Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219283.roa
File: AS219283.roa (raw, json)
Hash identifier: 5v9+fbk3BHB6thxF8ujMa1/Y1mmnESRMiLTs7iTu2bU=
Subject key identifier: 7A:03:58:F0:6C:7B:D9:BA:A9:FC:60:5D:75:B5:1E:A3:4B:B3:FB:BB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 19D31AA8DBBC483EB7BA463CF5307E8C745F194F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219283.roa
Signing time: Sat 22 Aug 2026 12:51:02 +0000
ROA not before: Sat 22 Aug 2026 12:46:02 +0000
ROA not after: Sat 21 Aug 2027 12:51:02 +0000
asID: 219283
IP address blocks: 2a14:7582:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d3:1a:a8:db:bc:48:3e:b7:ba:46:3c:f5:30:7e:8c:74:5f:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 22 12:46:02 2026 GMT
Not After : Aug 21 12:51:02 2027 GMT
Subject: CN=7A0358F06C7BD9BAA9FC605D75B51EA34BB3FBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:9a:2d:a1:9a:65:43:06:b8:b5:67:fb:5d:
bb:85:a2:5f:f7:21:dd:93:e4:fe:4b:c1:71:4d:1b:
3a:a6:6a:f4:5a:29:01:25:eb:3f:fd:07:82:69:3b:
38:74:67:cc:43:13:57:76:30:f5:9d:59:6a:0c:4d:
76:cc:81:23:2b:db:cb:c6:ff:55:d1:40:90:bc:fa:
85:42:f2:48:a1:7c:a0:8e:61:c3:9c:7a:45:a1:6a:
32:81:3c:c3:ad:8a:03:25:3c:12:24:b2:53:5d:1a:
54:5c:bb:aa:a6:e5:9a:be:71:d4:b9:d0:74:2e:18:
2f:74:f0:86:28:67:44:5b:53:19:43:9d:fc:88:7e:
98:a8:77:ad:e3:05:48:b6:6c:97:ee:c7:45:09:b3:
e0:15:27:9e:a5:f2:2b:e1:d1:fe:f0:cd:e7:0c:02:
88:3d:56:40:75:b6:1c:3f:95:ce:89:a5:d4:a3:0b:
b7:16:5b:b6:7e:28:93:ec:78:0a:d3:f9:10:d0:02:
a3:72:e8:80:55:20:ce:58:b3:fb:61:6f:63:e1:45:
39:ef:1d:1d:af:d5:16:0c:54:0e:49:f3:21:23:3a:
57:21:ed:98:3b:d3:4f:58:b2:0a:bd:7f:f5:34:68:
86:71:19:2f:8d:21:9e:62:6c:ba:d9:d0:4b:f0:d4:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:03:58:F0:6C:7B:D9:BA:A9:FC:60:5D:75:B5:1E:A3:4B:B3:FB:BB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:7000::/36
Signature Algorithm: sha256WithRSAEncryption
6c:66:fa:0a:a2:5c:06:7d:6c:34:92:40:67:9d:ac:3b:65:66:
f5:72:78:3c:dd:8a:fe:17:e5:f0:c0:71:7d:61:40:42:79:39:
e7:6e:d8:d8:b9:8d:e9:ea:a6:29:c4:27:c9:35:97:ab:9a:dc:
d3:fc:28:8f:86:5d:20:65:e9:85:67:fb:15:80:68:e1:10:15:
d9:eb:db:b2:c3:26:fc:40:a5:3f:24:58:03:3e:9c:9a:d6:f8:
b2:1b:48:c5:90:54:c4:9d:e9:2e:85:3c:1a:34:5f:d8:5e:de:
74:6c:54:ab:e1:f2:d1:6e:ae:9c:e7:20:16:8b:a3:08:03:02:
cb:04:14:b9:c9:2d:e3:a3:7a:b5:e4:f9:64:02:14:cc:c4:64:
93:c9:27:6e:ff:d7:11:bf:2d:a7:01:90:a8:20:f7:4d:c6:8e:
af:13:ba:51:f7:7d:de:f8:59:42:e5:0a:1d:b9:22:94:be:a0:
73:98:0d:6b:12:5a:e6:9d:5d:11:72:ba:29:05:bc:28:f6:c3:
a8:72:06:d8:0b:52:12:fe:e6:d0:e4:9b:b1:fc:80:ca:2c:1f:
0d:99:1d:71:41:1b:27:4a:5b:a9:2c:ad:79:61:a6:c0:94:10:
9a:39:a1:ac:46:d2:df:c2:ac:52:f6:0b:d9:a6:ff:36:0c:f2:
56:81:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:25 2026 by rpki-client