Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: wIU6kvAUknU8ABhE6oXKJ7PpwT/0h9vKcukFJgahxAU=
Subject key identifier: C6:E8:88:42:3A:D9:5D:99:49:D0:37:A3:EA:EB:43:FC:9A:88:FC:0C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5F480011FED710404F7DCF9E7841F67A74AE2B64
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
Signing time: Wed 29 Jul 2026 11:08:36 +0000
ROA not before: Wed 29 Jul 2026 11:03:36 +0000
ROA not after: Wed 28 Jul 2027 11:08:36 +0000
asID: 219105
IP address blocks: 146.103.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:48:00:11:fe:d7:10:40:4f:7d:cf:9e:78:41:f6:7a:74:ae:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 29 11:03:36 2026 GMT
Not After : Jul 28 11:08:36 2027 GMT
Subject: CN=C6E888423AD95D9949D037A3EAEB43FC9A88FC0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:23:c2:0e:11:c8:6c:30:e1:1b:55:9b:6e:
5c:78:90:22:4a:d9:a0:b8:5c:a1:a2:d9:70:c2:27:
35:02:51:fd:76:73:4c:04:d1:43:2e:94:4b:4b:d1:
e4:2f:4f:95:21:d3:a2:4b:57:b3:0b:a8:b8:0f:bc:
37:a2:d7:e2:cf:f2:3e:4c:74:e6:19:47:2a:9c:d9:
7c:e0:8a:a2:d4:c3:c6:87:92:de:ec:34:32:5f:ac:
8a:09:14:45:4b:b1:b5:c7:18:8b:a0:c7:62:17:30:
e2:ed:d5:61:66:7d:df:3d:f2:02:4e:97:12:9b:eb:
33:67:79:e2:2f:76:32:c2:fb:75:ce:ea:7b:50:64:
cc:cb:8b:2e:c6:60:65:2b:80:3f:aa:49:27:e8:b8:
d2:d6:d4:2e:cd:44:63:a6:93:a9:ca:41:eb:2b:79:
23:14:22:76:65:b0:dd:36:44:ab:30:83:62:c9:55:
0c:b8:c7:55:64:19:cd:47:35:5c:49:36:c5:88:92:
bd:ec:e2:81:bd:12:a1:07:13:77:f5:69:72:e5:d2:
48:88:81:82:3d:6d:a9:c9:27:f4:bd:3a:11:da:ed:
2b:eb:69:43:3a:df:70:1d:ac:48:4d:b1:16:fe:a4:
b9:81:90:24:ec:65:2b:62:2e:04:6f:23:17:3f:89:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:88:42:3A:D9:5D:99:49:D0:37:A3:EA:EB:43:FC:9A:88:FC:0C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d6:8c:7f:c4:37:3e:9d:4f:d7:04:53:ff:e2:df:bf:93:5f:
b0:69:0f:a1:8d:3b:66:12:d0:a9:c1:13:d3:66:77:34:d0:2d:
48:07:46:45:b4:d5:ef:c9:74:e2:84:b2:26:ab:19:62:61:50:
67:99:6b:bc:35:af:8d:ba:4a:29:5a:70:8e:dc:fb:2a:9e:e3:
d2:26:67:e4:c7:08:45:b8:23:30:ae:b2:c8:48:69:10:e8:45:
b6:0a:51:5d:0a:2f:5d:d8:7a:1c:f7:08:e0:84:a2:46:24:9e:
1f:fa:ab:84:23:57:3c:95:a6:ff:5b:cf:12:62:b2:bf:2c:a5:
85:d8:2b:ec:5f:e2:3f:3f:9e:22:94:2f:27:1a:15:70:32:6f:
85:50:c9:a8:97:d8:0d:8f:c5:40:85:c6:7c:95:e9:78:40:94:
87:af:6a:2a:bc:66:a8:55:39:32:8e:f9:21:a3:5c:32:da:02:
b9:01:c5:66:84:4e:73:f5:07:b9:8f:12:f6:cf:e5:d2:31:dc:
95:8a:bd:f5:f5:5a:0f:bc:9a:8e:91:40:b2:a4:9c:8a:bb:4e:
2f:e2:50:1a:17:0f:45:d4:ab:62:14:f3:ea:cc:84:b8:0a:fd:
5a:42:ac:81:aa:49:8b:a0:5e:64:54:f2:7f:bc:7f:27:3a:dc:
ba:07:d1:13
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUX0gAEf7XEEBPfc+eeEH2enSuK2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MjkxMTAzMzZaFw0yNzA3MjgxMTA4MzZaMDMxMTAvBgNV
BAMTKEM2RTg4ODQyM0FEOTVEOTk0OUQwMzdBM0VBRUI0M0ZDOUE4OEZDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2yPCDhHIbDDhG1Wbblx4kCJK
2aC4XKGi2XDCJzUCUf12c0wE0UMulEtL0eQvT5Uh06JLV7MLqLgPvDei1+LP8j5M
dOYZRyqc2XzgiqLUw8aHkt7sNDJfrIoJFEVLsbXHGIugx2IXMOLt1WFmfd898gJO
lxKb6zNneeIvdjLC+3XO6ntQZMzLiy7GYGUrgD+qSSfouNLW1C7NRGOmk6nKQesr
eSMUInZlsN02RKswg2LJVQy4x1VkGc1HNVxJNsWIkr3s4oG9EqEHE3f1aXLl0kiI
gYI9banJJ/S9OhHa7SvraUM633AdrEhNsRb+pLmBkCTsZStiLgRvIxc/iV9lAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUxuiIQjrZXZlJ0Dej6utD/JqI/AwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE5MTA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmcz
MA0GCSqGSIb3DQEBCwUAA4IBAQCn1ox/xDc+nU/XBFP/4t+/k1+waQ+hjTtmEtCp
wRPTZnc00C1IB0ZFtNXvyXTihLImqxliYVBnmWu8Na+NukopWnCO3PsqnuPSJmfk
xwhFuCMwrrLISGkQ6EW2ClFdCi9d2Hoc9wjghKJGJJ4f+quEI1c8lab/W88SYrK/
LKWF2CvsX+I/P54ilC8nGhVwMm+FUMmol9gNj8VAhcZ8lel4QJSHr2oqvGaoVTky
jvkho1wy2gK5AcVmhE5z9Qe5jxL2z+XSMdyVir319VoPvJqOkUCypJyKu04v4lAa
Fw9F1KtiFPPqzIS4Cv1aQqyBqkmLoF5kVPJ/vH8nOty6B9ET
-----END CERTIFICATE-----
Generated at Wed Jul 29 21:28:11 2026 by rpki-client