Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: hD/9k4fEW0DdSLwKnHTKporb/4nn7kqqJBSL7Wd3S/o=
Subject key identifier: F0:8C:0A:B8:8F:23:87:72:39:DE:A9:B9:CA:FA:3D:44:0E:40:EC:31
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 508E4E6E2D407860B10F6F158244F3216BB50964
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
Signing time: Mon 22 Jun 2026 08:19:29 +0000
ROA not before: Mon 22 Jun 2026 08:14:29 +0000
ROA not after: Mon 21 Jun 2027 08:19:29 +0000
asID: 396982
IP address blocks: 2a14:7581:9f93::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8e:4e:6e:2d:40:78:60:b1:0f:6f:15:82:44:f3:21:6b:b5:09:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 22 08:14:29 2026 GMT
Not After : Jun 21 08:19:29 2027 GMT
Subject: CN=F08C0AB88F23877239DEA9B9CAFA3D440E40EC31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:fc:60:91:af:a6:a6:f8:d8:36:c1:b6:f7:
3f:02:51:1e:29:8e:7a:62:4a:da:6d:bf:66:d0:51:
94:c1:b0:30:6d:20:d8:44:89:09:c6:b3:b5:05:a1:
70:e8:a1:df:aa:e8:5a:b4:ee:c9:31:b9:9f:b0:ff:
5c:0a:9a:1b:03:06:72:99:cd:5e:20:79:46:ef:44:
b9:e2:6f:4f:96:fb:3a:9c:6f:5b:80:8f:39:20:cc:
02:fe:08:44:ee:93:30:a9:7a:cf:e9:29:c0:ac:36:
b2:d1:e7:d5:04:38:c3:a1:12:ce:c6:40:55:5e:d9:
0d:28:54:c1:ac:da:4c:b5:f6:86:56:d1:98:f3:41:
5f:c9:54:ee:ac:a3:9c:85:c2:8b:b5:a6:1d:17:80:
75:1c:02:e7:c4:18:fc:e6:a9:bd:91:2b:45:92:c4:
ac:72:9d:38:fa:93:e8:a4:e5:c4:fc:59:5a:c6:30:
8d:42:89:ee:fb:d8:5a:48:dc:46:fa:56:4b:af:8a:
d5:5d:57:d6:29:aa:7f:82:f2:61:d3:c2:39:71:64:
ed:2f:8c:6c:76:12:6e:84:bf:bb:90:11:88:7e:84:
24:2c:32:50:24:17:60:a5:29:83:dd:ab:c6:d9:7c:
b5:72:2f:3a:75:83:2e:7d:4b:52:d5:4b:54:46:d0:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:0A:B8:8F:23:87:72:39:DE:A9:B9:CA:FA:3D:44:0E:40:EC:31
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f93::/48
Signature Algorithm: sha256WithRSAEncryption
32:33:1d:25:51:2f:7f:95:c9:5f:a5:2c:1d:b7:68:cd:1f:66:
6f:1a:90:bf:85:b7:84:d5:f2:fc:ad:99:23:ee:87:b6:8e:93:
ad:35:ba:cc:db:a2:9c:4b:02:31:b5:ea:9c:58:fd:03:74:69:
7d:b5:0c:c8:c5:5d:2f:5a:12:56:3a:93:07:1e:8a:19:ac:8b:
ee:18:cf:85:65:77:84:c7:ae:4e:96:69:6f:45:1c:d2:ec:c5:
d7:6f:b7:34:fa:63:f0:bd:06:05:3a:fa:60:78:fc:6e:4f:a7:
5c:55:82:36:e4:80:c6:cc:c2:ec:df:d3:ca:7a:40:56:94:37:
64:37:cc:ab:74:e2:76:60:fa:af:6b:d6:b5:7c:3c:3a:0e:33:
aa:65:74:3e:de:3d:65:9e:86:63:a5:e5:df:04:3f:dc:56:de:
c4:92:86:ec:fc:86:b0:0d:03:91:49:f0:be:74:72:82:84:47:
a3:5b:99:eb:6b:a3:1c:1f:d8:9f:ac:49:0f:cc:ca:ec:e5:a3:
e3:fa:13:11:f3:1c:e0:0a:0d:35:30:cf:54:66:3d:56:b5:0a:
3a:21:84:99:e1:94:58:87:9f:98:6a:bd:13:f8:83:12:76:b3:
5d:5c:49:ed:25:20:62:dc:ab:07:54:b1:86:1b:40:57:fe:41:
1f:19:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:39 2026 by rpki-client