Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219208.roa
File: AS219208.roa (raw, json)
Hash identifier: uXla/iq1Ij2X04mFGW0radgGNFOGvcICgK2Te8tdnp4=
Subject key identifier: AE:3F:18:E6:1C:25:EF:BA:B4:97:A7:79:AB:E0:D8:C1:F6:05:B1:05
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1B795877B7AF1F9B2B87986869C814534F62F32F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219208.roa
Signing time: Sat 22 Aug 2026 12:50:53 +0000
ROA not before: Sat 22 Aug 2026 12:45:53 +0000
ROA not after: Sat 21 Aug 2027 12:50:53 +0000
asID: 219208
IP address blocks: 2a14:7582:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:79:58:77:b7:af:1f:9b:2b:87:98:68:69:c8:14:53:4f:62:f3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 22 12:45:53 2026 GMT
Not After : Aug 21 12:50:53 2027 GMT
Subject: CN=AE3F18E61C25EFBAB497A779ABE0D8C1F605B105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:d1:ba:94:c4:ca:1a:a3:24:31:19:fd:2e:
5a:5f:63:d7:98:a3:67:ca:b8:af:49:da:ae:52:d4:
22:ce:b0:f8:0a:d1:84:8b:b8:31:b6:1e:4b:72:24:
38:f0:02:8f:4a:23:ba:10:d6:a3:17:d3:ee:6c:5a:
55:d0:bb:f6:ae:bc:89:1d:80:33:58:d9:08:6d:ed:
fd:70:f9:31:f5:0d:1f:61:46:79:ed:87:c6:4e:42:
4d:30:11:db:41:79:18:a7:df:f0:22:62:2d:45:82:
fa:1a:67:45:d1:a3:2d:1f:b8:d0:0b:32:ce:1c:f8:
84:2e:5d:9f:e8:c3:9a:c9:f9:49:45:44:8b:27:7b:
0f:67:91:f5:e4:6d:71:ab:5a:21:b7:90:1c:1e:54:
36:4f:73:19:4e:e9:b5:b7:cc:b2:4f:43:f2:eb:0a:
4c:86:22:cc:80:ea:59:dc:94:58:d2:70:c0:99:aa:
ef:2a:6d:03:89:56:c9:d0:30:0a:f1:82:37:9c:71:
b7:3d:f9:1d:25:a3:3b:2b:83:5f:ba:cb:1a:94:06:
f6:81:ac:36:70:db:7c:17:32:42:b4:ae:60:41:1c:
67:6e:9a:86:80:ac:f9:fd:b3:9e:81:79:ac:f1:c7:
d3:be:1f:cd:f4:98:d6:68:6f:9f:fb:96:67:d8:c9:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:18:E6:1C:25:EF:BA:B4:97:A7:79:AB:E0:D8:C1:F6:05:B1:05
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:7000::/36
Signature Algorithm: sha256WithRSAEncryption
9f:95:ef:39:81:a8:cf:60:fa:28:b2:a4:8d:ca:0f:8a:d8:6d:
bf:cf:1a:43:02:aa:ea:ae:9a:d9:5b:da:80:a6:13:58:67:11:
48:a3:ec:38:da:5d:57:d2:db:ad:46:c4:fb:56:b0:65:74:e1:
ec:53:39:a6:29:e6:77:7c:61:b9:2e:19:77:9f:10:be:27:6e:
71:34:8a:d3:c0:4a:c0:cc:47:cb:58:e0:39:81:2f:d0:7c:fb:
a5:b8:58:3a:0c:37:44:cc:ea:76:09:b1:c6:5d:24:a4:49:dd:
b5:98:3d:3d:1c:df:e2:b8:f9:98:19:65:b5:b7:b8:9f:56:06:
4e:0a:a6:0e:72:12:3e:8b:43:07:71:a0:12:9c:8e:77:1a:c0:
03:f8:5e:49:c8:16:ee:cf:f8:f3:65:bf:51:ae:2d:2c:14:28:
92:0a:00:9a:a6:4d:1e:0c:c0:2d:44:2f:65:7b:86:b1:16:14:
46:ff:cc:cd:d0:1f:55:6b:6b:e9:a9:55:8d:bc:ba:3e:42:6a:
11:14:20:58:14:41:e6:2e:9f:03:8f:57:c5:d3:ac:56:8c:57:
a3:90:d8:81:f1:b8:b3:db:52:c6:56:ad:fe:b6:09:b8:b9:ab:
15:8d:d6:8c:e7:cf:75:f9:67:28:a4:85:4d:a2:92:9a:1a:b6:
fe:c0:b7:85
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUG3lYd7evH5srh5hoacgUU09i8y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA4MjIxMjQ1NTNaFw0yNzA4MjExMjUwNTNaMDMxMTAvBgNV
BAMTKEFFM0YxOEU2MUMyNUVGQkFCNDk3QTc3OUFCRTBEOEMxRjYwNUIxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOdG6lMTKGqMkMRn9LlpfY9eY
o2fKuK9J2q5S1CLOsPgK0YSLuDG2HktyJDjwAo9KI7oQ1qMX0+5sWlXQu/auvIkd
gDNY2Qht7f1w+TH1DR9hRnnth8ZOQk0wEdtBeRin3/AiYi1FgvoaZ0XRoy0fuNAL
Ms4c+IQuXZ/ow5rJ+UlFRIsnew9nkfXkbXGrWiG3kBweVDZPcxlO6bW3zLJPQ/Lr
CkyGIsyA6lnclFjScMCZqu8qbQOJVsnQMArxgjeccbc9+R0lozsrg1+6yxqUBvaB
rDZw23wXMkK0rmBBHGdumoaArPn9s56Beazxx9O+H830mNZob5/7lmfYyaCJAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUrj8Y5hwl77q0l6d5q+DYwfYFsQUwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE5MjA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1
gnAwDQYJKoZIhvcNAQELBQADggEBAJ+V7zmBqM9g+iiypI3KD4rYbb/PGkMCququ
mtlb2oCmE1hnEUij7DjaXVfS261GxPtWsGV04exTOaYp5nd8YbkuGXefEL4nbnE0
itPASsDMR8tY4DmBL9B8+6W4WDoMN0TM6nYJscZdJKRJ3bWYPT0c3+K4+ZgZZbW3
uJ9WBk4Kpg5yEj6LQwdxoBKcjncawAP4XknIFu7P+PNlv1GuLSwUKJIKAJqmTR4M
wC1EL2V7hrEWFEb/zM3QH1Vra+mpVY28uj5CahEUIFgUQeYunwOPV8XTrFaMV6OQ
2IHxuLPbUsZWrf62Cbi5qxWN1oznz3X5ZyikhU2ikpoatv7At4U=
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:28 2026 by rpki-client