Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219207.roa
File: AS219207.roa (raw, json)
Hash identifier: QOwWdGLBuYGVpZNtuPu+tNOLdR5ANhw3ltmjEv3Kjvg=
Subject key identifier: 9A:2B:10:BB:46:28:2F:FE:74:61:1D:86:16:97:43:D3:EA:E1:8B:A1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2DD155F02CCAA8830BA617FF3099C575C472F0A9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219207.roa
Signing time: Wed 28 Oct 2026 09:57:11 +0000
ROA not before: Wed 28 Oct 2026 09:52:11 +0000
ROA not after: Wed 27 Oct 2027 09:57:11 +0000
asID: 219207
IP address blocks: 2a14:7581:5800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d1:55:f0:2c:ca:a8:83:0b:a6:17:ff:30:99:c5:75:c4:72:f0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 28 09:52:11 2026 GMT
Not After : Oct 27 09:57:11 2027 GMT
Subject: CN=9A2B10BB46282FFE74611D86169743D3EAE18BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:c3:c9:3e:b3:12:95:6e:19:ee:9a:1e:a5:
9a:4f:31:d8:bc:73:16:86:1e:d9:7e:57:ce:77:d7:
d4:a6:89:39:14:88:22:e2:97:b4:2d:c5:f5:b7:e2:
2b:29:3c:33:25:e5:58:30:b4:fe:65:66:9a:11:54:
7f:82:5c:71:fd:2e:34:e0:d0:ad:53:0e:1b:7a:a3:
99:b1:c5:4d:02:4a:e8:2b:54:4a:1f:23:8c:1c:50:
b1:55:e6:c7:ab:3b:7c:4d:38:cd:15:0c:52:fa:f6:
9d:08:2c:9a:cc:98:ec:85:e2:fa:07:7d:d5:79:72:
59:19:a3:a5:02:c6:7b:0e:fa:38:f3:29:38:b8:73:
8d:ad:c0:75:f2:5d:a1:ab:8a:66:5e:70:99:27:ae:
99:87:83:f7:2e:ab:08:00:4b:05:9e:9f:0f:44:81:
2d:ca:15:32:57:91:10:81:3d:e4:ea:33:ed:eb:88:
06:4a:6c:6d:d6:e0:af:f5:1e:d2:6b:04:ec:ad:d3:
0a:dc:7e:9b:81:05:f6:94:e3:85:b1:e8:f1:aa:67:
79:4e:4c:0b:a5:ad:30:ca:30:30:c9:c7:64:1e:c1:
6f:77:5a:0a:5f:61:17:23:c1:19:7a:3f:4a:00:7e:
eb:40:c3:9b:0d:a0:7f:68:ee:3c:82:52:57:8d:d4:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:10:BB:46:28:2F:FE:74:61:1D:86:16:97:43:D3:EA:E1:8B:A1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219207.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5800::/40
Signature Algorithm: sha256WithRSAEncryption
75:5b:3b:47:23:92:63:07:9a:a4:74:55:72:bf:62:4c:4f:e0:
9e:d5:e1:4e:e3:56:48:e1:95:97:14:15:71:16:db:55:a8:b4:
18:fb:69:c1:32:8c:58:21:35:1e:65:ca:80:44:60:22:f0:b8:
c8:c2:7a:7f:c1:cc:8a:dd:56:d3:81:d8:7e:0c:3d:7e:87:6d:
c2:f9:92:28:54:25:40:dc:29:7a:f6:e2:d1:bb:2d:e5:87:37:
a7:52:3a:91:64:1e:e0:91:0d:2a:3d:6d:17:c7:b3:8b:c7:34:
bd:86:cd:a1:6c:cd:7d:d2:10:13:2a:bd:5b:ab:f3:1e:38:88:
90:a9:b2:ff:88:09:4f:dc:cf:ec:25:e6:76:27:70:a3:1d:49:
b8:3c:94:c4:09:46:77:ec:df:72:66:f8:97:7f:5a:97:b6:09:
98:27:aa:56:56:b8:94:3f:3d:10:a5:ac:01:5b:2b:1a:e5:3b:
11:32:91:ce:7b:35:d2:b3:7f:8e:64:d9:61:19:b8:38:87:45:
00:70:a9:09:b0:fe:a7:a1:fa:fb:30:01:2f:05:7a:c4:82:c1:
34:0e:06:70:53:38:6e:e5:bb:6a:14:0c:fd:75:b5:d8:1b:0d:
72:cc:7d:97:b4:66:7e:be:68:8e:32:16:da:00:cf:94:04:fe:
de:32:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:24:58 2026 by rpki-client