Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: 4QK5RjIjIuFm5l6vqWl7CH2xsNEeeTKDEJbOACPc7es=
Subject key identifier: 18:B4:D4:3C:C0:BA:BE:FF:E0:DC:06:9A:D3:9C:8A:1E:86:3F:09:F8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 26F4F0679B445E87F215836E9F04BD7F63AEE00A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219427.roa
Signing time: Mon 14 Sep 2026 12:25:38 +0000
ROA not before: Mon 14 Sep 2026 12:20:38 +0000
ROA not after: Mon 13 Sep 2027 12:25:38 +0000
asID: 219427
IP address blocks: 181.41.197.0/24 maxlen: 24
181.214.254.0/24 maxlen: 24
181.215.40.0/24 maxlen: 24
181.215.184.0/24 maxlen: 24
191.96.80.0/24 maxlen: 24
191.101.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f4:f0:67:9b:44:5e:87:f2:15:83:6e:9f:04:bd:7f:63:ae:e0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 12:20:38 2026 GMT
Not After : Sep 13 12:25:38 2027 GMT
Subject: CN=18B4D43CC0BABEFFE0DC069AD39C8A1E863F09F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:cc:54:5a:49:e1:85:77:9d:81:79:66:a0:
72:97:bf:32:f6:50:53:8f:c0:9f:93:57:8c:e5:cf:
66:84:5f:5d:8f:51:3e:b1:d6:f5:d1:f4:cf:c3:c9:
1b:3d:97:f8:27:54:ab:2b:e8:c4:0a:26:2f:90:0f:
7d:fb:ae:16:93:4d:df:ab:4b:84:0b:a3:eb:70:63:
be:82:4a:e2:5b:62:a7:9e:1f:38:30:9a:37:a6:60:
9b:cb:16:2a:31:f7:e3:82:52:35:dc:6e:61:dc:ac:
44:da:86:e1:16:5b:8e:0a:e2:86:df:7f:4b:b3:dd:
ee:57:52:a8:05:ef:b7:aa:6a:ec:32:b4:0a:68:af:
81:6f:8d:f5:e2:34:e1:17:7c:1c:0d:5c:8f:5c:b3:
a9:83:64:18:d2:35:dd:28:62:0b:6d:1a:dd:73:db:
c9:ba:fb:d0:b6:52:e9:41:e9:09:95:07:7c:64:50:
9b:d7:fe:72:e2:58:94:5a:d9:2b:26:cb:73:97:3e:
c7:c8:4f:6c:8b:60:49:d2:eb:9c:ed:e8:5f:5c:fe:
ad:47:e2:b5:cd:b5:d7:0a:0e:62:ed:eb:47:58:0e:
ee:5b:44:65:10:6d:7e:16:98:70:7f:ab:b2:47:8d:
2f:fc:fb:18:2d:91:1c:90:92:6a:ab:15:8a:7c:c2:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B4:D4:3C:C0:BA:BE:FF:E0:DC:06:9A:D3:9C:8A:1E:86:3F:09:F8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.197.0/24
181.214.254.0/24
181.215.40.0/24
181.215.184.0/24
191.96.80.0/24
191.101.144.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c4:7a:98:88:45:fe:91:67:26:78:16:f7:d7:c5:35:16:ca:
b2:a5:63:a4:70:0c:04:5c:a0:09:dc:8e:f5:18:b6:67:b4:84:
52:a3:b1:fa:77:83:2f:63:d6:eb:72:5e:50:08:bb:bb:ea:8a:
a6:ae:a7:70:4c:37:05:56:2d:45:18:3f:5c:9a:0d:1c:a6:ac:
60:06:fb:a7:3f:f2:e0:20:15:dd:af:ea:8c:ef:b4:2e:59:1f:
65:48:70:0b:87:eb:f5:53:26:36:0e:17:87:4f:77:1f:59:60:
71:9b:93:2c:18:a9:f6:3f:8e:06:6f:d0:2c:a9:10:f0:18:5d:
ea:a2:09:8f:bf:71:8b:60:9c:7a:31:0b:8e:e0:dd:70:c7:75:
65:61:b6:79:5c:f3:57:59:3b:17:4f:52:a9:2f:a5:f9:f4:48:
d7:1a:09:4c:dd:91:f2:9a:74:03:c5:0b:48:ae:57:81:ef:38:
88:2e:21:16:a8:20:42:61:02:5b:f4:39:c5:8a:68:ae:1e:13:
f4:31:37:5b:90:2d:fe:0c:de:0c:36:e2:3b:b8:40:fe:e1:78:
28:44:e0:8c:76:c1:78:9e:fe:f3:b0:bc:6f:62:59:07:d9:9a:
bb:63:61:e6:15:6b:83:50:db:ce:a7:40:18:7b:0c:1a:45:80:
32:0b:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:09 2026 by rpki-client