Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219036.roa
File: AS219036.roa (raw, json)
Hash identifier: iJVKZ/iZDlGhzYjGOuf1nEQoWS2bqZ7eJHxweon0z7M=
Subject key identifier: D5:F6:34:DC:F0:07:87:A6:A6:FB:E4:2F:E8:7D:DE:F3:B5:11:45:F3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 721176F34D4EA0FDDCD7F865BEE4BB9F6E4CD3B9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219036.roa
Signing time: Wed 09 Sep 2026 13:26:37 +0000
ROA not before: Wed 09 Sep 2026 13:21:37 +0000
ROA not after: Wed 08 Sep 2027 13:26:37 +0000
asID: 219036
IP address blocks: 94.116.4.0/22 maxlen: 24
94.116.60.0/22 maxlen: 24
94.194.20.0/22 maxlen: 24
94.194.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:11:76:f3:4d:4e:a0:fd:dc:d7:f8:65:be:e4:bb:9f:6e:4c:d3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 9 13:21:37 2026 GMT
Not After : Sep 8 13:26:37 2027 GMT
Subject: CN=D5F634DCF00787A6A6FBE42FE87DDEF3B51145F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:21:46:51:4e:5b:6f:52:b4:fa:4e:e1:c0:
f9:07:8c:bb:14:18:cd:f8:fa:b5:28:00:47:d3:61:
36:07:53:73:30:f6:83:a5:6a:36:73:19:d0:0f:59:
5d:6e:de:e8:03:5f:d4:cc:98:2c:35:35:20:b2:4a:
85:85:d5:fa:2e:8d:5d:41:f4:b2:3a:4e:2e:b0:2b:
24:84:bd:b4:f1:2c:43:69:b6:47:60:da:57:2b:dd:
53:72:1b:2e:70:b8:db:9e:11:88:39:7b:c1:2d:b4:
06:1c:be:d3:7c:69:db:ea:a5:e8:ae:ca:95:08:78:
af:76:04:cb:21:d9:1b:e3:b8:1b:2d:60:a7:61:05:
52:39:94:c5:c9:a5:cc:fd:e9:ce:3f:84:0d:90:5b:
51:a4:7f:96:50:36:8b:7d:23:a0:a1:dd:3b:90:00:
cf:01:43:6a:a6:2f:26:0d:fc:52:15:69:35:23:2c:
bc:91:a5:d8:f5:36:18:67:90:68:10:15:2b:32:47:
b0:6a:8d:06:e7:3a:99:ff:57:dc:35:dc:1a:95:92:
6f:9c:df:f8:cc:ed:af:b7:20:95:35:98:e8:41:6d:
78:be:cf:06:f7:5f:8a:2a:41:f0:7e:1f:53:7b:82:
86:88:f6:67:14:54:d1:29:95:8a:8e:a2:94:fc:2e:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:34:DC:F0:07:87:A6:A6:FB:E4:2F:E8:7D:DE:F3:B5:11:45:F3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.4.0/22
94.116.60.0/22
94.194.20.0/22
94.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:78:70:46:83:b1:0b:92:a9:1d:11:cd:fa:2a:52:38:24:db:
70:e6:fd:88:6c:92:eb:74:39:e5:50:42:00:37:17:46:d8:3b:
db:c3:42:58:47:79:1e:bd:78:0f:02:67:06:00:49:25:71:6e:
b6:d2:9b:c6:de:a8:3c:8f:a2:a3:ef:3c:8b:96:a3:7c:d8:8b:
49:78:e7:66:7e:8a:33:fd:cd:4b:5f:6a:da:19:8f:95:55:8c:
be:cb:6a:6c:5f:8a:32:82:5f:61:e8:36:15:c4:2c:c3:d0:f2:
75:d6:51:af:72:c7:7e:d4:55:3d:23:68:c9:32:0a:04:ff:8c:
87:39:77:84:b9:32:78:ae:cb:04:f8:64:84:2e:c1:83:fb:32:
46:67:02:3a:8e:83:9a:1f:b7:53:5b:f1:3f:c4:96:92:98:d3:
b3:39:7c:1b:0f:b0:a6:19:00:f4:7a:1b:f1:2e:3e:f9:97:ca:
1f:6d:05:ec:e2:7c:70:c0:4b:44:ba:9e:cd:9c:b4:d8:f4:33:
49:42:37:43:21:61:62:b2:b3:68:3d:90:be:8b:a9:ac:27:c4:
e2:ad:81:60:d5:ce:84:84:9c:57:31:71:d8:5e:66:e3:1c:da:
79:73:64:1b:13:9f:3c:10:4c:59:2f:4f:98:f5:37:ca:ca:91:
bd:49:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:49 2026 by rpki-client