Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219421.roa
File: AS219421.roa (raw, json)
Hash identifier: jHVv6enmpOEGRRSOQvtY/HNRFI8sPCE/QEwxSkmGtUk=
Subject key identifier: 03:1B:E7:93:EB:A8:0F:07:D5:04:BF:BE:E0:F1:DE:8F:64:FE:16:A6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3F9527C2D55F551099615AD5AB809CF54277DE42
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219421.roa
Signing time: Fri 04 Sep 2026 22:05:18 +0000
ROA not before: Fri 04 Sep 2026 22:00:18 +0000
ROA not after: Fri 03 Sep 2027 22:05:18 +0000
asID: 219421
IP address blocks: 2a14:7581::/44 maxlen: 44
2a14:7581:31::/48 maxlen: 48
2a14:7581:40::/44 maxlen: 44
2a14:7581:c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:95:27:c2:d5:5f:55:10:99:61:5a:d5:ab:80:9c:f5:42:77:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 4 22:00:18 2026 GMT
Not After : Sep 3 22:05:18 2027 GMT
Subject: CN=031BE793EBA80F07D504BFBEE0F1DE8F64FE16A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:8d:c2:35:bc:1d:c7:c6:d4:f0:91:68:c0:
04:18:be:65:07:58:41:38:78:30:de:aa:17:1e:8a:
5d:3e:ac:3f:d4:4f:91:24:24:9c:1e:8b:8d:e4:1b:
76:61:7e:9c:b9:88:c3:14:df:27:ab:69:b1:31:c9:
7b:a8:d9:51:dd:6f:34:0d:4f:e4:50:b9:00:70:ce:
aa:aa:a5:b8:ae:71:56:3c:12:ac:88:a6:98:31:1d:
10:59:66:ad:d6:2c:91:26:fb:c4:da:ec:1d:c2:38:
ef:32:2e:94:c7:92:fa:48:b3:53:18:6e:cf:de:b1:
f9:d1:f3:04:98:d4:3a:65:d0:ee:29:b7:b3:9d:28:
fc:ca:ee:ce:9f:46:22:6f:1d:55:df:b7:8a:03:af:
3b:f3:3d:a8:6f:5f:4b:87:f5:aa:b8:0b:b4:1c:e7:
be:46:b7:2c:ae:6f:f6:ad:67:82:b9:6b:61:b5:e2:
f5:17:de:83:e1:7a:e8:fa:a9:9e:29:e8:23:a0:d1:
c3:05:bf:fd:1d:15:65:da:c1:b3:3e:1c:62:cd:be:
0a:68:f7:5a:60:04:1a:67:36:91:44:fe:ef:d9:15:
4c:a8:86:f1:8c:75:a6:5a:af:05:a4:ef:e5:58:a9:
1b:fc:52:e1:cf:f4:2c:f2:71:a5:33:49:7a:31:4b:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:E7:93:EB:A8:0F:07:D5:04:BF:BE:E0:F1:DE:8F:64:FE:16:A6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS219421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581::/44
2a14:7581:31::/48
2a14:7581:40::/44
2a14:7581:c0::/44
Signature Algorithm: sha256WithRSAEncryption
24:92:d2:05:68:a8:61:24:52:12:99:7e:68:07:cb:40:a2:5b:
da:fd:72:29:f7:5f:0a:78:50:3f:b7:5e:d6:a7:69:ef:26:b1:
8c:74:35:2b:a8:73:9a:db:52:63:28:9b:ae:f8:9d:ab:45:6c:
b8:99:1f:97:3c:9b:9d:07:80:f0:2b:bb:3c:f3:96:0f:34:25:
08:d3:de:7e:28:31:cf:84:67:55:07:58:15:63:30:07:a3:7d:
78:52:ed:c4:29:5e:d5:d1:08:30:65:dd:fc:ab:a7:2d:93:b3:
e9:36:42:54:c2:69:08:26:d4:a6:41:b3:b0:42:89:37:3f:f4:
b7:8c:0d:a5:eb:58:d1:0d:9d:98:95:4f:ad:ed:92:81:d9:90:
c4:76:54:29:43:93:29:bd:ed:fc:d2:28:5a:61:34:fa:02:57:
77:80:a6:ef:de:55:ca:25:ae:ef:82:ea:ca:6b:8a:92:f8:28:
ff:6f:2a:ea:56:52:d3:5c:34:4b:b9:3b:b0:1f:41:e4:69:da:
d9:4c:25:cd:0d:cb:d8:f1:4a:5f:6c:6f:0f:61:e6:cc:c3:b1:
73:bf:2d:38:a5:d2:c3:e2:d5:20:12:a5:9f:31:b7:75:c9:99:
5d:e4:b7:e4:8b:ed:c5:d6:61:27:a5:c0:68:94:e5:df:ef:c9:
47:56:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:41 2026 by rpki-client