Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa
File: AS202986.roa (raw, json)
Hash identifier: +oLOHvResC+Xnj/8kshWN4gX4LhQ/8E5xHqyuJfFIls=
Subject key identifier: B9:D4:F1:4B:42:96:BF:B5:F6:71:BA:1E:12:A3:99:FF:68:AC:01:4F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5594C0592C17D39E319A1565E7CE47ACB969EBF2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa
Signing time: Tue 17 Feb 2026 13:18:46 +0000
ROA not before: Tue 17 Feb 2026 13:13:46 +0000
ROA not after: Tue 16 Feb 2027 13:18:46 +0000
asID: 202986
IP address blocks: 2a14:7580:f100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:94:c0:59:2c:17:d3:9e:31:9a:15:65:e7:ce:47:ac:b9:69:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 17 13:13:46 2026 GMT
Not After : Feb 16 13:18:46 2027 GMT
Subject: CN=B9D4F14B4296BFB5F671BA1E12A399FF68AC014F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:93:d9:57:a0:82:58:a2:70:9e:37:bb:44:
34:1f:45:df:5c:a4:28:60:bf:f3:00:bf:d3:b7:f4:
06:7c:56:ed:2c:2f:f8:59:c9:15:d8:7c:91:0f:c1:
45:77:b1:59:cc:ef:32:a3:f4:a4:0c:07:5d:e3:e8:
c0:0d:e1:74:81:1f:7b:c6:22:7d:42:ef:1f:e2:49:
19:ee:6a:f3:64:3f:ce:e2:3d:37:7a:1d:43:fc:de:
4e:77:87:80:24:28:55:1f:46:ab:b6:b9:81:35:14:
2d:f0:3f:df:68:78:34:9b:e9:7e:e7:80:9f:fe:7a:
77:d9:11:87:1a:d4:03:7a:1d:a6:39:c5:43:1d:be:
b5:f4:02:99:40:85:12:81:fd:8d:09:7f:2d:ee:89:
a9:24:35:c2:5f:af:4e:e9:60:60:d9:5f:55:a6:92:
08:2f:30:da:df:79:a8:68:f3:0c:b4:c5:e1:84:81:
14:3c:f9:68:1d:83:aa:1f:a7:d7:cf:20:2a:ff:7b:
7e:2a:6b:0e:a6:a6:7b:41:79:80:29:d9:11:88:cc:
8e:52:bf:bb:b2:33:ca:c7:aa:12:b4:27:f2:19:9a:
36:bb:f1:56:54:d6:cd:7f:ac:39:ea:df:8b:e0:f5:
d2:28:26:ff:31:5c:c6:3e:1a:ca:3e:09:3d:ec:b1:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:F1:4B:42:96:BF:B5:F6:71:BA:1E:12:A3:99:FF:68:AC:01:4F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f100::/40
Signature Algorithm: sha256WithRSAEncryption
9a:3a:fb:85:49:ae:a8:62:a9:de:2f:0e:79:c6:61:4e:49:6b:
43:22:fc:0a:3b:fa:ad:8e:9d:20:2a:29:05:db:b1:07:9c:5f:
2a:a8:dc:13:6c:ae:b3:ea:0a:3d:3f:67:84:ba:0c:f8:71:9b:
f2:a3:16:7c:ce:15:ce:99:10:cb:3e:54:bd:33:e9:a3:6d:b3:
d0:c4:90:70:71:f5:11:5f:94:fc:c6:66:5a:23:6b:d4:8b:ce:
50:e8:c7:4a:26:26:57:58:dc:dd:f5:2c:08:a0:c9:9b:e0:d5:
16:c2:21:18:8e:a9:16:b6:f6:ee:b5:3d:36:3c:5f:f9:d1:3c:
7a:61:bf:1d:33:8d:f4:3c:cc:f4:a4:53:5d:8a:0c:43:f7:62:
58:b6:ea:9d:59:3a:c1:db:38:d1:5e:e2:58:5c:89:c6:01:73:
a2:18:38:57:7c:85:bc:b1:7f:13:14:f8:a3:fc:1e:d4:36:db:
d2:de:53:cf:0a:f7:c3:dc:d6:b4:7d:2a:e4:8b:eb:55:4a:a4:
cf:54:e6:51:29:81:a5:dd:e6:7b:21:b5:15:b6:2b:c8:d6:d8:
db:e3:97:57:9e:9f:86:84:76:e0:b0:ff:b8:03:c6:14:cb:56:
df:90:98:be:4a:b4:2a:85:13:5b:62:e8:9a:86:3b:23:9c:d5:
a7:e8:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:49 2026 by rpki-client