d:fc:5f:a1:ee:b1:11:0f:ab:55:
c0:9a:24:f4:91:9c:ab:e9:60:10:9a:9b:e7:73:35:e5:81:47:
ab:ca:80:71:32:32:62:19:0e:ff:8e:3c:0b:35:7e:36:2f:42:
5e:16:cd:12:e7:75:c6:f4:4b:e2:92:de:c8:91:9c:a9:b6:48:
54:77:77:9f:82:5d:88:6d:92:8f:64:b3:42:3a:e6:83:b3:c1:
b8:98:d5:cf:68:6d:9a:17:25:96:59:f6:00:aa:0f:4e:60:8a:
1b:dd:49:8c:97:a6:f3:4c:05:69:ae:de:f5:6c:6a:7e:3b:5e:
eb:a3:ac:4c:1b:b0:bc:cc:09:45:01:70:17:af:17:69:46:14:
c7:47:80:8c:89:89:0f:18:70:f7:1c:b4:b1:b9:fc:8a:3c:3b:
a9:5f:1f:e6:b4:d9:78:70:9a:7a:81:61:e6:97:7c:8c:da:40:
03:0b:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:19 2026 by rpki-client