Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
File: AS199746.roa (raw, json)
Hash identifier: FqrILcJcxaO6MeLrVwgAt1KQOTAaJSUQoT7pGScHRso=
Subject key identifier: 36:A5:3B:70:4B:D8:F7:CB:64:EE:A3:BF:2D:63:41:DB:E8:6A:12:34
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 17DA4B3061E2D4EC4E9445659747337E4791CA61
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
Signing time: Thu 07 May 2026 18:42:42 +0000
ROA not before: Thu 07 May 2026 18:37:42 +0000
ROA not after: Thu 06 May 2027 18:42:42 +0000
asID: 199746
IP address blocks: 2a14:7585::/32 maxlen: 32
2a14:7587::/32 maxlen: 32
2a14:7587:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:da:4b:30:61:e2:d4:ec:4e:94:45:65:97:47:33:7e:47:91:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 7 18:37:42 2026 GMT
Not After : May 6 18:42:42 2027 GMT
Subject: CN=36A53B704BD8F7CB64EEA3BF2D6341DBE86A1234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:e7:b0:d5:f6:ce:0b:eb:84:5d:03:0d:61:
62:f8:f4:94:89:68:b1:6d:11:4d:6a:15:fc:83:53:
44:ce:77:39:d1:f8:0c:f8:17:37:15:d0:bf:59:20:
ab:c2:ae:4c:68:35:91:82:45:57:49:93:db:7e:df:
57:9e:86:3e:f1:ca:2e:a0:57:40:6d:75:9f:57:54:
c8:cc:37:02:83:7c:1d:4d:c5:16:f2:e9:5d:74:d9:
c2:68:2b:8b:52:3c:87:55:aa:c4:d0:a0:9e:62:8c:
1f:2d:aa:ee:80:d3:c0:fd:6b:2e:04:0b:13:5a:14:
26:89:3b:97:70:03:1d:2c:c3:1c:4c:93:e0:45:ee:
d4:77:65:6e:8d:eb:87:52:de:7e:7b:5d:50:3d:53:
5d:cb:91:43:4d:80:a8:5e:d1:75:84:5d:1d:31:27:
20:53:c6:ea:81:d3:b7:c1:33:05:da:c6:42:44:bc:
7e:a7:3e:dd:62:a7:16:c8:83:09:a5:c5:2c:93:4d:
30:34:ce:b8:b2:88:30:a1:5e:bb:84:17:45:7a:91:
9c:ea:da:04:0d:ba:8b:53:8c:8a:ea:83:c4:cc:be:
0e:a6:c0:4e:0a:a7:94:60:63:5d:f8:0f:e3:df:0e:
7c:78:ec:d6:b1:2f:68:a1:00:04:4b:d5:89:38:30:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:3B:70:4B:D8:F7:CB:64:EE:A3:BF:2D:63:41:DB:E8:6A:12:34
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585::/32
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
0a:af:aa:71:1a:d1:c6:1f:be:aa:9a:ba:cf:48:ea:d2:2a:2d:
da:60:38:5c:e4:94:97:ab:12:87:72:48:e5:d3:06:c8:34:12:
71:c7:7a:23:19:59:e9:31:92:36:15:cd:2d:f3:bf:7b:34:9f:
bd:64:64:3c:7c:f3:f2:44:9d:6d:6b:a0:7e:1f:ef:9f:6d:40:
fb:4d:c3:4e:8a:19:d1:39:64:54:d7:7d:53:1a:53:d4:c8:4b:
a0:fc:86:ab:ac:10:04:fc:ed:aa:e3:17:10:2e:fc:b7:b1:50:
6a:6e:2f:52:3f:af:6c:59:41:1a:94:b2:6c:87:4f:5c:c9:cb:
c9:8a:40:dd:84:2a:3f:7c:8e:2f:68:43:27:e0:eb:0c:69:b6:
91:dd:97:d9:ae:9f:12:8a:d6:bf:c7:45:d7:80:2e:69:9d:61:
99:c1:4b:5e:3c:d6:37:1a:e9:61:65:0b:ce:81:e2:e8:36:ba:
e4:76:7a:21:bd:68:b3:8b:bf:15:e8:6f:7f:b3:b0:7a:c3:ac:
43:28:25:36:84:5e:d4:70:3c:99:bf:d4:48:b9:b9:2c:9f:68:
4f:e0:8f:aa:60:2e:d4:db:2e:6a:ed:56:0c:26:eb:12:21:9d:
86:a8:84:7f:f7:23:dc:6a:8b:b9:39:9f:a6:c8:9f:34:2d:a6:
d8:0b:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:22:29 2026 by rpki-client