Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219036.roa
File: AS219036.roa (raw, json)
Hash identifier: LhbedH/GqVnPWVun+ny1SL4OC21Fm2euYMJL0c22ipM=
Subject key identifier: 08:27:10:2A:8B:E6:16:94:54:DC:B3:64:28:B8:1D:D3:E8:20:80:7D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4FA213493F30AA3E1FBC256109CD94E2FE029B99
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219036.roa
Signing time: Mon 14 Sep 2026 17:40:13 +0000
ROA not before: Mon 14 Sep 2026 17:35:13 +0000
ROA not after: Mon 13 Sep 2027 17:40:13 +0000
asID: 219036
IP address blocks: 147.79.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a2:13:49:3f:30:aa:3e:1f:bc:25:61:09:cd:94:e2:fe:02:9b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 14 17:35:13 2026 GMT
Not After : Sep 13 17:40:13 2027 GMT
Subject: CN=0827102A8BE6169454DCB36428B81DD3E820807D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:f4:c4:b1:9f:a5:72:fd:b3:d9:84:31:f3:
90:6c:f1:e8:63:ad:82:f7:19:e0:29:e7:6f:4a:0f:
28:84:df:62:ba:37:a0:35:16:c6:5e:f4:35:56:6b:
0c:7e:94:16:db:c6:7d:84:12:b3:eb:70:98:76:3a:
d5:31:e2:1a:37:65:24:34:11:9a:25:3e:5a:0c:ab:
74:a1:92:ff:a3:80:fc:24:84:19:6c:cc:2c:a4:b6:
7e:2d:07:b3:5f:37:fa:46:fa:f1:ae:a1:5d:7d:21:
10:c9:e8:a8:68:54:f0:56:39:44:e3:96:d9:be:90:
54:10:82:12:84:e4:ba:a3:86:34:12:00:d0:be:ea:
8c:eb:44:de:b9:ee:6b:42:18:5e:b7:54:3f:3b:d9:
8d:07:18:cd:86:78:ec:14:ab:62:b3:30:68:5d:fe:
cb:3c:6a:7b:bf:a2:13:ed:20:69:05:af:64:07:bb:
c1:70:c0:87:ae:86:94:4c:98:09:51:2a:00:0d:4f:
3e:48:b4:c4:e8:b9:26:61:18:0f:80:45:55:25:48:
05:57:21:71:74:7a:d5:bb:fc:22:2c:bd:7b:6f:a2:
52:3a:8d:a9:bb:c4:b6:c6:ee:5e:b2:84:c7:b1:3f:
b6:87:39:ba:67:bb:2f:bf:e8:56:c5:a7:ef:cf:f8:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:10:2A:8B:E6:16:94:54:DC:B3:64:28:B8:1D:D3:E8:20:80:7D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.19.0/24
Signature Algorithm: sha256WithRSAEncryption
74:21:d4:ea:3e:80:d8:ae:b5:b6:a7:b2:ac:50:87:4d:53:48:
b2:10:fd:27:b0:c7:3e:cb:51:ca:2d:9d:fc:06:96:65:bb:b1:
7c:2e:88:8a:37:7e:bc:09:c2:5a:35:ed:74:65:44:fa:16:7a:
67:36:2f:6e:98:1b:48:d6:65:36:42:d6:de:72:74:5e:f5:d1:
a8:60:cc:31:21:2d:dd:38:10:42:7f:24:2a:0a:39:09:83:25:
b9:22:68:b4:6c:03:df:35:d9:dd:47:5f:01:21:90:7a:1c:7d:
c9:62:4b:6c:3e:e9:17:db:78:91:af:c7:db:69:92:dd:ad:d3:
71:d0:c7:32:95:f0:6f:c4:05:aa:14:56:d7:5c:ad:c5:33:e3:
5c:d5:d0:c0:5f:2b:37:00:f8:9b:83:b0:45:7e:bf:2f:03:1a:
77:60:09:30:b5:a7:5f:01:a3:34:72:c1:2f:e1:d2:06:a3:30:
6b:cf:99:a9:6b:36:ac:02:4c:9f:7e:a9:8d:58:84:82:de:7c:
7a:f9:ad:96:29:2d:58:8e:3a:43:a9:20:52:d9:3b:e9:13:81:
14:27:91:c8:c2:aa:d5:55:fa:57:c8:7e:4f:28:27:9d:63:45:
3a:74:77:0d:33:7c:fd:bf:2a:d8:61:3d:49:59:8c:f6:e4:21:
30:b8:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:10 2026 by rpki-client