Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: U5vTrHGmTPc+5W/m9ShpjQtxBkPOHzZSTsQxIeu3l7I=
Subject key identifier: F3:93:BD:B8:8F:19:B7:09:71:90:DE:94:C9:E8:F6:DB:1A:B0:56:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6E36CD4CEF181C5FBF7EE82E457E96ED88D53364
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
Signing time: Tue 07 Apr 2026 11:59:34 +0000
ROA not before: Tue 07 Apr 2026 11:54:34 +0000
ROA not after: Tue 06 Apr 2027 11:59:34 +0000
asID: 19318
IP address blocks: 150.241.203.0/24 maxlen: 24
162.141.167.0/24 maxlen: 24
167.148.41.0/24 maxlen: 24
167.148.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:36:cd:4c:ef:18:1c:5f:bf:7e:e8:2e:45:7e:96:ed:88:d5:33:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 11:54:34 2026 GMT
Not After : Apr 6 11:59:34 2027 GMT
Subject: CN=F393BDB88F19B7097190DE94C9E8F6DB1AB0567A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:c1:de:fa:5c:b2:cf:ec:02:47:f1:27:5c:
c2:89:13:21:7e:03:12:65:9f:d4:52:39:5f:c8:c2:
26:9b:06:5b:3e:66:eb:e3:49:ec:e3:e3:0e:2d:cc:
04:14:f0:4a:28:54:ba:bb:b4:8f:19:c1:c5:30:ca:
0a:49:f3:91:52:66:61:88:37:57:31:da:b3:fe:58:
3e:2b:db:93:08:b1:1a:a9:61:04:b4:91:ad:47:c9:
d3:88:49:f4:89:fa:8a:3a:68:a4:e7:5a:ee:e2:3d:
57:20:84:5a:c7:36:0d:a0:db:9e:5a:cf:e8:ea:25:
4c:e9:46:24:c2:10:95:ba:35:d7:c6:d1:d0:fe:55:
ca:f9:b0:94:3d:51:bf:fa:56:e7:7e:9d:22:c2:f7:
1f:e1:9c:ef:df:e8:03:24:f1:19:de:a0:ea:47:bb:
b0:20:1f:c9:0a:bd:90:cd:74:4d:68:12:f3:67:de:
5f:3d:6b:a7:42:b9:42:80:32:34:a8:d0:48:73:b9:
1f:7f:f4:45:b8:cb:57:93:b2:1f:72:24:bb:73:f6:
34:28:ab:46:4e:cd:28:60:0a:6e:f3:b2:a9:3c:db:
a7:35:25:ea:7a:4e:0f:5b:e6:99:ef:12:fb:04:2c:
2e:f7:7f:fd:10:17:e2:67:7d:dd:14:b8:bc:9d:cf:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:BD:B8:8F:19:B7:09:71:90:DE:94:C9:E8:F6:DB:1A:B0:56:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.203.0/24
162.141.167.0/24
167.148.41.0/24
167.148.80.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:40:86:fe:0e:e8:95:a0:b1:6a:04:41:5b:02:3b:2c:bd:44:
e5:06:3a:1b:ba:14:af:d5:5f:3b:1e:d4:1b:8c:ab:fd:c2:5b:
07:15:01:f8:5f:4a:7d:e4:e9:07:eb:17:78:0b:6a:0c:ed:a9:
6a:ea:36:37:0f:42:d4:6a:f9:6b:94:65:03:be:f9:14:0f:2f:
20:01:80:b0:dc:9c:c1:bd:6e:82:75:44:08:3b:0e:29:f7:a8:
2c:75:ff:ba:b7:7e:c8:c3:80:c9:7d:3d:10:a2:5e:d8:c7:96:
0b:8a:55:9a:08:8e:78:95:20:41:53:27:b1:03:91:b3:64:3a:
84:ab:98:35:41:2e:bf:8d:6a:53:1f:ce:c2:1c:42:19:37:28:
94:b9:7d:c7:43:89:2e:1e:ae:65:6c:08:0e:a1:d7:ba:30:69:
5c:9d:ec:61:f3:fd:7e:ae:35:b3:ad:02:4e:f8:f5:1f:ac:9d:
4e:48:d4:7b:8d:e0:46:11:0c:55:f8:76:a1:09:02:15:82:af:
b9:85:0f:f9:d5:0d:d8:a7:81:f3:f7:53:88:67:ef:36:4f:ef:
55:b6:da:e6:51:72:33:e4:5c:0c:7f:e7:9f:f3:9a:95:2f:9a:
43:db:6c:78:95:2a:3c:54:14:fc:9a:81:cd:c7:01:3e:68:7f:
71:12:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:57 2026 by rpki-client