Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219139.roa
File: AS219139.roa (raw, json)
Hash identifier: lqY969kRigti8gc2n6FwbKyJhZtc9Vi2sQvzYv4PfkY=
Subject key identifier: A4:EB:F5:20:25:C4:C1:38:74:72:12:29:62:EA:B5:E3:8C:CE:88:55
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 086FE7E241F6BD590279205A404BD7ABD7D4F1A4
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219139.roa
Signing time: Mon 27 Jul 2026 11:02:26 +0000
ROA not before: Mon 27 Jul 2026 10:57:26 +0000
ROA not after: Mon 26 Jul 2027 11:02:26 +0000
asID: 219139
IP address blocks: 91.198.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6f:e7:e2:41:f6:bd:59:02:79:20:5a:40:4b:d7:ab:d7:d4:f1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 27 10:57:26 2026 GMT
Not After : Jul 26 11:02:26 2027 GMT
Subject: CN=A4EBF52025C4C1387472122962EAB5E38CCE8855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:22:96:aa:59:d2:25:7f:9e:87:93:66:57:
70:54:e2:95:0a:25:90:8b:30:91:40:90:2a:21:b9:
0c:f7:fc:a0:18:e1:81:d9:34:65:dd:ea:0a:3c:4b:
50:2a:2f:4c:c1:bb:b3:62:8c:c1:55:93:5e:16:35:
6e:46:61:90:97:35:a7:d5:6c:db:3a:78:a9:36:5f:
87:41:03:d3:d0:e8:8c:61:46:74:f8:c7:43:0a:0e:
b4:89:89:05:58:94:5b:a4:ef:f5:54:06:eb:c8:74:
c9:9c:7f:23:26:2c:06:56:21:7e:b0:84:63:f5:4a:
d9:96:98:73:30:18:d9:3a:66:b8:3b:7a:db:35:d7:
21:7e:fd:d5:f2:cc:58:ad:64:ba:0c:46:a2:b2:7b:
6c:f6:ee:80:0b:79:08:f4:de:57:5e:a9:bf:04:dc:
ca:24:8b:4f:22:39:af:1a:59:8a:bb:92:ae:67:dc:
d2:54:80:96:67:5d:b9:9f:82:9e:f8:86:4d:62:a8:
ed:01:7e:d1:12:af:2c:37:46:d5:02:0c:6a:80:9b:
6b:11:0f:b4:f0:b6:4c:5a:9e:29:5f:9b:47:6d:d6:
c8:38:f2:48:b1:10:c3:7d:0d:ae:db:d3:97:12:cf:
65:01:f7:45:cb:01:02:68:b4:2c:2a:c0:4e:ef:e6:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:F5:20:25:C4:C1:38:74:72:12:29:62:EA:B5:E3:8C:CE:88:55
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.66.0/24
Signature Algorithm: sha256WithRSAEncryption
27:76:b1:28:d5:10:2e:a5:ed:cb:e2:7f:b5:5a:fd:ad:9b:af:
e2:12:3b:c8:27:07:fa:0c:5e:86:eb:da:27:2f:2d:15:52:e5:
8c:cd:9b:d0:ef:d8:86:fa:dd:18:17:35:73:8b:e8:5a:9f:5c:
4b:19:91:cd:6d:b0:7b:5b:74:06:32:78:b8:78:c9:b8:1a:1a:
04:e5:ab:02:2d:fb:82:cd:e0:39:55:3f:ca:d1:7e:8d:00:71:
6c:8a:85:9d:fe:44:8b:f7:49:14:b7:a0:71:52:e5:c4:2e:49:
56:4d:be:2b:72:8e:f7:ce:cf:dc:be:20:a1:21:2a:1a:9a:89:
e6:3a:05:d6:cb:71:ac:16:6c:92:0b:97:1a:70:d6:0f:71:77:
bf:79:3f:63:12:7c:84:bb:e4:02:a8:3f:49:52:f4:57:7f:80:
75:c4:50:c0:6d:74:3e:f9:5b:21:3c:47:9e:ff:31:8b:89:0f:
0f:57:d9:ef:90:df:b9:ee:94:01:aa:c6:ae:c6:e9:ce:09:e4:
78:19:c7:82:5f:2b:07:72:00:06:ef:07:17:20:7d:34:61:5d:
fc:a0:6e:d2:99:91:58:b8:4b:82:6d:30:33:30:21:9b:c5:a4:
05:f4:60:02:dc:ac:09:7f:00:6e:bd:07:d9:45:a4:71:54:17:
83:ea:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:33 2026 by rpki-client