Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: RTir8k7LoCYd+seuKtSMp0v4u32UQOgGZRtnaujumBU=
Subject key identifier: BB:C6:E0:3A:74:2E:56:BE:05:9E:6E:53:98:3B:77:A7:F2:84:FF:0E
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 4FD9D8A1C4367AE9E9DA7FC0FC214098D99CB7D0
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219047.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 219047
IP address blocks: 5.199.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d9:d8:a1:c4:36:7a:e9:e9:da:7f:c0:fc:21:40:98:d9:9c:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=BBC6E03A742E56BE059E6E53983B77A7F284FF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:07:5c:b8:7e:e7:13:8d:fd:4b:94:ad:c1:
cc:34:5f:7d:85:06:00:c5:c3:12:64:f7:7d:76:5f:
2f:60:66:62:88:07:f5:25:5e:43:49:c9:84:94:b9:
91:e3:62:96:fd:f5:69:49:7c:c1:81:9e:88:24:75:
72:b1:57:a2:73:a6:35:48:78:35:2e:fc:32:eb:bc:
e2:81:d3:77:5c:4f:c7:f0:97:37:d9:8d:01:3a:b2:
cd:ce:47:04:12:05:36:d3:81:57:ae:25:85:2a:25:
6c:3b:6e:d5:fb:d7:00:09:a1:4e:ee:8c:49:95:0b:
60:82:71:d5:b4:ae:86:56:01:fc:c5:1d:da:74:d3:
84:11:13:0f:31:56:59:44:7b:f2:bd:8c:b4:6b:19:
68:14:41:4a:6a:1a:84:f8:eb:0b:d7:62:f1:4e:d3:
f2:f6:9c:23:f5:16:30:49:b8:db:7f:3c:f8:bc:9d:
40:d6:b4:56:0f:a4:a2:07:4d:ca:d4:ca:44:d5:38:
14:cf:45:cc:98:a9:05:d6:c3:a2:19:3a:43:5a:8c:
97:19:59:d2:23:1a:3b:b2:85:e4:55:dd:c6:e2:65:
3e:b6:a1:92:5e:ea:0d:fe:43:d8:f8:c4:4d:c2:59:
b0:48:a3:d1:76:67:25:42:d2:d5:49:a6:65:99:ee:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:E0:3A:74:2E:56:BE:05:9E:6E:53:98:3B:77:A7:F2:84:FF:0E
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.45.0/24
Signature Algorithm: sha256WithRSAEncryption
23:48:86:e6:e5:50:a2:63:48:fa:8e:02:7c:16:cc:1d:f7:dc:
97:db:42:68:cd:6f:1c:d9:df:5f:1f:6c:16:1f:bd:de:41:d4:
94:be:20:b8:d9:86:a9:c7:1a:65:93:5d:1d:c4:8a:7e:81:d6:
57:99:ff:21:82:15:4b:ec:ae:38:3f:f5:9b:95:f7:5e:71:dd:
94:3d:f3:11:c7:6f:87:c5:fe:59:21:64:34:3c:99:60:31:cb:
ab:f5:e2:03:40:36:3e:7a:9d:5d:99:ee:ca:8a:3a:d3:c2:ef:
10:9d:39:69:d5:2c:6f:16:0d:f7:c5:7c:6a:0b:03:51:2e:86:
6d:3d:e8:91:a0:b4:b9:4c:13:e5:9b:01:00:f4:5d:8e:25:86:
4e:c3:7b:45:16:b0:f4:b6:1b:0e:16:fd:81:e9:6b:8b:0a:eb:
ac:97:41:8c:0d:cb:75:c9:9d:bf:80:a9:38:48:05:7e:dd:26:
97:5f:82:13:65:20:f7:21:36:7e:6a:c7:6a:54:32:5d:ac:61:
28:7e:8d:f3:98:2f:7c:d0:64:2c:e0:4b:a5:a1:97:9c:ab:2e:
41:56:bf:1e:58:04:37:d4:f6:e3:0f:fd:77:91:58:c2:b7:80:
20:3e:9c:00:bf:43:fc:a8:84:d0:6b:fd:b9:70:f9:86:f3:f7:
9a:c6:0e:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUT9nYocQ2eunp2n/A/CFAmNmct9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTYwNzIwMjFaFw0yNzA5MTUwNzI1MjFaMDMxMTAvBgNV
BAMTKEJCQzZFMDNBNzQyRTU2QkUwNTlFNkU1Mzk4M0I3N0E3RjI4NEZGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtwdcuH7nE439S5Stwcw0X32F
BgDFwxJk9312Xy9gZmKIB/UlXkNJyYSUuZHjYpb99WlJfMGBnogkdXKxV6JzpjVI
eDUu/DLrvOKB03dcT8fwlzfZjQE6ss3ORwQSBTbTgVeuJYUqJWw7btX71wAJoU7u
jEmVC2CCcdW0roZWAfzFHdp004QREw8xVllEe/K9jLRrGWgUQUpqGoT46wvXYvFO
0/L2nCP1FjBJuNt/PPi8nUDWtFYPpKIHTcrUykTVOBTPRcyYqQXWw6IZOkNajJcZ
WdIjGjuyheRV3cbiZT62oZJe6g3+Q9j4xE3CWbBIo9F2ZyVC0tVJpmWZ7ok/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUu8bgOnQuVr4Fnm5TmDt3p/KE/w4wHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTMjE5MDQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABcct
MA0GCSqGSIb3DQEBCwUAA4IBAQAjSIbm5VCiY0j6jgJ8Fswd99yX20JozW8c2d9f
H2wWH73eQdSUviC42Yapxxplk10dxIp+gdZXmf8hghVL7K44P/Wblfdecd2UPfMR
x2+Hxf5ZIWQ0PJlgMcur9eIDQDY+ep1dme7KijrTwu8QnTlp1SxvFg33xXxqCwNR
LoZtPeiRoLS5TBPlmwEA9F2OJYZOw3tFFrD0thsOFv2B6WuLCuusl0GMDct1yZ2/
gKk4SAV+3SaXX4ITZSD3ITZ+asdqVDJdrGEofo3zmC980GQs4EuloZecqy5BVr8e
WAQ31PbjD/13kVjCt4AgPpwAv0P8qITQa/25cPmG8/eaxg4q
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:36 2026 by rpki-client