Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: Uceb0e1YfmMHjbXqqTZtx45UikJq0PL3UoA1cVgA3Cs=
Subject key identifier: 3B:BF:9E:9D:79:42:D6:58:FC:65:9B:81:E8:54:C7:17:58:97:5F:C2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 31367760377D91A1F8733D55A39F46AC7D5C80A0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
Signing time: Sun 20 Sep 2026 08:58:45 +0000
ROA not before: Sun 20 Sep 2026 08:53:45 +0000
ROA not after: Sun 19 Sep 2027 08:58:45 +0000
asID: 219105
IP address blocks: 64.226.205.0/24 maxlen: 24
64.239.69.0/24 maxlen: 24
66.132.146.0/24 maxlen: 24
69.90.224.0/24 maxlen: 24
162.141.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:36:77:60:37:7d:91:a1:f8:73:3d:55:a3:9f:46:ac:7d:5c:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 08:53:45 2026 GMT
Not After : Sep 19 08:58:45 2027 GMT
Subject: CN=3BBF9E9D7942D658FC659B81E854C71758975FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:b4:d4:91:5c:76:91:5a:07:36:0f:6a:98:
6a:12:73:c7:51:81:c6:80:5f:9a:35:d0:27:4c:5f:
bb:ff:17:88:78:4c:5f:60:d6:44:73:db:7f:c8:9a:
28:dd:06:1e:ca:75:b6:28:c7:90:ec:3d:64:2f:d3:
b3:50:cf:39:9c:43:7a:10:8d:60:3c:ab:92:1e:1d:
b1:b3:ff:d7:98:b2:47:0f:83:12:cb:b3:ed:e3:06:
03:fc:2f:70:47:98:6c:8d:86:08:f4:10:af:f5:99:
db:00:a7:b7:14:e3:2f:c6:73:1f:a6:84:83:23:bf:
99:c6:0f:85:e4:63:01:04:cc:2d:19:47:a1:f9:52:
40:52:e9:7e:91:22:2f:bd:cb:46:63:fc:e0:9a:10:
28:e7:1f:fa:81:57:ca:38:2a:c9:22:e0:18:a3:0d:
b6:8c:32:d1:33:bb:c6:56:d1:d0:a9:07:07:5c:3f:
12:7e:87:9f:64:a9:54:c0:05:7f:4f:6e:8d:f8:6a:
e4:8c:d0:a3:72:b3:b5:f2:fe:e5:67:36:35:5b:dc:
a8:a1:3c:c1:ec:63:cc:e5:28:7c:79:84:0b:97:00:
c9:f7:2e:36:eb:91:ea:8c:5b:b6:00:a1:71:ca:5f:
49:ea:40:62:36:43:ca:c3:e9:77:ef:9e:4e:ad:e4:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:9E:9D:79:42:D6:58:FC:65:9B:81:E8:54:C7:17:58:97:5F:C2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.205.0/24
64.239.69.0/24
66.132.146.0/24
69.90.224.0/24
162.141.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:50:b2:51:c8:8b:9b:82:f9:73:0a:74:bd:cd:6c:82:9c:2e:
87:67:77:99:a7:f4:61:e3:51:87:a0:c0:82:75:60:d3:5b:6d:
9c:00:ca:6f:4b:9e:57:a4:67:22:3a:dc:64:0d:47:cb:47:06:
bc:b0:c9:d3:63:8e:7c:f7:08:d2:6b:9e:32:9d:15:8c:e5:71:
5e:df:d6:99:0f:3b:d0:7e:3c:3e:61:40:6c:57:78:e8:61:93:
a0:88:90:c3:78:92:79:ed:46:68:11:64:0f:89:25:f7:27:66:
32:8b:0f:bb:08:b5:3a:cf:56:6b:fa:05:73:e5:d9:f7:03:97:
ea:fc:77:85:a0:c8:e8:b1:16:aa:82:43:2b:a6:5f:16:36:26:
cf:b3:c2:52:4d:a3:6f:16:81:51:88:de:81:dd:da:29:03:2e:
69:2d:29:f6:fd:a2:89:40:70:4b:52:f5:d9:04:2a:54:62:58:
4b:28:5b:61:da:68:ea:5e:53:70:d4:e9:49:52:d7:77:06:2e:
c5:1e:d0:5f:b3:0f:54:c2:a8:49:2a:f3:bc:6d:f8:7b:30:63:
d2:a5:12:8b:0e:d2:f4:af:7b:f8:96:69:b0:41:72:90:ec:a3:
16:35:1f:20:00:53:aa:cf:c8:37:e3:e6:ac:fb:01:e8:5e:cf:
6a:a9:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:08:43 2026 by rpki-client