Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199459.roa
File: AS199459.roa (raw, json)
Hash identifier: 5a6X7Ipm38t1q4kg8mjjJy+HLxOWQh45xnV6BxmWMOc=
Subject key identifier: 1B:A4:F7:68:DD:BE:1B:AD:C5:95:FD:FD:3A:B9:A9:90:FE:27:61:5A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3DF973FC357D6336CEFF976FBB858B0ED6B8C953
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199459.roa
Signing time: Sun 19 Oct 2025 17:47:45 +0000
ROA not before: Sun 19 Oct 2025 17:42:45 +0000
ROA not after: Sun 18 Oct 2026 17:47:45 +0000
asID: 199459
IP address blocks: 2a14:7586::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f9:73:fc:35:7d:63:36:ce:ff:97:6f:bb:85:8b:0e:d6:b8:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 19 17:42:45 2025 GMT
Not After : Oct 18 17:47:45 2026 GMT
Subject: CN=1BA4F768DDBE1BADC595FDFD3AB9A990FE27615A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:80:cd:28:1f:16:bd:5f:cc:8e:3b:75:35:
77:7f:f6:93:6e:3b:35:9d:d6:77:49:3e:17:c6:e5:
78:d9:f3:af:ff:00:38:1c:e2:56:d7:b4:9c:d4:d5:
60:ab:dc:79:69:e0:72:1b:46:74:dd:e9:c8:4b:cc:
2b:57:75:7e:59:28:dc:a3:ba:b9:f4:3c:da:1c:d3:
f6:b5:1f:9e:a1:9c:6b:f9:b2:a0:43:41:e8:4d:f3:
65:86:ed:58:46:f5:6d:e3:39:05:7c:f9:b2:2c:a2:
2f:de:71:17:11:0c:38:11:e0:9d:bc:9f:eb:1a:ca:
cb:7a:13:e7:1f:05:1e:66:42:1d:3b:15:ea:a7:03:
dc:62:3f:5a:73:cb:2f:30:bd:40:dc:ca:f7:41:ad:
b3:65:40:4d:17:35:85:cf:db:70:86:74:05:00:29:
04:ea:45:53:28:80:27:4d:8d:99:13:3c:02:61:5a:
83:99:7c:97:3c:fa:fd:c8:8f:6d:b3:88:2c:0e:26:
52:44:79:b6:cb:c1:dd:d9:bb:81:f5:2e:14:69:9a:
6f:0f:38:2a:bc:9b:02:bf:68:02:84:15:79:11:f6:
40:c1:98:37:d5:45:75:0f:86:81:77:be:36:83:f9:
72:23:bb:96:03:31:55:70:69:55:97:04:a0:60:bc:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A4:F7:68:DD:BE:1B:AD:C5:95:FD:FD:3A:B9:A9:90:FE:27:61:5A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7586::/36
Signature Algorithm: sha256WithRSAEncryption
92:80:92:6f:56:0a:fd:bc:24:46:14:b5:f8:6f:1c:96:cb:0d:
83:cc:35:36:b1:c0:24:b9:9f:dd:29:e7:17:68:c4:77:54:f0:
e2:2f:3a:6b:2d:cd:88:87:6e:68:2e:42:75:9d:f6:df:2a:7b:
f9:3b:68:b2:bf:50:00:d4:35:73:0f:43:af:36:ac:1f:2f:be:
c3:35:f1:41:42:d6:f3:9b:51:61:7c:82:52:7b:7f:64:2b:b5:
3c:96:5e:05:99:bd:e4:79:7e:39:5e:37:1d:ab:74:f6:f7:53:
24:4a:1e:43:fe:c2:11:d3:d3:41:37:a1:df:35:0c:79:f5:30:
50:1d:f0:29:e8:4b:4c:82:d6:84:d2:e2:71:66:cf:d6:01:bc:
a8:db:8d:9a:f8:cc:2d:5c:0d:6b:ca:5b:f8:97:13:57:69:93:
f3:55:7c:01:e4:97:4e:5a:9c:18:18:53:aa:45:d5:20:13:00:
9d:21:ed:d9:1f:c7:90:31:82:e1:fc:11:5c:fc:23:16:46:f0:
74:40:7f:e3:af:68:93:4b:1a:48:a2:f6:c9:4c:96:53:aa:db:
4b:da:0b:6c:aa:96:92:6b:54:d0:e0:db:fb:15:6f:33:ae:5a:
77:c5:0c:5a:7e:34:f1:c9:02:9e:77:69:da:5f:5f:a5:69:ae:
c5:97:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:44 2025 by rpki-client