Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219394.roa
File: AS219394.roa (raw, json)
Hash identifier: bunrjHvbpeghpSNVUniwu2Hmr5NdGkXSf9eywZAQTJk=
Subject key identifier: B2:D9:88:56:6A:30:EC:89:36:EC:79:1A:FB:4A:B9:63:D2:98:36:CD
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 3D294616DFDD444D43920592CBC8B36A028506CF
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219394.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 219394
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.47.0/24 maxlen: 24
5.199.49.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:29:46:16:df:dd:44:4d:43:92:05:92:cb:c8:b3:6a:02:85:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=B2D988566A30EC8936EC791AFB4AB963D29836CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:09:e1:bc:4c:6b:8c:79:bc:59:d3:18:9c:
f7:9f:d3:f0:03:2c:14:09:df:93:0e:f0:ee:bd:2e:
4a:79:01:2e:e4:ef:35:f2:bd:31:60:55:1d:65:b2:
96:8c:25:1d:37:cd:8d:0b:85:c1:ec:9e:49:2d:c5:
d0:11:c1:db:bb:7d:4a:5f:19:7d:ae:a2:4e:60:4a:
ca:df:c9:75:85:13:aa:3d:06:f5:d8:25:bc:b9:31:
bc:c5:7e:23:43:bc:45:dc:6f:d9:64:af:1c:b4:f5:
65:74:59:b2:b7:c6:49:71:21:cc:34:58:45:28:b5:
97:07:82:07:85:a2:65:e2:5c:5b:08:c8:30:38:e0:
3d:f5:06:d8:01:78:78:55:83:0c:3a:49:ca:56:e3:
99:a9:b8:3e:be:70:cd:b5:a3:3e:42:fc:a1:48:1d:
8e:69:1c:98:25:8b:29:e3:c5:f8:16:05:80:ab:f0:
1d:4b:44:a9:9f:a6:71:32:15:74:28:0b:41:22:ff:
8f:3b:10:41:8b:51:51:4e:b1:0f:0f:f5:86:57:48:
9e:19:7b:15:27:f9:72:3c:4e:c6:9e:79:e0:e5:71:
4c:f2:20:89:c2:e7:e1:64:99:fd:c5:69:b3:18:2b:
c0:73:4e:e4:b7:aa:ea:ac:bb:31:df:cb:55:15:de:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:88:56:6A:30:EC:89:36:EC:79:1A:FB:4A:B9:63:D2:98:36:CD
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.47.0/24
5.199.49.0/24
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ed:32:a5:81:cc:26:16:38:5f:ba:9b:99:cf:da:e1:40:80:
f7:9a:4d:21:37:af:69:7d:0f:92:ae:e7:51:ba:d9:d8:bf:84:
83:c7:51:91:2d:ce:4a:2f:4b:c8:2e:ca:30:11:f8:d8:5c:7e:
23:a1:79:20:51:0e:46:47:44:85:d9:bd:e8:51:28:04:99:47:
c1:97:a3:da:bd:f8:04:66:15:77:7c:00:6f:67:3e:31:0f:5c:
fb:be:0e:a7:66:39:4b:02:08:fb:5a:1a:5e:4a:4e:25:e7:11:
dd:38:50:30:b2:25:0e:55:08:89:2a:6c:aa:b2:69:69:b9:d3:
d0:82:7a:84:f3:c6:6a:c6:73:64:86:3b:af:e3:d6:3f:1f:19:
f6:cc:a1:6e:58:c3:86:d1:b2:ed:52:4e:cb:7d:f8:bc:df:71:
e3:04:d8:96:4b:37:67:6b:7c:b7:5a:2b:ee:6f:1e:f3:e5:bc:
27:29:87:d4:cf:49:9c:39:9e:ea:23:9d:52:ef:20:6c:87:f5:
2f:dd:19:3b:d4:20:d9:3c:b6:eb:1b:15:67:bb:b9:ef:f7:5c:
9a:f7:e4:e9:22:2d:a7:24:41:7d:e5:b0:ad:c0:ac:02:8c:73:
f1:59:89:c2:a7:e3:93:5d:82:0b:b2:05:28:0d:23:41:cc:77:
53:ca:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:41 2026 by rpki-client