Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219100.roa
File: AS219100.roa (raw, json)
Hash identifier: 8QjUUdzf7xDpyxnODpWdVsQu4PYHuGoTnoYS8iY9XV0=
Subject key identifier: 9F:ED:FD:16:72:9C:56:70:EA:14:6E:2F:4F:9F:3F:8E:DA:30:55:D0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7F7E322086266544EDA2382F561001B1FE856FD4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219100.roa
Signing time: Mon 07 Sep 2026 04:05:55 +0000
ROA not before: Mon 07 Sep 2026 04:00:55 +0000
ROA not after: Mon 06 Sep 2027 04:05:55 +0000
asID: 219100
IP address blocks: 168.222.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7e:32:20:86:26:65:44:ed:a2:38:2f:56:10:01:b1:fe:85:6f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 7 04:00:55 2026 GMT
Not After : Sep 6 04:05:55 2027 GMT
Subject: CN=9FEDFD16729C5670EA146E2F4F9F3F8EDA3055D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:35:4f:4f:88:d5:bf:e0:5a:76:c4:aa:e0:
0b:a1:38:eb:03:8d:77:65:02:c4:e8:7a:b7:59:4c:
80:41:1e:d3:3d:86:7c:87:8f:44:be:d5:da:9a:3a:
3d:6c:ae:32:68:cb:c5:ed:d6:15:cf:51:8b:d9:f8:
75:03:62:22:f0:2d:cf:02:5e:80:ae:df:86:6b:d6:
00:54:36:73:95:57:f8:e2:5e:75:01:f6:02:c8:a1:
b6:12:bc:9e:3e:27:7a:21:f7:93:81:3b:38:1b:14:
92:b0:5d:18:d2:24:f3:6f:90:91:48:e6:ef:f0:e3:
05:07:6a:17:53:67:86:0d:c5:90:8e:2d:f3:2a:e1:
fd:1b:ad:b5:bf:63:ac:81:d7:00:3f:47:72:a7:76:
9f:1c:4b:a9:16:9f:a0:29:12:87:ae:ec:51:c4:1f:
44:d0:fc:13:cf:d9:db:d7:07:42:1d:b1:e9:ad:fc:
1b:37:46:0b:c8:17:a1:c4:43:be:fb:11:6b:b7:8c:
ac:92:53:d2:09:70:55:fe:eb:9e:7f:1b:c2:b0:81:
e3:9f:c8:40:e2:63:bb:b3:1d:7f:6a:59:fb:ec:f0:
b5:76:7f:8d:69:27:e6:79:73:c8:4f:ae:c5:c1:0d:
a7:69:56:67:22:d0:9a:e9:76:95:1b:37:2b:e7:51:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:FD:16:72:9C:56:70:EA:14:6E:2F:4F:9F:3F:8E:DA:30:55:D0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:08:94:7a:c9:cf:fb:99:5a:c0:af:64:da:3e:ed:2b:b2:c2:
2b:e3:d0:ff:c6:84:0a:cd:d2:93:e1:61:2c:a9:c5:da:31:77:
d0:f7:ac:ed:8c:10:89:8c:2c:ee:3e:84:ed:82:79:45:4f:51:
8b:a7:ff:8c:71:6c:07:45:0b:52:26:13:a1:4f:43:00:89:1e:
b1:44:69:e9:51:1d:94:af:c8:72:5b:28:f7:af:6f:cd:0d:8d:
81:9e:71:d5:91:d7:35:1c:1b:f6:a9:85:b4:89:14:65:f0:20:
12:45:11:6e:70:53:e3:62:b4:9f:91:e2:1f:d8:7b:a5:02:5c:
4a:b9:de:f9:c9:55:7c:a8:40:4c:c9:1d:7f:76:95:ac:d9:da:
c8:17:dd:ad:97:c1:1b:7f:30:63:37:d8:96:73:7e:a8:2d:d2:
10:33:3d:44:d8:a4:c5:c2:87:37:84:b3:dd:39:ec:fc:db:ae:
b0:19:5b:3b:85:c0:da:7f:04:5f:55:5d:de:32:d7:3e:cf:a9:
f5:a1:a6:be:fe:15:da:40:e7:5e:1a:ca:6e:c6:70:9d:d3:4c:
08:74:03:c1:50:9d:18:20:b0:22:a5:cb:e0:f8:c5:ed:65:cc:
fa:4e:46:0c:dc:0f:70:66:61:18:75:b8:1c:5c:78:25:94:3d:
cf:1f:c9:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUf34yIIYmZUTtojgvVhABsf6Fb9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MDcwNDAwNTVaFw0yNzA5MDYwNDA1NTVaMDMxMTAvBgNV
BAMTKDlGRURGRDE2NzI5QzU2NzBFQTE0NkUyRjRGOUYzRjhFREEzMDU1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuDVPT4jVv+BadsSq4AuhOOsD
jXdlAsToerdZTIBBHtM9hnyHj0S+1dqaOj1srjJoy8Xt1hXPUYvZ+HUDYiLwLc8C
XoCu34Zr1gBUNnOVV/jiXnUB9gLIobYSvJ4+J3oh95OBOzgbFJKwXRjSJPNvkJFI
5u/w4wUHahdTZ4YNxZCOLfMq4f0brbW/Y6yB1wA/R3Kndp8cS6kWn6ApEoeu7FHE
H0TQ/BPP2dvXB0Idsemt/Bs3RgvIF6HEQ777EWu3jKySU9IJcFX+655/G8KwgeOf
yEDiY7uzHX9qWfvs8LV2f41pJ+Z5c8hPrsXBDadpVmci0JrpdpUbNyvnUV5zAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUn+39FnKcVnDqFG4vT58/jtowVdAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE5MTAwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqN5j
MA0GCSqGSIb3DQEBCwUAA4IBAQCsCJR6yc/7mVrAr2TaPu0rssIr49D/xoQKzdKT
4WEsqcXaMXfQ96ztjBCJjCzuPoTtgnlFT1GLp/+McWwHRQtSJhOhT0MAiR6xRGnp
UR2Ur8hyWyj3r2/NDY2BnnHVkdc1HBv2qYW0iRRl8CASRRFucFPjYrSfkeIf2Hul
AlxKud75yVV8qEBMyR1/dpWs2drIF92tl8EbfzBjN9iWc36oLdIQMz1E2KTFwoc3
hLPdOez8266wGVs7hcDafwRfVV3eMtc+z6n1oaa+/hXaQOdeGspuxnCd00wIdAPB
UJ0YILAipcvg+MXtZcz6TkYM3A9wZmEYdbgcXHgllD3PH8kM
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:19 2026 by rpki-client