Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219367.roa
File: AS219367.roa (raw, json)
Hash identifier: mns8Z000esHvOaW6eqpXpKn9ff+T3QwbMRwBw70aHmc=
Subject key identifier: 29:AD:62:7B:3F:9A:30:54:5F:30:C3:E4:F8:BF:DB:2C:C5:C0:85:A7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1FC079933F2D322C43DCA4CEA31F684C9DD2204D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219367.roa
Signing time: Tue 23 Jun 2026 12:00:43 +0000
ROA not before: Tue 23 Jun 2026 11:55:43 +0000
ROA not after: Tue 22 Jun 2027 12:00:43 +0000
asID: 219367
IP address blocks: 2a14:7583:efe1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c0:79:93:3f:2d:32:2c:43:dc:a4:ce:a3:1f:68:4c:9d:d2:20:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 23 11:55:43 2026 GMT
Not After : Jun 22 12:00:43 2027 GMT
Subject: CN=29AD627B3F9A30545F30C3E4F8BFDB2CC5C085A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:3f:45:97:bc:c5:af:7f:17:51:1b:1e:87:
1b:6a:06:27:f7:36:d5:6f:62:b2:2c:63:a7:ef:80:
39:2a:15:90:28:23:49:cf:bb:07:28:41:05:fb:e7:
82:ec:af:aa:af:5c:f9:b7:b4:99:aa:48:f7:47:68:
b2:d1:65:48:89:9b:8b:52:89:ca:8a:f5:6f:b6:8a:
80:be:a0:04:cb:ac:30:fd:b1:9c:a0:e2:65:eb:77:
42:fd:81:e2:42:8b:ba:ab:e5:4c:1b:68:d9:bd:83:
f1:a8:01:32:3f:d7:2d:16:7e:68:73:fb:02:e5:7e:
76:00:16:8d:2a:9e:d3:9c:ad:4a:e0:7f:9b:de:54:
86:be:ea:e7:31:68:3b:23:77:27:1e:6c:8a:55:a1:
13:0d:d2:0b:e9:67:ac:8b:1f:8e:5b:f2:b8:43:6c:
c8:f9:5e:cc:e5:a9:d8:4e:fa:cb:50:a3:28:57:3a:
2e:b5:77:00:57:11:17:59:be:aa:01:6a:eb:ef:7d:
69:b8:ea:03:c9:75:87:76:bc:fc:fd:bd:1d:74:4e:
e2:2c:93:f8:46:80:ff:5b:23:93:90:19:da:62:f6:
20:20:d6:26:6e:60:51:b9:a5:02:44:44:de:3b:cf:
d3:8c:7e:55:03:1c:a3:1b:27:e8:ae:9c:03:a9:3e:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:62:7B:3F:9A:30:54:5F:30:C3:E4:F8:BF:DB:2C:C5:C0:85:A7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efe1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:67:11:b1:e2:21:d8:18:68:b2:26:fa:74:1a:39:b9:4a:8b:
48:99:9c:c6:9b:53:5b:5d:3b:72:c0:7b:69:c6:d5:c8:71:cf:
30:d5:c8:84:8a:eb:ba:d1:31:c8:8b:a6:fd:d5:71:da:50:fc:
9b:2b:0d:d9:90:68:be:b8:27:9a:6e:f4:61:4c:67:90:55:80:
42:87:de:5b:60:b4:39:8d:a4:dc:60:35:6c:26:8d:4a:2e:64:
9f:81:01:e7:d6:01:ec:c5:a2:6e:32:98:fe:0c:8c:1a:25:30:
87:9e:60:20:d3:2d:39:27:d0:44:68:2f:1a:af:a8:b6:84:b2:
e5:f5:e1:8d:4e:b5:aa:e1:35:ba:24:ba:f9:ee:46:43:2e:52:
ef:31:37:93:4b:dc:8e:7d:72:d0:e1:34:07:9b:dc:55:e0:b1:
01:37:6f:32:c1:a5:39:73:71:c9:0e:7e:f3:37:14:2a:d3:1a:
7b:04:f0:cf:fd:ba:8a:ee:e3:a9:35:c4:ec:7c:e1:dc:b2:aa:
96:14:57:df:2a:9f:96:fd:4e:f3:3c:69:b0:d9:07:92:92:20:
0f:6f:98:6a:06:af:7e:b5:a5:7b:67:14:1f:e6:9b:d4:62:77:
3e:06:d9:11:02:c0:c2:ca:bd:57:73:ef:b3:cb:2c:23:c4:52:
31:2a:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:40 2026 by rpki-client