Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219533.roa
File: AS219533.roa (raw, json)
Hash identifier: Vl1jgT8sfHiAt8TaBD61KhgO8URIoPqnMcTEZyuFVUM=
Subject key identifier: 41:09:5B:65:FF:05:21:95:4C:2F:F8:C2:F9:E6:7A:60:35:C6:9A:59
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2E4BF06B0683E6CE466F9C96269F536495984E87
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219533.roa
Signing time: Thu 18 Jun 2026 14:06:43 +0000
ROA not before: Thu 18 Jun 2026 14:01:43 +0000
ROA not after: Thu 17 Jun 2027 14:06:43 +0000
asID: 219533
IP address blocks: 2a14:7581:9ff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4b:f0:6b:06:83:e6:ce:46:6f:9c:96:26:9f:53:64:95:98:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 18 14:01:43 2026 GMT
Not After : Jun 17 14:06:43 2027 GMT
Subject: CN=41095B65FF0521954C2FF8C2F9E67A6035C69A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:7a:f7:30:c6:85:06:0a:0e:59:f6:81:f2:
ba:ce:14:7f:12:d9:6a:22:ea:bd:64:bd:9b:5d:cd:
79:35:49:11:31:a9:ab:1b:ed:10:37:86:e3:94:4e:
01:33:db:83:28:2a:46:71:97:12:ce:27:7e:13:86:
d1:6e:18:3e:ff:00:af:0f:dc:5a:c0:1a:47:45:f5:
0e:29:30:b6:c6:d1:ab:fb:54:bc:12:15:6c:c8:dd:
80:d4:1d:f9:79:25:1e:5c:db:a4:45:d0:d9:4a:14:
2e:04:ad:aa:83:eb:f8:58:7e:da:73:ab:67:1a:09:
db:c9:77:b1:6f:5c:05:f2:6e:53:51:e6:db:47:3f:
f1:3f:2f:af:d4:14:d9:62:ed:2d:fb:00:34:71:c3:
71:e8:62:31:83:45:fb:ad:e1:69:36:e2:0c:b1:09:
d7:bc:96:87:cc:50:86:bb:fe:ea:22:f8:a5:2d:1d:
7f:32:2b:e8:4c:af:7f:24:d0:72:ce:c8:f3:ec:9e:
65:89:ab:0b:f8:4c:b9:f6:5d:77:f5:7e:85:7f:ad:
9a:4e:68:6c:d8:7c:64:f2:e8:89:3e:3c:6e:fe:86:
a9:d5:92:4f:0e:7f:15:e9:c2:04:b7:e6:dc:a2:d7:
59:64:93:e0:f3:b3:28:9e:e8:29:1c:5c:c1:01:bc:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:5B:65:FF:05:21:95:4C:2F:F8:C2:F9:E6:7A:60:35:C6:9A:59
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9ff0::/44
Signature Algorithm: sha256WithRSAEncryption
28:20:ca:27:d3:1c:c8:46:82:a6:73:39:8a:3b:28:90:23:18:
c7:5b:d0:84:32:2a:16:a9:c0:14:96:87:00:a9:9d:dd:6a:6b:
0c:d6:c9:89:dd:85:26:57:3a:a4:c3:20:4f:9f:2c:c0:bd:9d:
cc:f9:a4:f3:73:70:d7:4a:ce:de:b3:fe:7f:f3:a5:61:09:6c:
fa:99:0c:75:d6:c6:a2:18:d3:e0:aa:55:a4:02:7b:57:64:bb:
eb:90:c5:56:f8:a1:63:5f:b7:2e:e1:55:29:04:31:f7:04:84:
c6:08:71:b8:dd:d7:13:b3:fd:43:be:fd:90:71:b5:d3:b4:5d:
47:1d:ba:c5:5c:07:f7:da:69:2d:06:8e:73:35:a8:fa:2e:a3:
fa:54:5c:4c:e8:ba:73:87:63:77:94:70:2a:ce:15:69:03:30:
d8:cc:b9:e4:5e:09:3a:42:fd:d8:74:98:ce:57:3d:cf:97:a6:
68:34:22:61:bc:f9:e5:64:b1:36:4f:af:42:d1:fc:2b:73:d0:
3c:f8:ba:08:e6:0e:62:73:fc:cc:68:b3:28:63:bc:e3:cb:f6:
a1:99:0d:60:7d:19:5a:46:2f:b3:95:97:8f:07:87:0f:c0:ba:
da:4c:a4:1a:21:47:19:ce:07:b7:e9:d9:41:0e:f4:d8:fe:d2:
33:4c:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:40 2026 by rpki-client