Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: 1ef0Ml8ACNvpZ3MkytjVsPPUnkMjgUcaIhmak8sC+qU=
Subject key identifier: 2C:91:78:84:C5:E3:1E:4C:F3:55:91:0E:67:67:B8:6A:F4:10:B5:62
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7AF67745A789D6D1881CC756E659BC6DC31E10EF
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219075.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 219075
IP address blocks: 5.199.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:77:45:a7:89:d6:d1:88:1c:c7:56:e6:59:bc:6d:c3:1e:10:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=2C917884C5E31E4CF355910E6767B86AF410B562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:d3:33:10:87:c6:1d:e2:1f:f8:4a:37:e5:
6f:88:6c:0e:6b:4b:82:5d:e6:f2:1e:b9:a4:dc:95:
b3:46:dd:61:f4:46:28:e2:e6:f0:41:38:8b:07:d0:
26:5e:e0:0b:f0:6a:85:a4:24:82:39:19:da:f6:b6:
75:2a:d2:8a:6a:2f:5b:8c:36:ce:4c:6c:ee:6e:8e:
2a:2b:4e:98:77:41:a8:b9:db:97:73:7f:be:51:b9:
91:53:ce:0c:4f:f7:56:a8:72:a4:6e:b9:19:3f:e6:
49:32:27:e7:c5:f6:04:d2:dc:b3:a0:86:a9:8c:41:
c9:74:62:af:d1:04:24:e3:9a:8a:44:0d:47:76:3b:
5b:f2:d7:44:3e:43:2c:e8:f4:69:ed:57:73:3f:17:
bd:0b:7b:7f:a6:1a:3d:9e:07:ba:f4:f0:52:82:b9:
47:56:d3:56:5a:fc:00:6d:7c:3f:0c:c3:93:ad:d6:
82:12:26:f2:47:67:6a:83:92:45:c8:74:85:a7:e1:
0d:b2:68:a6:ae:65:e5:1e:3a:a6:f9:97:3b:e7:98:
73:6e:f4:5e:f1:a9:2e:0f:0e:a1:d8:3d:89:5c:a0:
1a:f5:70:ee:5a:b1:ec:6e:bc:fb:08:bc:ae:6e:b8:
a3:96:58:3f:ae:7f:ae:4b:bd:02:11:09:5f:43:91:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:78:84:C5:E3:1E:4C:F3:55:91:0E:67:67:B8:6A:F4:10:B5:62
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:25:ba:24:16:b6:0d:80:01:40:c5:6a:69:91:b0:bc:d7:6c:
e1:54:d1:a4:f5:37:41:8a:ed:23:a9:1b:d4:82:d0:74:f9:0d:
b5:15:10:c4:b8:64:3f:ff:dd:f1:28:0e:50:c3:8c:8d:5e:11:
2b:a9:8f:29:1f:85:de:21:1b:b0:08:c2:2a:ca:8c:04:dd:95:
f5:89:6c:05:c3:99:4c:eb:7b:f3:e8:b0:6f:84:4d:10:47:63:
3f:68:09:da:0b:93:39:1f:33:29:f4:fe:19:a0:fd:a5:ea:40:
31:7e:aa:43:a8:13:de:0c:9b:fe:89:d5:79:10:0c:64:e5:41:
f5:3f:07:3d:64:0f:5b:5e:ec:24:70:3d:b8:97:29:c7:db:53:
1c:8e:08:4f:07:1e:6b:ca:7c:63:16:cd:07:69:5e:9f:f9:f0:
16:40:27:f2:a9:9f:a5:29:fa:dc:69:c1:98:0a:91:00:2c:a6:
9f:c3:86:24:16:29:54:58:82:89:c3:e2:94:bd:a4:b1:72:98:
29:aa:9a:91:95:da:0a:f8:6c:e9:a6:66:9a:a6:78:34:94:b9:
cb:0f:0b:66:89:0c:90:07:a0:86:e5:83:58:7e:fc:07:80:68:
51:21:b0:ca:8c:43:cd:33:fd:bb:aa:67:95:01:58:73:06:bd:
7a:9b:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:27 2026 by rpki-client