Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219412.roa
File: AS219412.roa (raw, json)
Hash identifier: YGefnrHSpkEBEhQOG2xUgDRDk/ybDqMjEFa9H+5BRTI=
Subject key identifier: 2E:5C:56:2C:E7:EF:2D:5C:A7:DC:2E:EA:2E:BC:F3:A2:79:6C:00:BF
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3EC1140EFD0F2FB56BCF7C820E29E94635C39615
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219412.roa
Signing time: Sat 20 Jun 2026 12:30:06 +0000
ROA not before: Sat 20 Jun 2026 12:25:06 +0000
ROA not after: Sat 19 Jun 2027 12:30:06 +0000
asID: 219412
IP address blocks: 2a14:7581:3b00::/40 maxlen: 44
2a14:7581:3b00::/40 maxlen: 48
2a14:7581:9f60::/44 maxlen: 44
2a14:7581:9f60::/44 maxlen: 48
2a14:7584:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c1:14:0e:fd:0f:2f:b5:6b:cf:7c:82:0e:29:e9:46:35:c3:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 20 12:25:06 2026 GMT
Not After : Jun 19 12:30:06 2027 GMT
Subject: CN=2E5C562CE7EF2D5CA7DC2EEA2EBCF3A2796C00BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:44:23:6e:b3:2d:3e:c3:ee:f2:e7:ae:58:
cf:74:d1:af:f0:66:c3:25:f2:f1:96:1d:cc:b6:65:
58:0a:10:c8:cc:11:43:9d:4d:5c:ec:d4:ed:18:e7:
9b:c8:c0:33:72:a4:54:2a:40:8d:46:e9:3b:89:bd:
21:e5:49:c3:2e:ec:6a:7f:55:b2:a9:17:d6:85:8d:
30:ba:7e:c2:2c:18:d0:18:20:c0:02:0c:04:40:87:
e5:49:a5:85:3f:b6:6d:9d:fa:b1:87:54:1a:53:30:
23:a5:ad:44:76:ef:c3:c8:3d:0b:b8:66:6b:31:9b:
4f:ab:97:b3:51:b6:06:d3:8a:66:8c:60:18:65:77:
ce:49:a7:1d:b7:09:1c:e8:e3:67:fe:88:02:08:ed:
ad:3b:a1:20:e1:81:7a:01:2a:90:8c:5d:78:f8:22:
99:d9:74:95:13:cb:c6:2a:02:b2:79:83:cd:be:c9:
64:29:14:5d:ba:dc:56:c9:92:9e:1e:29:3d:29:36:
49:4d:e9:f9:c6:6d:51:f7:d0:ab:1a:ba:ea:60:18:
e5:a4:f3:21:69:09:33:65:50:46:53:ce:cb:25:6f:
f5:06:d3:7b:9e:29:73:00:7e:4d:d6:82:a1:49:e3:
2f:62:65:f1:5b:4e:59:9e:0c:9d:2e:a6:97:3e:c2:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:56:2C:E7:EF:2D:5C:A7:DC:2E:EA:2E:BC:F3:A2:79:6C:00:BF
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219412.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3b00::/40
2a14:7581:9f60::/44
2a14:7584:e000::/36
Signature Algorithm: sha256WithRSAEncryption
34:a9:37:1c:4b:e4:c0:c7:84:59:d4:3a:1f:97:63:fb:26:1c:
3c:69:ef:d7:57:c9:15:c5:bd:2d:99:8f:7d:27:23:ce:0f:f6:
81:e7:c5:98:98:36:37:95:1d:47:3d:59:7e:56:82:b6:f6:25:
8f:f4:9c:1d:7f:ca:6e:e0:69:c1:6e:cc:d7:b2:d6:be:dc:20:
b5:68:a4:ac:ca:a8:10:00:4a:f3:83:0b:79:8f:1d:db:15:6e:
b1:d6:3e:f7:13:b6:90:ac:c8:0a:d2:af:4e:48:a7:f3:a8:f4:
d4:97:cd:da:2f:50:57:6b:1b:13:bf:b7:14:66:6f:b5:af:4e:
a6:44:16:1d:96:0e:23:fe:42:6c:59:50:a8:31:5f:db:b0:04:
96:68:f7:5b:60:db:9a:a3:f1:76:b5:55:8d:bf:f8:1b:7a:a4:
1a:fe:70:96:54:b8:f1:40:68:e7:d9:6f:87:24:a7:cd:85:a2:
f3:a0:ac:15:ee:84:5e:83:f7:1c:4c:27:4a:13:6b:f3:75:20:
63:48:65:d1:d9:9b:e9:bd:c7:72:1b:69:c0:2a:31:b2:c1:4f:
9e:c4:da:c2:e8:23:23:4a:b4:c5:f2:26:7c:95:cd:f4:b0:97:
a8:d4:77:b2:7d:c0:46:c0:37:96:f0:ea:82:17:96:69:19:89:
0f:6e:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 08:26:09 2026 by rpki-client