Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219412.roa
File: AS219412.roa (raw, json)
Hash identifier: RSRcW3DQeiQMFx46CXDdHA8UVHdYqy6qmSqW9LpTmp4=
Subject key identifier: B2:07:93:A8:BF:86:66:FB:1D:CA:0D:26:74:CD:6E:7B:4F:79:FB:82
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 47B879F6A2115BECD41DFE095F16B441BA1ED2A2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219412.roa
Signing time: Fri 04 Sep 2026 12:00:29 +0000
ROA not before: Fri 04 Sep 2026 11:55:29 +0000
ROA not after: Fri 03 Sep 2027 12:00:29 +0000
asID: 219412
IP address blocks: 2a14:7581:3b00::/40 maxlen: 44
2a14:7581:3b00::/40 maxlen: 48
2a14:7581:9f60::/45 maxlen: 48
2a14:7581:9f68::/46 maxlen: 48
2a14:7581:9f6c::/47 maxlen: 48
2a14:7581:9f6e::/48 maxlen: 48
2a14:7581:9f6f::/48 maxlen: 48
2a14:7584:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b8:79:f6:a2:11:5b:ec:d4:1d:fe:09:5f:16:b4:41:ba:1e:d2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 4 11:55:29 2026 GMT
Not After : Sep 3 12:00:29 2027 GMT
Subject: CN=B20793A8BF8666FB1DCA0D2674CD6E7B4F79FB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:e8:bf:3b:2b:a9:61:82:27:60:29:b2:ea:
d6:a7:18:df:05:ec:a1:40:38:60:db:89:e5:dc:5c:
48:0e:eb:be:28:18:12:15:c4:ee:3f:d0:92:38:a9:
77:c4:28:aa:3f:2c:71:50:08:5e:a8:69:37:0a:8a:
36:a1:f2:e1:b0:8c:b0:fd:9b:de:ed:cb:aa:29:e4:
0e:62:45:06:a6:c1:b4:f1:0d:1b:42:aa:0f:a0:b3:
0e:0e:10:ef:9a:2f:10:5c:25:72:9c:d3:17:3d:31:
f8:9e:3f:38:fc:1a:2b:0f:65:e7:22:3c:e6:0b:5e:
f9:9d:ca:91:67:9c:a7:cc:bb:a9:29:2c:cd:c7:23:
87:56:02:d9:83:24:c4:17:c0:c8:0b:4b:b5:34:00:
c6:19:83:c8:72:6e:cd:c7:b3:7b:78:1d:03:09:a5:
53:a9:28:d1:21:5a:42:99:4a:ff:f0:a0:2e:8c:3b:
b3:cf:0c:c7:04:05:76:35:04:7e:c9:a1:b4:24:e0:
50:4c:2a:a4:c8:9b:64:ba:1b:6d:8b:17:60:12:4f:
c9:e2:c3:a9:b6:61:4a:ea:7a:96:8c:00:47:53:60:
b3:8c:0b:67:fa:c5:38:a6:79:4d:5a:43:a4:3b:34:
7f:df:f6:00:53:c2:62:c9:f3:0a:b7:31:b1:2e:00:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:93:A8:BF:86:66:FB:1D:CA:0D:26:74:CD:6E:7B:4F:79:FB:82
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219412.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3b00::/40
2a14:7581:9f60::/44
2a14:7584:e000::/36
Signature Algorithm: sha256WithRSAEncryption
80:40:b6:6b:29:96:fa:2f:63:e6:bd:87:ba:8b:ad:b0:63:38:
dd:a7:4e:8e:20:90:5b:75:a2:71:03:5e:e7:3c:83:44:d3:21:
da:7d:25:56:80:45:d9:a8:50:b9:47:e0:22:0b:24:7d:51:40:
13:65:66:95:d0:23:1d:f5:c7:49:28:e4:23:55:38:5c:c5:9e:
8f:3d:7f:52:c4:3b:76:f4:55:dd:21:b5:23:04:91:72:d5:a4:
c6:a9:06:d2:ef:f5:47:9a:e2:46:9e:51:d9:32:05:df:ff:8a:
81:5f:69:4d:1e:e4:54:03:3b:4e:56:c6:f0:a8:22:4c:f8:44:
b0:3b:36:88:66:46:94:58:aa:67:e2:ef:40:06:82:36:f1:7e:
55:e6:28:52:27:d4:11:1a:5a:57:38:cb:01:d7:53:50:ab:9a:
5b:3a:ad:d0:03:51:27:c8:93:9a:0e:38:04:d6:ad:a7:d5:be:
70:49:96:9a:64:a1:12:71:ac:35:62:33:b1:7e:04:2c:e8:cb:
50:c5:b0:9f:da:fd:fe:4b:63:ea:ae:81:0c:c3:27:12:71:35:
ca:4f:e6:75:80:f7:16:2e:00:e4:9c:08:49:af:8f:02:10:ae:
93:10:62:fe:45:35:95:76:3b:91:dc:a7:50:59:83:22:cc:cb:
8b:ec:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:30 2026 by rpki-client