Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: H4bUB0J0ZQki8qmc4A0/M5FizXth5XSw9gz+Gb/IYoo=
Subject key identifier: 0D:60:5D:50:3D:7F:65:1A:B5:4D:ED:CE:B8:D2:C1:54:C9:CD:3B:31
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6019937CB4A00F8342A290920CDD58A28CF5CB3D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
Signing time: Tue 07 Apr 2026 11:58:11 +0000
ROA not before: Tue 07 Apr 2026 11:53:11 +0000
ROA not after: Tue 06 Apr 2027 11:58:11 +0000
asID: 396982
IP address blocks: 2a14:7583:f26c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:19:93:7c:b4:a0:0f:83:42:a2:90:92:0c:dd:58:a2:8c:f5:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 7 11:53:11 2026 GMT
Not After : Apr 6 11:58:11 2027 GMT
Subject: CN=0D605D503D7F651AB54DEDCEB8D2C154C9CD3B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:f5:e8:75:c5:5e:4c:f8:4a:8f:1d:e1:b9:
02:74:55:40:f6:d1:d4:f6:0e:59:5c:93:4a:7e:ec:
c0:b7:ee:3d:a1:d1:02:ee:91:7c:55:d0:a6:64:52:
93:79:a0:96:34:56:48:ab:0d:b3:64:f7:dc:bc:8d:
e3:69:91:98:45:48:ee:f1:c7:78:88:4c:6f:fb:6c:
c8:ad:bc:c0:51:2d:cf:7a:19:fa:8c:61:9c:34:4d:
15:1d:90:3a:05:d3:a5:18:24:22:1c:e2:b9:b6:a8:
e6:49:0d:cb:70:01:0d:0b:7c:5c:41:3e:62:0c:18:
f8:c8:96:c3:cb:75:2b:cb:a0:ae:c3:be:43:a8:93:
21:d2:25:f2:c9:e3:07:4e:21:0e:97:af:fa:79:54:
23:4d:b2:33:51:79:6a:6c:0f:93:c1:9c:6f:72:c7:
c4:0d:36:eb:12:38:55:8c:73:ea:af:62:d2:1d:a8:
fa:99:cf:58:36:0e:25:36:8a:e4:60:d2:95:1d:47:
45:8b:1d:e8:00:ed:97:ef:ff:91:f5:c0:e0:b6:b8:
de:23:fa:f3:27:e2:07:f6:88:6f:c5:17:ac:31:e9:
a9:12:71:75:35:4a:85:b4:03:d2:21:0c:e0:b6:85:
5a:69:4c:aa:77:c9:69:8e:97:d6:e9:63:21:e6:f3:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:5D:50:3D:7F:65:1A:B5:4D:ED:CE:B8:D2:C1:54:C9:CD:3B:31
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f26c::/48
Signature Algorithm: sha256WithRSAEncryption
35:a8:c0:cd:1f:eb:85:ab:dc:2e:1f:41:39:8f:2f:8c:8a:3c:
f8:94:a6:74:7f:3d:fe:fa:93:88:05:3a:c1:9e:3f:21:7f:da:
49:7a:16:11:3c:76:05:76:4e:30:f2:8e:16:52:f3:ec:14:99:
94:85:87:c8:17:87:e7:3e:1a:33:6c:61:40:29:48:04:d9:9a:
d5:29:04:48:98:e2:e9:d0:92:1f:7d:69:46:ee:4e:17:76:70:
f5:2c:da:51:26:a8:4a:c2:cb:a3:96:83:3d:9e:92:25:39:9f:
ed:c7:39:e5:4a:bb:71:ce:b4:fd:69:25:55:e7:06:06:7f:48:
a3:a2:25:d5:47:d9:9b:fc:a6:a0:dc:65:6f:5c:97:95:87:cd:
04:2f:c9:8d:24:8f:f0:0c:97:ee:6e:d6:8d:67:77:a9:04:07:
18:aa:e9:fb:2b:a3:81:11:bc:b2:0c:65:6b:ce:e1:71:ed:b9:
6a:ab:11:44:ab:91:5c:21:35:d8:f7:4d:39:a5:07:67:69:d0:
62:22:9b:3e:64:78:da:76:a7:b1:57:97:53:3d:69:e1:ba:90:
22:68:ca:af:bf:79:c4:c5:1b:a8:cb:14:04:be:5c:f4:bf:d3:
0b:7f:af:1a:a4:e9:d9:55:86:41:57:5a:62:fc:48:99:d7:da:
ca:3e:a6:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUYBmTfLSgD4NCopCSDN1Yooz1yz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA0MDcxMTUzMTFaFw0yNzA0MDYxMTU4MTFaMDMxMTAvBgNV
BAMTKDBENjA1RDUwM0Q3RjY1MUFCNTRERURDRUI4RDJDMTU0QzlDRDNCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HfXodcVeTPhKjx3huQJ0VUD2
0dT2Dllck0p+7MC37j2h0QLukXxV0KZkUpN5oJY0VkirDbNk99y8jeNpkZhFSO7x
x3iITG/7bMitvMBRLc96GfqMYZw0TRUdkDoF06UYJCIc4rm2qOZJDctwAQ0LfFxB
PmIMGPjIlsPLdSvLoK7DvkOokyHSJfLJ4wdOIQ6Xr/p5VCNNsjNReWpsD5PBnG9y
x8QNNusSOFWMc+qvYtIdqPqZz1g2DiU2iuRg0pUdR0WLHegA7Zfv/5H1wOC2uN4j
+vMn4gf2iG/FF6wx6akScXU1SoW0A9IhDOC2hVppTKp3yWmOl9bpYyHm8/NtAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUDWBdUD1/ZRq1Te3OuNLBVMnNOzEwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMzk2OTgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
g/JsMA0GCSqGSIb3DQEBCwUAA4IBAQA1qMDNH+uFq9wuH0E5jy+Mijz4lKZ0fz3+
+pOIBTrBnj8hf9pJehYRPHYFdk4w8o4WUvPsFJmUhYfIF4fnPhozbGFAKUgE2ZrV
KQRImOLp0JIffWlG7k4XdnD1LNpRJqhKwsujloM9npIlOZ/txznlSrtxzrT9aSVV
5wYGf0ijoiXVR9mb/Kag3GVvXJeVh80EL8mNJI/wDJfubtaNZ3epBAcYqun7K6OB
EbyyDGVrzuFx7blqqxFEq5FcITXY9005pQdnadBiIps+ZHjadqexV5dTPWnhupAi
aMqvv3nExRuoyxQEvlz0v9MLf68apOnZVYZBV1pi/EiZ19rKPqYB
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:05 2026 by rpki-client