Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219100.roa
File: AS219100.roa (raw, json)
Hash identifier: VgR68tiicK/C1D8nfTXat1S0qXs+nDI3IITM77KxLi0=
Subject key identifier: 86:8D:5E:75:20:3C:BC:5E:D5:58:BF:8C:3B:54:FA:D6:3C:DE:87:26
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 55A642CD587136C1CBDCBC2119BBEBB18922E111
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219100.roa
Signing time: Wed 16 Sep 2026 08:28:01 +0000
ROA not before: Wed 16 Sep 2026 08:23:01 +0000
ROA not after: Wed 15 Sep 2027 08:28:01 +0000
asID: 219100
IP address blocks: 185.139.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a6:42:cd:58:71:36:c1:cb:dc:bc:21:19:bb:eb:b1:89:22:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 16 08:23:01 2026 GMT
Not After : Sep 15 08:28:01 2027 GMT
Subject: CN=868D5E75203CBC5ED558BF8C3B54FAD63CDE8726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:e3:b9:4f:dc:e7:64:d7:8e:0b:dc:04:eb:
40:65:54:a0:79:f0:c7:c2:08:22:26:e4:e9:ee:de:
c6:ea:04:b4:68:51:b8:30:bf:db:23:f3:5e:95:9b:
e8:e7:65:ba:a5:dc:ae:9e:33:c3:f9:9c:3e:66:f3:
1e:48:4c:14:52:90:1d:1c:d1:d7:f8:f0:b7:45:6a:
a8:5c:20:3b:56:59:f8:43:12:26:73:58:b6:b3:78:
50:0f:0f:b2:e0:52:be:93:0a:9e:06:12:25:34:f1:
db:36:6d:9f:01:4d:51:16:c5:b6:79:0d:b4:28:8b:
da:f4:8d:c9:e7:f2:39:04:82:25:7f:20:36:4e:40:
57:35:43:ed:36:74:41:06:02:d9:c1:4d:de:3f:e8:
b9:8b:8d:51:f0:3a:4a:4b:c6:9f:b2:3e:65:b1:8f:
a9:17:a9:e6:a0:06:c5:59:0c:0f:52:20:d9:75:3d:
a6:26:28:a9:1a:23:79:15:72:96:8f:b0:bf:c9:d7:
93:c9:b9:47:8c:14:d0:9d:6c:58:31:99:a9:af:76:
5a:ec:13:9d:18:42:96:4c:61:97:64:a2:cf:04:e8:
29:5d:27:e7:54:a2:a0:ab:5e:b5:0c:95:51:c0:7a:
c2:ed:80:07:e5:82:2a:2f:92:1e:51:b1:87:f1:a8:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8D:5E:75:20:3C:BC:5E:D5:58:BF:8C:3B:54:FA:D6:3C:DE:87:26
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.237.0/24
Signature Algorithm: sha256WithRSAEncryption
78:13:10:07:e5:36:91:1c:c1:17:33:0d:20:18:3d:a8:0f:d7:
0e:58:ff:2d:49:06:bf:57:17:cc:d7:33:33:c1:42:b5:c7:30:
7e:3b:cd:8f:86:24:8a:8f:fd:1b:7f:e6:93:51:13:1f:d9:1e:
c3:8c:e6:cf:92:46:f2:9e:97:72:c1:eb:79:1f:eb:a8:ad:69:
55:9e:c1:31:1d:e0:07:50:71:18:cc:4c:74:1c:07:c6:00:5a:
8c:a8:97:ee:f7:ac:67:ce:ea:00:0d:7e:14:04:a7:3c:2a:58:
96:0f:b3:2e:49:9d:84:3e:1f:66:59:f6:bc:1f:0f:0c:18:08:
01:61:5c:b5:96:53:ce:41:4a:20:f6:0b:63:bb:2e:58:a8:ba:
4a:65:6b:7a:f0:d6:8e:e7:10:b2:53:6f:e6:c3:a8:38:10:81:
a2:28:94:b4:b2:01:40:0c:cd:10:77:8e:c5:0a:9f:fc:2e:72:
43:5a:f0:15:7f:3c:5f:12:5c:e2:6b:8d:21:3e:ef:6d:a0:28:
17:49:8f:91:7e:38:32:a4:8c:29:85:c7:10:54:4b:a8:91:c7:
09:74:26:07:c7:a6:94:8c:91:8c:95:aa:22:4d:ed:51:d5:9d:
4f:0c:ec:26:04:8f:91:7b:b3:b9:28:ce:f9:ba:5d:c5:fa:38:
8d:80:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:38 2026 by rpki-client