Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219229.roa
File: AS219229.roa (raw, json)
Hash identifier: tM4z3qBGmhHhtYPb+mm/Gl2w0eEypBIyJk8K3cu7/UI=
Subject key identifier: AB:8F:79:E3:57:34:69:B5:27:75:E0:2A:5C:95:08:7A:3A:9E:E7:91
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 44641B9E3C2835CA7540629D558A46C71CE53E85
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219229.roa
Signing time: Tue 15 Sep 2026 17:12:58 +0000
ROA not before: Tue 15 Sep 2026 17:07:58 +0000
ROA not after: Tue 14 Sep 2027 17:12:58 +0000
asID: 219229
IP address blocks: 168.222.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:64:1b:9e:3c:28:35:ca:75:40:62:9d:55:8a:46:c7:1c:e5:3e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 15 17:07:58 2026 GMT
Not After : Sep 14 17:12:58 2027 GMT
Subject: CN=AB8F79E3573469B52775E02A5C95087A3A9EE791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:75:a1:cf:48:9d:12:63:c1:b4:61:30:99:
33:c2:85:c5:f4:cf:6a:bc:17:2f:26:04:50:09:ab:
b1:df:6f:8c:67:40:d0:c5:33:a1:a0:85:da:62:10:
aa:3a:95:eb:7f:0c:7f:d5:dc:00:b0:ee:b6:be:7c:
92:2c:30:a3:53:79:95:03:02:c8:69:47:9a:24:0b:
f1:54:d4:70:a1:0a:0d:10:d7:eb:5a:f0:ea:b8:70:
fa:f4:8f:89:df:81:0f:5d:ac:ca:bf:08:18:2d:6b:
56:74:ce:58:35:2f:ef:e6:88:e3:3d:00:70:0b:10:
0b:2a:4b:d5:84:b9:22:a3:30:7e:3d:19:79:65:4f:
47:f1:f2:b9:81:23:7a:c6:ad:b4:11:71:eb:0b:f3:
a2:da:95:66:e9:91:a2:71:e8:65:84:c7:07:2b:49:
0b:4d:6b:b7:0f:43:08:a1:9e:b7:c2:07:09:23:5a:
64:47:34:97:f6:df:52:1e:45:1d:79:99:41:90:33:
99:96:68:ba:89:aa:fb:aa:ae:b3:44:41:4c:e2:a6:
c5:b0:40:22:7f:bd:3f:cd:6f:fd:03:b8:ce:35:bf:
2d:0d:ad:fd:ed:c8:7a:05:0f:b0:85:01:92:22:8f:
d5:0a:5d:2d:49:d5:e4:db:80:a4:21:18:04:af:c4:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:79:E3:57:34:69:B5:27:75:E0:2A:5C:95:08:7A:3A:9E:E7:91
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b2:4c:e7:db:95:85:44:13:c8:1c:59:bf:c6:ca:70:50:76:
50:38:7e:58:a9:5b:0c:90:63:24:0f:d3:cb:75:65:ee:49:f3:
d3:6f:26:6a:e8:f9:4c:19:36:4b:da:f4:65:14:04:6c:5a:03:
7e:f2:d6:cf:b9:53:3a:7e:cc:2b:63:21:86:8f:89:cb:17:93:
aa:d6:87:ed:f8:7e:e7:ba:83:fc:fc:6c:56:8a:29:c0:bc:c8:
64:05:23:a1:bc:54:d9:e7:9a:8a:40:ad:15:c1:19:65:80:c9:
fd:2b:81:d0:cc:02:f7:55:8a:26:08:70:13:6f:88:7e:66:2a:
7b:59:a1:42:02:3b:24:d6:ce:4c:bf:87:56:ec:1a:67:6d:96:
6d:20:00:1c:65:78:92:5d:8b:86:76:d8:eb:af:25:58:84:05:
22:8b:99:48:50:c5:c2:55:78:2b:19:bb:2f:1b:12:6c:26:83:
b7:aa:cc:d4:fa:42:b7:2a:92:bd:7c:d9:18:09:27:1d:54:e5:
31:87:03:42:1e:54:8a:83:bf:37:54:2d:80:4a:58:2a:a2:6c:
1e:5f:c9:4d:da:f9:8b:3b:ab:1d:c5:64:28:2b:e5:cd:4a:85:
c1:ca:4c:8e:67:8e:70:81:fa:8b:fe:65:79:1c:37:53:60:1c:
60:c2:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:44 2026 by rpki-client