Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219100.roa
File: AS219100.roa (raw, json)
Hash identifier: TTBOD/3eAe9ksJ4TrzcXyl7dktpdA2DD1Y0hZmYv1zI=
Subject key identifier: 04:E6:29:97:A2:D5:03:14:83:7E:5B:7D:BD:27:F3:47:D1:66:7B:EE
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0FE7DB48DA9BA7E5C27484C3FC0A76290C09216E
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219100.roa
Signing time: Wed 16 Sep 2026 08:28:00 +0000
ROA not before: Wed 16 Sep 2026 08:23:00 +0000
ROA not after: Wed 15 Sep 2027 08:28:00 +0000
asID: 219100
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e7:db:48:da:9b:a7:e5:c2:74:84:c3:fc:0a:76:29:0c:09:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 08:23:00 2026 GMT
Not After : Sep 15 08:28:00 2027 GMT
Subject: CN=04E62997A2D50314837E5B7DBD27F347D1667BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:41:94:c5:a0:b3:6a:47:44:89:d3:66:b4:
eb:ad:d2:ce:37:33:c1:76:41:a8:d9:ac:7a:e3:0f:
66:3b:97:01:5d:6c:3d:98:a4:ef:a2:0f:aa:24:13:
4f:8c:f8:c8:2d:a0:ab:35:23:4f:4d:92:c1:f2:67:
16:67:e3:2e:a0:d9:30:9e:4f:08:a0:6e:e4:7e:13:
03:c8:e5:3f:a3:cd:96:7a:3e:07:d6:37:7c:c5:7e:
da:ba:54:75:26:ec:92:dc:cd:d2:92:8b:84:50:2e:
8c:4c:36:85:9d:56:73:f8:37:99:ca:10:b0:18:65:
fe:4f:12:52:fc:a3:3c:9f:97:5c:df:ff:da:dc:de:
84:37:6d:75:6a:b5:9c:72:9c:82:86:be:c3:29:8f:
89:c7:98:22:0b:a9:02:4b:12:68:4a:15:ad:63:65:
74:af:17:84:df:09:25:77:c8:4f:7d:20:44:9c:04:
55:ec:a2:23:3a:80:d2:59:bc:f8:71:ab:f8:fb:39:
28:be:50:58:6b:fc:53:00:fa:58:f9:c2:3e:b0:a9:
21:35:f9:67:87:79:87:cc:56:9a:b3:15:a9:da:9d:
b2:f0:5e:66:1e:d1:00:76:44:7d:e7:f4:ff:3a:05:
db:e5:93:9d:c0:59:d0:a9:52:09:bd:3d:d5:57:59:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:29:97:A2:D5:03:14:83:7E:5B:7D:BD:27:F3:47:D1:66:7B:EE
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.51.0/24
5.199.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c2:6b:b5:07:ae:59:6a:f9:cc:e3:a0:7f:cf:2d:39:02:ec:
1d:01:ec:13:4f:63:f6:d9:a0:44:de:10:b5:af:1b:f7:b6:3f:
62:d1:bf:73:81:6b:26:94:52:3e:fc:b5:71:7a:83:e2:fc:cb:
0f:0b:e8:9e:2e:17:56:5c:e1:ab:c8:c6:68:7f:be:9c:7c:43:
21:39:7f:6a:cf:5d:73:a0:9b:f3:b3:d2:dd:93:28:7a:fd:2c:
5c:6a:ec:69:32:ce:63:e4:34:0b:0a:3a:3f:26:3b:6c:0c:26:
d3:dc:ab:bf:34:cf:8f:22:96:a4:9e:91:7f:83:e0:45:29:d7:
53:6d:8d:d2:11:0f:1b:df:07:6b:98:9b:a3:d5:1a:da:8f:d6:
9f:56:76:7a:b4:fc:af:f4:b7:c0:cf:9a:f2:f8:75:07:b0:f2:
6f:1d:b9:31:7a:f1:08:e6:9e:a5:6e:14:75:8f:14:6a:b9:78:
ea:79:ac:90:e2:6d:90:49:1d:7d:cc:84:1f:aa:99:3e:89:33:
24:cb:10:e7:a6:43:50:06:ec:f9:7f:ba:0e:81:a1:35:d9:b2:
44:44:33:3c:c2:3e:55:6e:96:45:46:b8:28:28:62:af:24:75:
ce:5a:0b:2f:ae:ef:1e:c3:37:3f:f2:1e:b8:82:5e:1b:c4:9c:
1f:13:67:61
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUD+fbSNqbp+XCdITD/Ap2KQwJIW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTYwODIzMDBaFw0yNzA5MTUwODI4MDBaMDMxMTAvBgNV
BAMTKDA0RTYyOTk3QTJENTAzMTQ4MzdFNUI3REJEMjdGMzQ3RDE2NjdCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0S0GUxaCzakdEidNmtOut0s43
M8F2QajZrHrjD2Y7lwFdbD2YpO+iD6okE0+M+MgtoKs1I09NksHyZxZn4y6g2TCe
TwigbuR+EwPI5T+jzZZ6PgfWN3zFftq6VHUm7JLczdKSi4RQLoxMNoWdVnP4N5nK
ELAYZf5PElL8ozyfl1zf/9rc3oQ3bXVqtZxynIKGvsMpj4nHmCILqQJLEmhKFa1j
ZXSvF4TfCSV3yE99IEScBFXsoiM6gNJZvPhxq/j7OSi+UFhr/FMA+lj5wj6wqSE1
+WeHeYfMVpqzFananbLwXmYe0QB2RH3n9P86Bdvlk53AWdCpUgm9PdVXWdgZAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUBOYpl6LVAxSDflt9vSfzR9Fme+4wHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTMjE5MTAwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABccS
AwQABccdAwQABcczAwQABcc/MA0GCSqGSIb3DQEBCwUAA4IBAQAvwmu1B65ZavnM
46B/zy05AuwdAewTT2P22aBE3hC1rxv3tj9i0b9zgWsmlFI+/LVxeoPi/MsPC+ie
LhdWXOGryMZof76cfEMhOX9qz11zoJvzs9Ldkyh6/SxcauxpMs5j5DQLCjo/Jjts
DCbT3Ku/NM+PIpaknpF/g+BFKddTbY3SEQ8b3wdrmJuj1Rraj9afVnZ6tPyv9LfA
z5ry+HUHsPJvHbkxevEI5p6lbhR1jxRquXjqeayQ4m2QSR19zIQfqpk+iTMkyxDn
pkNQBuz5f7oOgaE12bJERDM8wj5VbpZFRrgoKGKvJHXOWgsvru8ewzc/8h64gl4b
xJwfE2dh
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:09 2026 by rpki-client