Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219078.roa
File: AS219078.roa (raw, json)
Hash identifier: BNkN9y7z2dv9zYFaGZ0MYuFXsCAONhOq7rrGHeRKEUk=
Subject key identifier: EC:46:64:04:2A:AB:F6:BD:80:45:B2:B7:44:73:92:1C:F9:48:55:97
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 192DE8B43F8955A574A7703CE32735F9437D0CDA
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219078.roa
Signing time: Thu 13 Aug 2026 02:42:35 +0000
ROA not before: Thu 13 Aug 2026 02:37:35 +0000
ROA not after: Thu 12 Aug 2027 02:42:35 +0000
asID: 219078
IP address blocks: 2a14:7580:ff60::/44 maxlen: 48
2a14:7583:efe7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2d:e8:b4:3f:89:55:a5:74:a7:70:3c:e3:27:35:f9:43:7d:0c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 13 02:37:35 2026 GMT
Not After : Aug 12 02:42:35 2027 GMT
Subject: CN=EC4664042AABF6BD8045B2B74473921CF9485597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:3c:4b:3e:6f:72:c0:66:6e:6a:14:07:c3:
cb:69:18:0f:1b:9e:d5:04:22:99:b6:7d:70:9f:19:
d0:f1:74:5f:9a:9d:30:2f:97:fd:77:09:5b:ae:3e:
27:59:e6:58:22:5c:fa:06:00:c4:d1:31:f8:95:c7:
bf:dd:08:c6:eb:ac:52:bf:24:ac:9a:74:b2:ff:a4:
4d:2a:59:c2:b2:ac:6a:23:01:10:dc:c6:73:6e:25:
7a:25:d9:ea:1a:07:08:c2:cc:fc:b7:47:dc:40:d3:
f1:ba:5a:3f:6c:fd:de:4c:91:58:23:29:63:29:ad:
3c:50:c4:6b:8b:64:a1:40:ad:32:97:e7:84:89:c8:
18:ff:b7:d6:74:df:46:df:48:9f:03:55:a8:18:f8:
77:8d:a4:60:1d:16:ac:bf:4b:67:cc:72:a3:18:65:
d0:ba:86:be:1f:0f:41:57:40:4d:de:51:87:c8:f4:
9a:67:ec:d9:03:34:a2:a3:be:3a:82:6d:45:e6:5f:
a4:32:6c:12:fa:b7:ac:3b:9a:c3:98:2b:88:6c:3b:
ab:b3:0c:1c:d1:29:dd:18:51:52:1b:36:86:24:6f:
b0:19:36:7e:45:75:7e:5f:d1:62:70:5b:79:a4:19:
fc:c6:d5:11:01:38:a7:cc:ec:0d:46:33:ee:56:0b:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:64:04:2A:AB:F6:BD:80:45:B2:B7:44:73:92:1C:F9:48:55:97
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219078.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff60::/44
2a14:7583:efe7::/48
Signature Algorithm: sha256WithRSAEncryption
6b:7f:e1:62:a8:8a:da:f0:26:7c:be:0a:0c:3b:30:9f:a1:e0:
a4:4e:32:a3:a5:67:e0:2d:6a:93:f2:6c:f6:49:26:2e:59:d5:
c5:50:54:d8:fb:e1:8e:ab:82:fa:83:69:25:35:4b:2f:21:d2:
fe:be:70:29:ac:5f:01:2a:e7:c5:a8:06:63:ad:42:5b:ca:dd:
f5:c1:72:aa:41:1a:50:8e:4c:af:6c:8a:a9:3b:52:b1:d6:88:
25:f5:d6:02:66:f4:56:42:78:c4:cd:64:83:2e:c4:6f:31:eb:
ff:26:6c:df:2f:6b:c8:73:f8:ab:81:c9:8e:1e:b0:c7:e0:67:
db:08:e7:99:ad:e2:72:14:fb:0b:c4:b6:4d:13:ff:0d:c6:76:
5d:27:22:11:72:4a:aa:d6:2c:3e:3d:23:9c:f2:52:0a:d8:d2:
62:a1:77:31:68:c9:9b:88:30:ce:0a:2b:08:1b:59:9d:54:69:
db:af:95:37:22:0a:49:df:01:35:32:b5:20:f5:4d:a5:86:e9:
91:12:7b:41:a9:01:82:4b:32:1e:25:fc:a9:a9:2d:f3:91:5f:
54:d3:b5:97:07:e0:5d:bb:96:3e:4c:35:35:99:20:38:bf:9a:
3c:ab:09:53:47:1b:dd:e4:0f:25:6b:83:8c:f1:f4:d6:22:92:
a4:75:d6:44
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUGS3otD+JVaV0p3A84yc1+UN9DNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA4MTMwMjM3MzVaFw0yNzA4MTIwMjQyMzVaMDMxMTAvBgNV
BAMTKEVDNDY2NDA0MkFBQkY2QkQ4MDQ1QjJCNzQ0NzM5MjFDRjk0ODU1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwujxLPm9ywGZuahQHw8tpGA8b
ntUEIpm2fXCfGdDxdF+anTAvl/13CVuuPidZ5lgiXPoGAMTRMfiVx7/dCMbrrFK/
JKyadLL/pE0qWcKyrGojARDcxnNuJXol2eoaBwjCzPy3R9xA0/G6Wj9s/d5MkVgj
KWMprTxQxGuLZKFArTKX54SJyBj/t9Z030bfSJ8DVagY+HeNpGAdFqy/S2fMcqMY
ZdC6hr4fD0FXQE3eUYfI9Jpn7NkDNKKjvjqCbUXmX6QybBL6t6w7msOYK4hsO6uz
DBzRKd0YUVIbNoYkb7AZNn5FdX5f0WJwW3mkGfzG1REBOKfM7A1GM+5WCy3HAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU7EZkBCqr9r2ARbK3RHOSHPlIVZcwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE5MDc4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhR1
gP9gAwcAKhR1g+/nMA0GCSqGSIb3DQEBCwUAA4IBAQBrf+FiqIra8CZ8vgoMOzCf
oeCkTjKjpWfgLWqT8mz2SSYuWdXFUFTY++GOq4L6g2klNUsvIdL+vnAprF8BKufF
qAZjrUJbyt31wXKqQRpQjkyvbIqpO1Kx1ogl9dYCZvRWQnjEzWSDLsRvMev/Jmzf
L2vIc/irgcmOHrDH4GfbCOeZreJyFPsLxLZNE/8NxnZdJyIRckqq1iw+PSOc8lIK
2NJioXcxaMmbiDDOCisIG1mdVGnbr5U3IgpJ3wE1MrUg9U2lhumREntBqQGCSzIe
JfypqS3zkV9U07WXB+Bdu5Y+TDU1mSA4v5o8qwlTRxvd5A8la4OM8fTWIpKkddZE
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:25 2026 by rpki-client