Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: A+hoUcrA8ocedDZUkpwA+tOOAcJvr2ak8V5XPyhjXp4=
Subject key identifier: 99:AE:83:77:6E:7B:16:29:27:EE:7D:FE:06:F5:BF:53:DE:11:38:9C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5BB218B3B53083099F4DD4BEDC18875EEA38E76A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219393.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 219393
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.47.0/24 maxlen: 24
5.199.49.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b2:18:b3:b5:30:83:09:9f:4d:d4:be:dc:18:87:5e:ea:38:e7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=99AE83776E7B162927EE7DFE06F5BF53DE11389C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:3e:8c:3a:6a:c4:b4:a0:e6:9e:40:c7:41:
79:4e:ae:8e:50:44:49:12:10:1e:24:c9:06:cb:bb:
f5:03:14:de:ba:1e:c2:45:ef:0f:5b:f1:56:cf:0d:
9b:68:66:6d:a4:eb:1a:3a:c8:7a:94:30:f3:35:77:
34:18:64:13:57:e6:36:ee:03:29:ef:79:bb:02:f0:
7b:dc:6e:3d:aa:a7:5a:22:a1:5b:ce:a5:c1:e9:05:
15:e8:63:46:73:bc:ae:92:ba:a8:00:a6:2f:77:2c:
de:19:f3:39:53:78:ec:cf:7c:30:95:d7:02:5c:dc:
d5:b0:34:7e:66:9e:57:07:5e:19:61:4c:e7:e3:58:
ba:17:af:13:26:d4:f5:02:65:8f:4b:76:82:3f:3d:
5b:b9:da:e8:ee:77:2e:98:b9:5b:9f:47:f1:11:ce:
6b:d3:97:91:f7:c8:af:ee:0e:6e:ca:98:28:6f:89:
8e:7c:5b:85:fc:3c:bf:40:24:a3:88:96:ee:c9:e6:
b7:ed:80:3d:08:7b:7c:fe:fe:eb:b4:f9:9b:26:a1:
f6:89:d5:aa:99:25:a8:c1:3a:2f:be:07:27:33:81:
0f:f9:93:0a:42:78:4b:90:4a:eb:2d:5a:03:02:a4:
b2:d6:7f:65:b1:5a:c3:42:67:8e:8e:74:e3:be:38:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:83:77:6E:7B:16:29:27:EE:7D:FE:06:F5:BF:53:DE:11:38:9C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.47.0/24
5.199.49.0/24
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:55:54:ba:61:86:d0:f9:a0:23:06:ab:f0:bc:18:76:a1:5d:
94:6b:1e:28:77:19:d7:56:9e:8f:3e:a0:af:1c:59:4a:56:5e:
29:7f:6e:91:29:21:ec:24:15:56:5b:3d:e1:75:4e:fe:d2:fe:
85:7e:27:33:1b:cd:a6:07:82:30:a3:c1:cd:b4:e8:46:a6:75:
f9:2e:91:a9:f9:b8:03:a5:9b:67:4a:d2:c6:ad:4a:e1:7c:f3:
89:11:27:39:15:56:94:70:08:f9:8a:46:fd:86:66:bd:d1:ea:
07:33:4d:8c:87:7b:d0:06:97:ef:26:37:98:c6:0c:c8:a7:95:
19:a3:31:eb:e2:ae:54:15:36:9a:9c:84:91:fe:f7:a3:d0:4d:
84:9a:ce:45:b2:41:a8:d0:21:25:23:2d:5a:f4:6e:43:62:03:
32:de:b1:28:c6:15:6a:bc:b5:3d:30:55:86:65:c7:ae:3d:65:
4a:b8:24:5a:d7:7b:75:ce:59:f4:e0:fb:57:69:fd:0b:9e:18:
0b:cf:54:d1:aa:dc:2f:03:af:62:f0:9f:63:35:8c:b8:2d:71:
01:47:ae:d7:ef:35:7c:db:2d:ea:8f:02:c0:45:f2:3a:a8:42:
9b:7c:63:16:6e:54:b3:2d:80:e8:4c:ca:cf:2c:77:f7:26:53:
24:b3:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:35 2026 by rpki-client