Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219526.roa
File: AS219526.roa (raw, json)
Hash identifier: gItZl8dfIrrabw6OZTY3YL+EN3zadTsnx9shIFxERsI=
Subject key identifier: 16:EA:67:AB:12:88:24:CE:0C:A8:78:75:08:DF:D8:07:DF:4C:B5:5B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 53A67AA449D78D32443B4608DC6B547CDC20E71B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219526.roa
Signing time: Fri 05 Jun 2026 17:44:44 +0000
ROA not before: Fri 05 Jun 2026 17:39:44 +0000
ROA not after: Fri 04 Jun 2027 17:44:44 +0000
asID: 219526
IP address blocks: 2a14:7583:effc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a6:7a:a4:49:d7:8d:32:44:3b:46:08:dc:6b:54:7c:dc:20:e7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 5 17:39:44 2026 GMT
Not After : Jun 4 17:44:44 2027 GMT
Subject: CN=16EA67AB128824CE0CA8787508DFD807DF4CB55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:b3:fb:78:70:84:3f:9d:bd:1a:b3:87:d5:
f3:88:a2:e8:69:69:5b:cc:ea:f3:ac:e8:97:78:51:
66:d1:70:bf:cb:43:b2:8a:b9:e5:bf:22:1e:d5:05:
8e:1b:86:07:82:33:a9:e5:d0:7a:c6:0f:b9:da:bd:
59:92:ef:c8:a9:7c:b7:af:b7:25:02:3e:4d:bd:88:
03:ee:6e:aa:f7:3f:8b:a8:3d:46:2d:39:4b:fc:35:
2d:9a:39:96:8c:64:d8:9f:28:0d:85:a1:1c:69:5e:
fb:90:c6:ae:d2:9e:75:9d:eb:93:50:09:a5:3f:09:
bf:73:f3:cd:36:80:1b:fc:8e:29:13:b6:03:4c:56:
11:eb:d9:0c:68:4f:35:0b:76:1e:a3:10:96:8b:2d:
e6:98:bd:a0:5a:f2:f2:4d:99:2e:b4:d6:ce:7f:97:
de:a3:e4:21:f3:52:cf:89:5c:8e:0c:10:7d:16:33:
83:5b:72:47:52:5a:f5:7d:d4:b3:2e:50:86:4f:7a:
3b:b5:02:d2:a2:3d:18:c4:dd:0a:03:54:6f:a1:eb:
9b:8b:ba:38:92:c7:b1:2f:ee:89:28:90:fa:11:f6:
7d:3f:4c:62:f2:09:2b:b5:9d:47:3a:ec:8a:7f:84:
51:8e:3b:ef:44:e8:4f:c9:2f:46:a6:24:a6:c3:00:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:67:AB:12:88:24:CE:0C:A8:78:75:08:DF:D8:07:DF:4C:B5:5B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:effc::/48
Signature Algorithm: sha256WithRSAEncryption
07:5d:c7:c2:a0:dd:23:4b:f2:12:ad:5b:b2:77:25:f9:df:af:
7b:80:97:c9:ee:9c:7c:48:6a:a5:ac:3e:f1:07:0b:ec:10:e5:
ad:58:19:ad:f1:00:47:31:71:da:f4:31:a5:fb:03:eb:7f:14:
83:8a:58:2d:d2:0f:92:93:1e:e0:5f:25:61:6d:c3:68:c4:65:
68:ba:3e:fa:2b:63:24:8b:c5:53:98:8a:6e:80:f3:1a:11:38:
e8:df:5c:9e:e0:d1:1e:ad:bb:6d:cf:25:cb:a9:08:20:e0:d1:
15:df:1e:6d:4a:7d:54:63:e5:70:02:e8:da:f3:50:49:40:fc:
d7:5c:fb:62:78:a6:67:3f:55:c8:54:6f:d8:1c:b3:72:f4:d7:
6c:f7:24:49:48:59:02:c2:d8:4e:86:c7:ab:c0:6e:7b:9d:92:
58:0e:ce:14:39:b4:63:67:85:a3:45:26:19:fe:e4:95:97:5e:
e5:33:4c:37:d4:dd:74:2a:a3:eb:61:d0:f1:29:df:21:73:4f:
10:af:6d:96:41:1a:50:84:56:96:fe:b9:fe:9e:26:0a:9e:c3:
d3:4b:63:ae:68:14:a3:27:47:8c:a7:a6:b0:8a:0c:a3:55:c1:
6f:7d:74:c2:6a:1d:6f:5b:d5:01:9c:6e:c1:7f:6b:a8:23:a5:
f7:c8:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:38 2026 by rpki-client