Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: UMrpbT6R15RZhtAuFrFxC/tlKZ/B0OckdqJaKFt5MWo=
Subject key identifier: 83:13:43:4F:C9:42:B7:53:37:4A:1D:68:88:FD:10:59:90:7C:B5:65
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4BF8DB18ED5F1B08A4B7563522960C73C9F246F8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
Signing time: Thu 05 Mar 2026 08:55:26 +0000
ROA not before: Thu 05 Mar 2026 08:50:26 +0000
ROA not after: Thu 04 Mar 2027 08:55:26 +0000
asID: 396982
IP address blocks: 2a14:7583:f26c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f8:db:18:ed:5f:1b:08:a4:b7:56:35:22:96:0c:73:c9:f2:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 5 08:50:26 2026 GMT
Not After : Mar 4 08:55:26 2027 GMT
Subject: CN=8313434FC942B753374A1D6888FD1059907CB565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:66:c0:e2:ac:31:28:73:b7:a0:c8:ae:3e:
f6:65:53:f7:6a:4f:00:4f:68:35:42:86:e3:f5:fd:
3d:bd:17:65:3a:fb:39:4d:1c:e8:ed:4a:b1:53:6c:
d5:dd:51:ad:67:29:bd:f3:bf:d3:12:ba:a9:56:be:
d7:5b:f9:a4:e7:12:0d:d8:bb:18:cc:fe:06:c4:04:
75:79:68:ea:b4:8d:95:b5:4d:0c:62:7b:f6:5a:1e:
ae:4e:3c:9e:96:a9:06:bf:98:08:af:52:e5:22:bd:
56:eb:39:ff:16:05:a0:18:8a:69:c2:39:2a:ad:70:
56:ea:d3:2f:f2:45:e3:f3:60:8e:e6:8c:4c:00:f6:
63:d9:ab:f7:2d:96:b0:8e:46:6c:2a:d4:f3:97:d2:
83:34:d1:50:c1:09:dd:13:3c:a6:bd:17:b7:f8:14:
12:db:1d:e0:c7:52:bd:dc:64:2e:b7:dd:bf:37:61:
4e:20:42:6a:27:79:57:8c:29:11:09:1f:ac:c6:8b:
bc:0b:6f:d2:62:f8:61:4c:1e:a1:25:9f:9f:fb:f4:
bc:1e:b2:bd:cb:21:8f:24:a2:77:f0:05:3e:49:ec:
46:9a:4a:3b:d0:c5:4c:c6:21:72:0b:3e:91:67:3c:
d7:b1:2b:2b:3b:69:23:4c:3b:bb:69:d5:f2:b1:44:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:13:43:4F:C9:42:B7:53:37:4A:1D:68:88:FD:10:59:90:7C:B5:65
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f26c::/48
Signature Algorithm: sha256WithRSAEncryption
75:a0:be:11:08:5d:f9:cf:06:10:6b:2c:70:fb:d6:69:a8:bb:
88:bd:05:20:df:73:af:c1:f8:91:e6:48:40:7a:d5:93:20:a1:
75:f0:21:43:d9:16:3a:a9:b6:94:8b:16:79:77:eb:2c:6a:ef:
e4:8c:2d:d4:1c:ef:aa:43:e5:a0:bc:80:a4:0d:6f:00:a6:db:
c1:e8:8a:3d:35:72:5a:1d:1a:c4:03:07:6f:86:bd:14:1f:2d:
dc:3d:9b:c8:b0:ff:3e:ff:a6:b2:db:4a:e9:a8:9a:bc:64:87:
04:77:ae:28:14:18:25:dc:ae:63:fc:1f:61:70:3c:bd:5b:c4:
6e:3f:bd:5e:8e:6d:20:e9:6d:19:a6:e1:e5:69:97:36:33:85:
60:e1:47:1f:ca:0f:8c:c0:ad:4b:c7:50:14:47:c5:61:1d:f0:
21:99:f7:ee:b2:7b:28:14:16:26:0a:5a:b3:b3:c6:6e:17:92:
c8:43:a2:59:d2:c7:63:87:c7:12:bc:d5:6d:81:e6:90:6b:28:
49:e1:17:8a:db:29:c2:71:e9:9a:60:6d:dc:5b:9f:df:54:29:
d7:fd:bb:60:ad:f0:d5:a6:3c:75:c1:df:44:cf:2b:4d:8b:6c:
92:9a:18:0b:5b:30:ed:d9:9c:4b:a0:2e:f6:09:33:ac:b3:d5:
42:7f:76:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUS/jbGO1fGwikt1Y1IpYMc8nyRvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAzMDUwODUwMjZaFw0yNzAzMDQwODU1MjZaMDMxMTAvBgNV
BAMTKDgzMTM0MzRGQzk0MkI3NTMzNzRBMUQ2ODg4RkQxMDU5OTA3Q0I1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsWbA4qwxKHO3oMiuPvZlU/dq
TwBPaDVChuP1/T29F2U6+zlNHOjtSrFTbNXdUa1nKb3zv9MSuqlWvtdb+aTnEg3Y
uxjM/gbEBHV5aOq0jZW1TQxie/ZaHq5OPJ6WqQa/mAivUuUivVbrOf8WBaAYimnC
OSqtcFbq0y/yRePzYI7mjEwA9mPZq/ctlrCORmwq1POX0oM00VDBCd0TPKa9F7f4
FBLbHeDHUr3cZC633b83YU4gQmoneVeMKREJH6zGi7wLb9Ji+GFMHqEln5/79Lwe
sr3LIY8konfwBT5J7EaaSjvQxUzGIXILPpFnPNexKys7aSNMO7tp1fKxRHMtAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUgxNDT8lCt1M3Sh1oiP0QWZB8tWUwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMzk2OTgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
g/JsMA0GCSqGSIb3DQEBCwUAA4IBAQB1oL4RCF35zwYQayxw+9ZpqLuIvQUg33Ov
wfiR5khAetWTIKF18CFD2RY6qbaUixZ5d+ssau/kjC3UHO+qQ+WgvICkDW8AptvB
6Io9NXJaHRrEAwdvhr0UHy3cPZvIsP8+/6ay20rpqJq8ZIcEd64oFBgl3K5j/B9h
cDy9W8RuP71ejm0g6W0ZpuHlaZc2M4Vg4Ucfyg+MwK1Lx1AUR8VhHfAhmffusnso
FBYmClqzs8ZuF5LIQ6JZ0sdjh8cSvNVtgeaQayhJ4ReK2ynCcemaYG3cW5/fVCnX
/btgrfDVpjx1wd9EzytNi2ySmhgLWzDt2ZxLoC72CTOss9VCf3ZY
-----END CERTIFICATE-----
Generated at Fri Mar 6 22:27:19 2026 by rpki-client