Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219421.roa
File: AS219421.roa (raw, json)
Hash identifier: +uk/xbsfjuC+OlhYKKE0hfR+UGdeWHzqiy/CTG0RFu8=
Subject key identifier: DB:40:B4:6A:D1:93:05:14:B9:6B:12:30:E8:82:FD:A3:32:E6:59:61
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0235F6D95E5D94007234C63A49F1CDB5E700907D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219421.roa
Signing time: Sun 01 Nov 2026 21:25:53 +0000
ROA not before: Sun 01 Nov 2026 21:20:53 +0000
ROA not after: Sun 31 Oct 2027 21:25:53 +0000
asID: 219421
IP address blocks: 2a14:7581::/44 maxlen: 44
2a14:7581:31::/48 maxlen: 48
2a14:7581:40::/44 maxlen: 44
2a14:7581:7c::/48 maxlen: 48
2a14:7581:c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:35:f6:d9:5e:5d:94:00:72:34:c6:3a:49:f1:cd:b5:e7:00:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 1 21:20:53 2026 GMT
Not After : Oct 31 21:25:53 2027 GMT
Subject: CN=DB40B46AD1930514B96B1230E882FDA332E65961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:64:36:c2:9a:b0:b3:95:dc:25:8f:e7:43:
9c:c2:85:83:85:30:fd:36:2b:bb:5a:2b:58:7f:32:
2b:48:c5:5a:4c:30:d3:98:2e:77:f2:90:87:8b:81:
cf:c0:ef:b4:62:25:da:57:92:65:1a:0c:11:94:40:
41:37:5c:33:34:a5:4f:0f:9c:65:94:3e:dc:2d:3f:
24:97:9b:9d:d2:f5:06:3e:f4:94:57:09:53:6b:a1:
38:df:ac:0f:d4:c0:4d:c4:93:6f:31:cc:35:c8:21:
f3:fa:ed:49:78:f3:a1:e5:1c:49:56:1f:02:1a:59:
d4:92:5e:1a:4f:37:a2:b3:29:05:08:be:de:35:17:
43:a8:a0:27:fc:50:63:cf:04:fb:6c:d3:d7:d1:0b:
48:ea:8f:9d:55:6e:ca:37:00:49:01:c0:41:5c:02:
37:1b:26:2d:8c:ea:0b:72:02:ae:2d:3b:7b:ff:a8:
c7:1b:51:7e:93:27:7c:5c:f7:c6:d9:a9:d0:49:c0:
9d:d0:d4:12:f5:ee:76:21:64:d8:8f:4b:f0:f2:11:
22:37:ea:f6:e2:3d:7e:f3:dc:c2:e8:c4:39:cf:2d:
85:b0:47:f6:ed:b8:bf:69:ea:e6:38:7e:d5:b8:0d:
90:7a:c3:2b:22:f7:2f:3d:26:f3:c1:dc:75:a5:4b:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:B4:6A:D1:93:05:14:B9:6B:12:30:E8:82:FD:A3:32:E6:59:61
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581::/44
2a14:7581:31::/48
2a14:7581:40::/44
2a14:7581:7c::/48
2a14:7581:c0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:1f:e4:45:01:b0:b0:34:31:c3:a2:7e:ee:93:11:be:3d:ae:
b2:c6:7b:e8:e8:21:78:80:bc:c5:b3:dc:dc:de:02:a2:ef:fa:
ab:87:7c:89:27:07:8e:02:1a:69:3d:0c:2b:ec:ca:0e:08:b7:
24:db:c6:64:d3:a6:ec:e4:76:23:65:de:4a:4f:19:fb:0c:e7:
33:ab:02:f4:90:55:c5:21:2c:0f:e1:b3:54:f5:44:f1:12:f6:
ba:44:50:9a:35:a5:21:7f:57:e4:fa:91:d4:70:9f:34:f8:25:
0b:77:b0:14:2e:ac:d6:02:ab:a9:00:8f:bf:ca:47:60:68:85:
17:08:a1:53:b4:72:91:b4:4c:3b:e0:aa:5f:df:db:e4:9b:61:
b8:a1:b9:31:f5:68:02:b2:60:08:79:9f:23:e7:f2:9a:3a:1b:
c0:7b:41:81:b5:52:02:c8:47:38:90:f7:88:b9:1c:87:0d:22:
ab:08:5e:e3:ef:50:f6:ca:71:cb:00:fc:9f:51:b2:ff:c2:f1:
75:89:cc:ea:5b:58:a3:bc:ee:75:1c:71:97:f9:4e:5d:76:48:
64:8b:20:e4:50:f3:07:10:4e:8f:cd:ae:ca:c4:11:85:dd:79:
98:6e:74:af:42:a3:9f:be:d3:54:36:53:f8:78:83:90:7f:29:
a0:63:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:19:28 2026 by rpki-client