Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: l/Pr84R4VsbL3zP48yTwOLV807pPs1g73HrJaMsncmA=
Subject key identifier: 29:D3:A5:5C:B0:1C:73:09:0F:D4:4E:19:C9:4B:67:F6:F2:D3:1A:B1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4443BDBB8984B99647ABBB814ADFE269647C4D05
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
Signing time: Fri 18 Sep 2026 14:48:18 +0000
ROA not before: Fri 18 Sep 2026 14:43:18 +0000
ROA not after: Fri 17 Sep 2027 14:48:18 +0000
asID: 219427
IP address blocks: 66.155.65.0/24 maxlen: 24
143.14.171.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
155.117.171.0/24 maxlen: 24
168.222.73.0/24 maxlen: 24
168.222.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:43:bd:bb:89:84:b9:96:47:ab:bb:81:4a:df:e2:69:64:7c:4d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 18 14:43:18 2026 GMT
Not After : Sep 17 14:48:18 2027 GMT
Subject: CN=29D3A55CB01C73090FD44E19C94B67F6F2D31AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:f0:7f:a1:ef:16:7e:9e:c2:68:de:af:4f:
97:f5:11:8c:f8:c6:e9:2a:79:e0:50:f2:10:09:6a:
f6:96:50:01:54:4b:19:3b:86:f0:df:59:ee:23:8f:
19:01:1c:5e:a2:2c:65:e4:d4:1d:55:25:d3:8d:6d:
26:a5:72:c8:ea:59:03:b3:6a:c2:9f:98:5c:8b:45:
c6:e7:f7:03:6c:eb:54:d4:a4:d7:40:96:64:82:27:
c3:8c:85:2a:7b:34:24:5d:b0:47:94:78:0f:cf:16:
93:74:8c:aa:59:cf:87:28:f7:14:d9:c0:95:ec:a9:
3f:85:f0:e6:b6:8f:d6:e2:c9:51:e5:ce:e8:36:ef:
4c:09:74:d0:05:db:4e:94:09:4c:72:55:57:53:1c:
32:76:7f:77:b7:66:1f:d1:5e:89:77:ba:2c:b9:d8:
e3:35:ef:5d:10:5a:cb:2c:fb:02:84:72:76:ed:86:
87:f8:b9:25:e6:3a:0d:a1:d4:78:bf:8f:29:e5:b2:
dd:05:dc:7d:0d:94:fe:29:d1:e6:90:fd:5a:c7:09:
53:d1:a4:50:c8:d0:c8:a6:18:3a:c9:d4:45:04:99:
10:ce:b1:a5:4e:3a:8b:f2:5c:0e:2f:f6:df:71:69:
1b:c7:91:2d:13:6b:80:8f:94:53:2c:d3:e5:a3:69:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:A5:5C:B0:1C:73:09:0F:D4:4E:19:C9:4B:67:F6:F2:D3:1A:B1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.155.65.0/24
143.14.171.0/24
155.117.102.0/24
155.117.171.0/24
168.222.73.0/24
168.222.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8a:88:fe:7e:60:c4:18:bf:ef:d5:09:92:7f:2f:00:77:a8:
46:e3:75:ab:00:22:e7:db:39:66:28:31:ae:89:8f:dc:63:aa:
8a:a2:24:c7:92:0c:2e:d3:fd:3e:34:44:0e:a8:f2:2c:b5:96:
84:62:c2:5d:ba:da:f2:1c:e2:19:da:88:98:bb:4e:0f:aa:25:
0a:fe:84:db:4c:ec:31:06:e2:d9:67:1c:98:7c:ef:4d:01:92:
9d:01:a0:60:99:2b:43:b4:71:cd:b5:72:7c:d8:8d:26:22:3a:
c1:7b:9d:8d:16:ec:c7:62:67:ad:b1:a4:49:6d:44:03:16:4b:
a8:e6:6e:af:60:3d:ce:00:07:be:ff:00:80:6c:df:b4:d6:0b:
88:09:b0:71:83:8f:e1:1d:84:f4:08:a0:45:89:b4:7c:07:26:
78:61:8d:74:54:27:79:30:49:1c:d9:08:16:13:36:c1:ca:85:
cb:37:c1:ca:9a:e9:17:70:92:c9:9b:40:b7:e0:33:5b:be:7e:
e9:c6:96:61:3d:4d:13:e7:c9:08:3d:b3:b9:dc:8a:9d:76:48:
6c:d0:4e:c8:5e:38:0b:89:4f:d0:bf:cb:2a:7c:83:da:f3:63:
44:e8:7d:75:da:45:03:02:b2:3b:9a:cc:fd:0d:92:4e:a8:76:
08:dc:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:42 2026 by rpki-client