Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219383.roa
File: AS219383.roa (raw, json)
Hash identifier: EmxFg9sr1uiHFaMPyeC3p1KT9IoXZ7AUHnDTWbXyUjM=
Subject key identifier: 27:0E:28:9E:9C:7E:05:FB:81:76:AB:1E:AB:90:12:9C:F4:B7:12:5D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 58AE2000BC0D4EB314575D7E93974B4B5A4427A6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219383.roa
Signing time: Mon 22 Jun 2026 14:59:03 +0000
ROA not before: Mon 22 Jun 2026 14:54:03 +0000
ROA not after: Mon 21 Jun 2027 14:59:03 +0000
asID: 219383
IP address blocks: 2a14:7583:efe0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ae:20:00:bc:0d:4e:b3:14:57:5d:7e:93:97:4b:4b:5a:44:27:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 22 14:54:03 2026 GMT
Not After : Jun 21 14:59:03 2027 GMT
Subject: CN=270E289E9C7E05FB8176AB1EAB90129CF4B7125D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:6d:7a:cf:30:71:11:92:00:29:85:22:f2:
21:f3:9a:32:84:79:e4:60:3f:9a:f1:eb:a3:d9:4a:
50:23:9b:b1:6e:21:7b:ca:f9:f1:d0:5d:0c:02:fb:
fd:b9:cc:44:10:1f:15:48:08:84:8c:29:ff:5e:1a:
8b:3d:28:c8:f2:5a:02:0d:a7:4c:3c:8f:3d:4e:96:
66:1f:46:0a:9d:f0:c4:66:35:ed:d4:9a:9e:a7:78:
3d:b4:83:e7:d8:3e:8f:79:22:2b:a7:1a:a3:e3:06:
92:6a:8a:61:6a:0f:35:44:b7:d4:0d:68:5e:99:f4:
c8:74:96:14:d2:88:74:89:8e:c9:1a:3e:81:64:72:
51:c5:31:25:6a:7d:29:45:59:6a:56:30:e5:cb:6a:
24:91:93:90:f1:7e:ca:9f:e5:34:36:27:ca:b0:f0:
29:86:d6:08:cd:8e:31:55:d9:5a:e2:6a:66:79:c5:
b9:60:09:7d:fb:83:2f:b9:bf:c0:5d:f5:aa:82:b5:
e4:f7:51:73:0a:cb:6c:9d:0c:24:4f:b0:66:b2:b8:
e8:de:31:5c:e2:2c:d1:d1:a8:93:62:f6:7d:f8:fb:
2c:57:08:e2:d3:d1:f3:74:e0:1f:10:ae:cb:12:3c:
ce:4c:2e:e6:8b:ad:61:1c:6a:d1:06:90:51:9d:9c:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:28:9E:9C:7E:05:FB:81:76:AB:1E:AB:90:12:9C:F4:B7:12:5D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efe0::/48
Signature Algorithm: sha256WithRSAEncryption
66:2b:1e:5b:2a:98:c2:14:bb:8a:70:38:ba:53:cb:9a:1c:70:
ce:e7:0a:1c:da:1c:82:28:d8:13:56:34:3d:dd:38:89:e4:47:
2e:6d:e9:26:30:75:d6:c1:9f:70:76:9a:79:a4:fb:33:bd:99:
72:b8:00:92:6b:4c:6e:c1:f9:9a:6c:8e:85:33:8a:ba:07:52:
15:1f:85:b9:3a:65:58:70:95:d4:b4:fa:c1:bf:45:ec:37:12:
80:77:ae:6b:37:c4:73:05:7b:1f:75:24:e5:02:f6:4d:e5:fd:
76:94:e2:2d:f8:80:ec:a4:db:95:67:72:33:96:6f:af:66:15:
60:f5:08:7b:cf:97:e1:55:e0:1e:74:23:a7:05:1c:32:62:cf:
c6:18:c7:1f:81:b1:17:fb:8f:4e:a0:10:c3:24:5d:41:f3:78:
d7:2e:3d:c0:9f:f1:44:66:ac:e1:4f:9d:17:b9:d8:8f:98:35:
25:0c:3b:f4:4d:d8:be:d1:f5:d4:ef:cf:6c:8e:30:db:72:bb:
b6:e8:b1:f5:6d:af:95:e8:05:73:af:0e:9b:1a:ad:5e:33:33:
41:4d:2f:d6:4a:da:15:44:af:9a:61:a1:95:73:fb:bd:47:0b:
7b:f9:fd:3d:76:8d:a0:5a:68:5f:7d:8d:b2:46:6c:f7:d5:58:
41:13:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:39 2026 by rpki-client