Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219182.roa
File: AS219182.roa (raw, json)
Hash identifier: /gNjQOBYvYAqff0lArXmKBxqLotLfZEhfE1HeQOBYQM=
Subject key identifier: 9C:9B:51:43:18:63:87:0A:94:76:3A:08:27:C9:CA:2C:A3:7F:72:6D
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 068939B8F2E9C3469F3954EC68B6F3E7EAE8EE41
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219182.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 219182
IP address blocks: 5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:89:39:b8:f2:e9:c3:46:9f:39:54:ec:68:b6:f3:e7:ea:e8:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=9C9B51431863870A94763A0827C9CA2CA37F726D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:6a:16:9c:fd:e2:b1:54:c8:85:24:c1:2a:
95:f2:c8:6c:eb:ad:bd:8a:17:20:63:20:b4:f3:90:
17:85:96:3e:49:eb:d1:c3:ef:3f:c1:2e:da:89:7f:
a5:20:26:fe:7b:b9:86:0f:38:07:8f:fc:6c:72:e5:
35:01:4c:8d:c6:4e:9a:4b:44:2c:80:8b:c2:c1:e5:
68:49:fb:9c:ad:88:d8:e6:5f:e5:e6:8a:9d:75:2d:
d6:be:69:f6:c1:cd:55:9c:98:29:c0:50:06:83:2b:
15:88:5c:ae:d9:84:62:20:70:8c:f2:f9:cf:b2:f6:
a6:d7:4c:2b:11:a4:bb:b8:25:cb:1c:29:7c:a6:7b:
7c:26:ea:f6:54:39:d7:b5:54:eb:dd:96:22:9c:62:
8a:b6:cb:98:4e:d0:2b:84:72:28:3a:42:02:7a:59:
9d:31:a1:f7:ee:df:3b:7e:3a:2d:fb:42:8b:e8:e1:
b4:b6:c8:b4:c7:81:64:1a:ce:3c:74:7e:79:25:f7:
a3:94:d7:2a:04:e2:4e:0c:87:33:29:a0:2c:77:ed:
f2:70:08:c6:90:39:39:82:f0:e7:2d:4d:72:2e:c5:
c7:6b:9c:3e:95:4d:4a:89:d8:ed:9a:db:65:7a:b8:
8d:92:e2:db:8f:fa:08:42:93:97:78:02:b3:ea:f5:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:51:43:18:63:87:0A:94:76:3A:08:27:C9:CA:2C:A3:7F:72:6D
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.63.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d5:7f:ce:8a:b0:c2:4a:2f:c0:19:78:80:5c:34:69:bf:46:
42:ca:f4:e3:06:ef:ac:17:e5:5e:76:d2:13:20:a5:42:e1:c3:
ec:3c:95:25:c3:64:f3:8b:6a:f8:68:f6:0f:d9:ef:4f:c4:8d:
f3:ad:95:3d:53:d4:ed:0e:cc:16:78:9a:85:10:f9:89:8b:2a:
1e:7c:58:29:36:68:1a:9b:65:f0:9c:2b:e6:5e:37:60:d6:e3:
06:7a:08:48:59:6a:bf:f6:ca:95:fa:0e:c7:a4:1e:6b:4f:73:
5b:3d:93:2a:65:39:2f:1b:62:d5:3b:96:8b:11:8c:bb:d8:6c:
b3:43:a7:d1:12:4e:2c:9c:54:19:80:eb:a1:9b:d9:1d:e1:b2:
6c:e9:44:52:96:b9:74:d3:69:fe:83:82:4a:04:21:fc:2e:65:
b9:a9:92:8c:38:c8:28:19:5b:02:a0:d5:f6:44:42:b9:24:d8:
a1:c8:fc:b1:da:88:3e:bf:31:96:47:c8:23:f3:62:01:21:85:
d3:37:2b:08:ec:e8:0c:0b:1f:2e:62:5c:09:56:27:bc:69:cc:
69:c7:17:0e:d2:41:9c:18:4c:e3:0b:50:5f:7d:cf:1c:ab:6a:
fd:d9:f4:8e:41:6d:69:c9:50:f1:92:de:db:4b:20:8a:e3:33:
9e:f2:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:32 2026 by rpki-client