Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199459.roa
File: AS199459.roa (raw, json)
Hash identifier: Can1orWpZPd8lvxEF6DzmyAji1ul4xzL88kPdD1wf5I=
Subject key identifier: 50:F1:46:E6:AA:EE:B2:6D:3B:C5:F4:DC:2B:84:03:C1:02:07:B6:D4
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6E2E35EA5E63D6E10869FBAB2A9FADB9430CD61A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199459.roa
Signing time: Mon 29 Jun 2026 13:02:45 +0000
ROA not before: Mon 29 Jun 2026 12:57:45 +0000
ROA not after: Mon 28 Jun 2027 13:02:45 +0000
asID: 199459
IP address blocks: 2a14:7586:88::/48 maxlen: 48
2a14:7586:127::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2e:35:ea:5e:63:d6:e1:08:69:fb:ab:2a:9f:ad:b9:43:0c:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 29 12:57:45 2026 GMT
Not After : Jun 28 13:02:45 2027 GMT
Subject: CN=50F146E6AAEEB26D3BC5F4DC2B8403C10207B6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:ed:a9:7e:da:53:c9:4e:20:2a:66:7f:91:
b5:ea:67:a7:eb:af:be:6c:ac:b6:b3:fc:7d:e2:eb:
0a:a4:76:cc:05:91:86:b3:b8:58:88:39:0d:d4:19:
cc:35:80:57:88:c1:0a:c1:45:7c:3a:7d:14:ed:fd:
99:7d:2a:1b:e0:01:4e:12:f9:b4:fb:8c:d4:1e:04:
80:cd:6e:1c:10:f9:c4:fb:59:b4:1f:a4:63:1a:d9:
e1:a2:ad:14:55:07:ca:5d:8c:d7:8c:9f:fb:99:0f:
d5:6c:97:ca:11:dc:d0:64:eb:91:62:32:a9:0c:3e:
88:1c:b7:9e:d2:1f:51:90:1b:c7:ac:ea:5c:af:cb:
49:62:6c:32:05:e2:e1:a0:3f:5f:72:0d:fb:ae:b6:
1b:52:d9:7d:f7:cc:e2:b8:ea:6a:7f:16:cc:53:58:
76:74:df:fc:44:c0:72:c5:f9:83:81:62:6e:17:ac:
4e:6f:f8:04:ae:31:c2:84:6b:aa:89:05:07:d0:83:
86:e9:8e:9d:67:e2:59:d7:4a:f5:bd:fd:67:3c:d4:
53:31:f1:c0:f2:ba:7f:50:ab:01:f8:7b:5a:95:55:
da:f5:6c:e0:06:19:23:0a:9d:d5:20:10:f5:84:32:
31:21:22:d7:78:bb:77:c0:16:e8:48:ca:fb:1e:65:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:46:E6:AA:EE:B2:6D:3B:C5:F4:DC:2B:84:03:C1:02:07:B6:D4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7586:88::/48
2a14:7586:127::/48
Signature Algorithm: sha256WithRSAEncryption
20:88:b3:6c:43:4a:3b:ab:cf:9e:fa:1e:20:f2:a9:52:96:96:
85:85:cc:4a:f5:b6:e8:ba:12:94:71:a6:fa:d3:cc:5b:d0:bf:
58:c8:d9:79:c1:c6:25:80:5c:4f:06:e1:10:12:82:73:56:28:
9e:fe:22:ea:f7:c2:ed:8f:fe:17:9b:e1:22:bf:e1:e9:04:cd:
8a:6f:62:4b:f2:5c:0f:0c:65:e3:e2:71:1d:d0:0b:33:67:a8:
06:f1:a2:de:8e:bf:b2:9c:ee:f2:05:49:84:8d:7e:14:2b:2f:
26:d1:a6:6e:2f:b9:f9:1b:6c:d1:cf:3a:7b:fe:50:3e:f4:8c:
8e:63:72:0b:2e:66:ac:60:02:5e:c7:36:d9:b5:3b:c7:36:49:
0a:47:89:2f:6c:c6:7d:8d:86:e4:cc:be:db:75:42:b5:f7:5c:
4f:42:18:e9:81:ae:2b:c3:09:29:b8:f8:08:f7:af:ae:ce:69:
90:10:65:8b:5d:2f:22:4e:1e:81:22:5e:5d:99:ff:1c:aa:2a:
90:5e:29:21:22:45:73:5c:b4:47:9e:dc:42:21:0f:30:5d:c0:
3c:e4:45:90:53:fe:90:b6:4a:70:42:c4:fb:af:21:e3:1f:34:
6b:f1:2f:6a:05:f8:8a:60:bd:8e:e2:0d:60:7d:17:81:9a:21:
4f:7e:a9:e9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUbi416l5j1uEIafurKp+tuUMM1howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA2MjkxMjU3NDVaFw0yNzA2MjgxMzAyNDVaMDMxMTAvBgNV
BAMTKDUwRjE0NkU2QUFFRUIyNkQzQkM1RjREQzJCODQwM0MxMDIwN0I2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+te2pftpTyU4gKmZ/kbXqZ6fr
r75srLaz/H3i6wqkdswFkYazuFiIOQ3UGcw1gFeIwQrBRXw6fRTt/Zl9KhvgAU4S
+bT7jNQeBIDNbhwQ+cT7WbQfpGMa2eGirRRVB8pdjNeMn/uZD9Vsl8oR3NBk65Fi
MqkMPogct57SH1GQG8es6lyvy0libDIF4uGgP19yDfuuthtS2X33zOK46mp/FsxT
WHZ03/xEwHLF+YOBYm4XrE5v+ASuMcKEa6qJBQfQg4bpjp1n4lnXSvW9/Wc81FMx
8cDyun9QqwH4e1qVVdr1bOAGGSMKndUgEPWEMjEhItd4u3fAFuhIyvseZQRhAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUUPFG5qrusm07xfTcK4QDwQIHttQwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTk5NDU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhR1
hgCIAwcAKhR1hgEnMA0GCSqGSIb3DQEBCwUAA4IBAQAgiLNsQ0o7q8+e+h4g8qlS
lpaFhcxK9bbouhKUcab608xb0L9YyNl5wcYlgFxPBuEQEoJzViie/iLq98Ltj/4X
m+Eiv+HpBM2Kb2JL8lwPDGXj4nEd0AszZ6gG8aLejr+ynO7yBUmEjX4UKy8m0aZu
L7n5G2zRzzp7/lA+9IyOY3ILLmasYAJexzbZtTvHNkkKR4kvbMZ9jYbkzL7bdUK1
91xPQhjpga4rwwkpuPgI96+uzmmQEGWLXS8iTh6BIl5dmf8cqiqQXikhIkVzXLRH
ntxCIQ8wXcA85EWQU/6QtkpwQsT7ryHjHzRr8S9qBfiKYL2O4g1gfReBmiFPfqnp
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:13 2026 by rpki-client