Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202322.roa
File: AS202322.roa (raw, json)
Hash identifier: nMNDNqrBvav5W8qwyID20iom4EhvbRT+edcRnPOlO+M=
Subject key identifier: 93:1D:F0:4B:7B:DA:7B:EC:6D:54:DB:78:27:93:B5:E3:FC:93:62:A0
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7A2D46CE7F56E43FBD1581380BB9C90E63B34A42
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202322.roa
Signing time: Thu 29 Jan 2026 18:32:26 +0000
ROA not before: Thu 29 Jan 2026 18:27:26 +0000
ROA not after: Thu 28 Jan 2027 18:32:26 +0000
asID: 202322
IP address blocks: 2a14:7581:f70::/44 maxlen: 44
2a14:7581:f70::/48 maxlen: 48
2a14:7581:f71::/48 maxlen: 48
2a14:7581:f72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2d:46:ce:7f:56:e4:3f:bd:15:81:38:0b:b9:c9:0e:63:b3:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 29 18:27:26 2026 GMT
Not After : Jan 28 18:32:26 2027 GMT
Subject: CN=931DF04B7BDA7BEC6D54DB782793B5E3FC9362A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:69:27:21:a6:13:18:1f:e0:e0:5d:57:af:
10:8f:d6:bb:ac:56:73:fe:d3:29:e3:67:20:ae:8a:
99:4a:dc:db:1a:37:78:b2:64:a4:2e:7b:54:e7:dc:
f7:b5:7f:92:aa:45:5d:0f:90:d7:b0:87:d9:2c:4d:
1f:99:d0:0d:95:6f:99:21:8c:8e:d8:9c:0b:37:44:
f3:31:f0:46:2d:aa:c1:98:a7:9f:a5:51:5c:7b:fb:
34:a8:b7:08:3a:68:6d:a4:79:e0:c2:7e:37:33:db:
61:b6:3f:c6:fd:9b:d7:de:a6:8c:f6:1f:3a:93:3a:
98:2c:6f:77:a8:7c:92:76:39:36:fa:70:76:a5:14:
51:d9:cc:51:f1:f8:8c:e1:ea:f5:e5:82:11:22:3e:
76:af:1c:2a:7b:31:ae:fc:97:97:2d:15:f9:d0:c7:
84:08:3f:16:32:25:9a:fa:cc:06:60:5d:9c:31:48:
68:8e:73:ed:c6:15:c9:fb:94:3f:4b:80:90:d8:45:
ee:49:21:1a:a0:75:a2:d8:e7:b9:0d:fd:47:23:9e:
e5:6f:41:3c:20:ca:7b:03:d4:7d:32:50:24:56:ff:
10:da:28:1b:47:50:d6:00:a0:e7:95:7b:17:b4:ec:
a5:a7:32:64:ad:4e:dd:75:b1:3d:06:fe:18:85:d5:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1D:F0:4B:7B:DA:7B:EC:6D:54:DB:78:27:93:B5:E3:FC:93:62:A0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f70::/44
Signature Algorithm: sha256WithRSAEncryption
87:84:25:d8:0b:cc:db:d2:c8:c0:cd:87:68:28:68:dd:0f:67:
09:8d:43:88:37:be:92:82:06:83:c6:a9:b8:cc:cc:d9:08:d9:
61:be:4d:a3:fa:3c:e8:64:81:d8:06:75:e7:b2:cf:6f:c2:68:
a3:40:c2:bd:4a:95:05:3e:5f:a3:5d:20:2b:01:33:d8:ce:fd:
87:1b:83:6c:11:f7:bf:24:56:7d:1b:0c:c1:f2:0d:c2:55:61:
2a:ea:fa:a0:e8:50:3f:ab:46:4d:d0:e3:88:61:cc:a3:33:b4:
cd:55:eb:36:36:cb:81:65:3d:71:c6:91:82:04:4a:e7:cf:8e:
c4:96:34:59:e6:c1:d2:cc:4a:82:81:31:85:48:9f:50:73:36:
18:12:a8:f5:53:ba:85:e7:98:0f:dc:89:8d:4b:43:9d:76:b4:
ba:13:19:99:e6:3b:e2:15:29:74:fc:f6:2b:1a:d5:94:dd:c5:
7c:e6:31:dd:b6:d4:cd:b2:27:9d:81:b1:55:89:72:11:07:0f:
20:d4:bc:f0:6b:e0:d1:07:4e:00:9e:9a:6e:4d:d0:df:a6:83:
85:db:e0:c7:ec:bc:1d:85:2e:b0:e1:91:21:44:63:c9:5a:67:
6b:30:6c:d7:4b:72:57:70:ea:f2:60:d5:5b:e1:b5:d4:50:9e:
5d:0d:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:19 2026 by rpki-client