Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: yMEtSKl/r42f5KwpWBsPkIqJ4JNRNZIDOvzXVUchVNE=
Subject key identifier: 2F:BB:3C:DF:F8:9F:98:A0:39:B0:CA:D0:93:D6:6C:1B:CD:90:A0:F9
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5D2A57CBCE4B1B9B6F86C51DE8AFF198FFB99D52
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219447.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 219447
IP address blocks: 5.199.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2a:57:cb:ce:4b:1b:9b:6f:86:c5:1d:e8:af:f1:98:ff:b9:9d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=2FBB3CDFF89F98A039B0CAD093D66C1BCD90A0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:06:03:17:63:aa:c1:87:09:a6:d0:68:72:
0b:bc:72:bf:69:65:ea:da:24:1b:e3:b9:44:00:7a:
a1:ec:d2:a7:70:60:ae:11:65:34:31:68:c2:f9:e9:
cb:47:b5:5d:11:a8:99:a3:a4:91:67:cb:6a:97:26:
9b:dc:e0:72:f0:a2:cb:b5:70:1f:7d:e3:1a:e2:54:
ae:dc:ef:17:3d:65:a2:dc:21:ec:92:b2:1f:04:db:
7e:f4:b2:8c:47:9c:41:db:cc:77:cd:66:d6:8a:0f:
90:1b:73:ec:5d:fc:ca:e1:51:a7:df:55:ad:1b:ad:
8e:f5:03:4f:71:27:98:7e:3d:40:38:e4:8d:39:09:
79:3a:11:f0:d4:34:eb:5b:26:28:e4:3d:6d:24:a1:
a4:1f:34:e9:61:dd:f2:63:aa:b0:06:78:bd:81:0c:
f6:1e:80:e6:46:05:26:51:7e:d5:86:2a:c2:e0:a3:
b6:8a:b0:2e:34:a3:f9:08:20:2f:2e:7a:8a:8b:32:
65:d8:d2:77:72:de:b4:1c:b5:db:22:cb:b1:62:06:
b9:3c:1a:51:21:b8:ae:e3:b6:43:ff:68:b3:cc:63:
d4:cd:c6:b1:ef:33:69:06:d0:1c:a8:a2:de:40:89:
ed:f0:99:2c:59:aa:28:af:bc:36:00:e8:e9:ba:5c:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:3C:DF:F8:9F:98:A0:39:B0:CA:D0:93:D6:6C:1B:CD:90:A0:F9
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:de:f9:28:69:81:34:e8:82:ca:8e:1e:e5:ac:89:8c:cb:2c:
9c:88:5a:f2:09:32:f8:38:35:8f:a0:53:75:a8:8a:8c:89:ca:
b4:5e:17:2f:11:20:01:e7:90:bd:99:88:7e:1a:bc:90:a7:fb:
be:36:9e:cb:7b:62:59:6a:18:ec:d1:b6:24:4e:d2:80:bc:f9:
4d:b5:f0:5f:b7:4c:90:70:11:4b:d5:77:5b:c8:0f:69:be:65:
74:0c:df:f0:b1:dd:83:36:92:38:18:f1:7b:45:72:ac:08:61:
1f:16:d4:92:65:f1:03:be:1e:f1:69:dd:18:68:c5:26:b3:e0:
4e:c6:c2:90:43:89:82:78:eb:3b:4a:27:5b:b4:df:ee:3e:36:
3b:f9:7f:b2:1f:1c:80:86:c9:42:d4:ba:08:81:a9:2f:4a:2d:
4e:6c:73:ea:27:a8:20:86:d8:e1:6a:59:b8:c5:6b:78:af:19:
64:ff:5e:c8:ce:02:22:fb:e6:5e:ea:0c:86:5c:72:50:ba:a9:
18:6a:dc:87:58:60:1f:ad:b8:26:59:ad:a5:9d:e4:a6:2a:ed:
03:ec:32:8a:57:71:48:dc:3e:f2:c6:6e:22:f1:bf:88:3c:16:
e3:fc:f2:76:45:14:03:9c:a0:0b:2c:54:d4:6d:73:ac:d5:47:
be:10:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:28 2026 by rpki-client