Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: YT4GafKE4Vlo0dX8K6yTuOyAs0Rno3zRSyTUN43H1Ww=
Subject key identifier: 08:F5:CE:D8:DB:4C:0F:C9:E5:10:B5:C2:52:1B:B1:67:45:7E:79:CE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1CFE6E62DE6EF74A416DAEEA03D40BA6BE29F4F4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219075.roa
Signing time: Fri 30 Oct 2026 09:12:05 +0000
ROA not before: Fri 30 Oct 2026 09:07:05 +0000
ROA not after: Fri 29 Oct 2027 09:12:05 +0000
asID: 219075
IP address blocks: 51.146.238.0/24 maxlen: 24
51.241.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fe:6e:62:de:6e:f7:4a:41:6d:ae:ea:03:d4:0b:a6:be:29:f4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 30 09:07:05 2026 GMT
Not After : Oct 29 09:12:05 2027 GMT
Subject: CN=08F5CED8DB4C0FC9E510B5C2521BB167457E79CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:77:bf:ba:08:bf:b1:91:6f:eb:ad:ee:62:
4d:71:56:4c:cc:d6:ce:53:7c:53:cb:07:fe:ca:01:
23:ea:10:84:05:08:7e:ef:d5:fe:9b:a0:d9:a4:c8:
cc:4c:a9:20:e7:8c:8a:24:27:ea:0e:1e:24:8b:dc:
db:7d:af:d4:3c:55:a1:36:f8:30:0e:09:6b:0c:ae:
5f:c4:e4:f7:06:03:d7:b0:c8:c0:a8:53:12:79:92:
60:9c:67:f0:e3:8b:bb:37:70:3d:01:12:b3:e4:2d:
f7:cf:55:7b:2a:a1:1c:84:5f:ab:22:74:92:17:47:
e5:59:70:7a:20:1a:b3:15:81:84:55:4b:10:e4:20:
ad:e6:4a:f6:0d:72:94:ae:ee:31:f4:ae:c3:39:1e:
9d:28:02:50:59:25:3a:f0:f4:00:be:56:ed:a7:b2:
53:10:a7:9c:9b:b7:2b:68:25:ff:63:cb:59:6d:b4:
42:e0:bd:76:eb:00:d1:b2:ac:fd:26:39:40:63:58:
8d:af:6a:e9:05:bb:1b:13:87:7e:d3:31:f4:47:b5:
b3:a1:10:0f:00:c4:cd:fc:d0:dd:e1:0d:1e:04:d2:
50:b4:20:3c:44:6a:be:3a:47:43:18:8b:4b:b9:46:
82:3d:bf:f8:60:0a:04:8d:6c:42:8a:bb:44:1e:b7:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:CE:D8:DB:4C:0F:C9:E5:10:B5:C2:52:1B:B1:67:45:7E:79:CE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.238.0/24
51.241.163.0/24
Signature Algorithm: sha256WithRSAEncryption
44:41:4c:09:75:91:44:56:bf:bb:76:62:db:62:be:68:21:3d:
3a:46:1f:11:b6:d4:4d:bc:5d:da:12:a8:ef:c6:58:32:18:fb:
2a:b5:49:c4:a7:6a:26:af:63:a5:b4:1b:5e:6c:a1:9b:35:3d:
4f:63:f0:bb:c3:83:a2:49:b4:fc:9f:0b:94:74:b5:3a:26:f7:
aa:d9:99:e7:0d:8e:d1:e0:51:b0:2b:f8:92:67:24:e1:12:b5:
66:8b:96:64:88:d4:ec:37:e7:60:3b:fa:31:5b:b9:c8:fb:03:
9c:c6:aa:85:da:a3:63:74:47:4e:e0:e0:29:f4:59:c8:a8:be:
3d:49:8b:24:1f:db:c1:dd:d1:19:c2:1d:ba:54:f7:1b:76:c7:
86:1c:6a:13:b8:26:23:99:f7:ab:d8:3f:bc:a6:02:4f:8a:86:
6f:16:08:37:38:71:be:b4:14:c9:3a:45:88:ab:89:47:10:ad:
30:11:f3:0d:40:9b:3e:00:02:b8:a1:e9:5a:20:89:8d:d1:b9:
91:8c:13:10:8d:2f:a8:96:49:a6:15:4d:f3:ac:f3:df:04:37:
b8:61:bf:14:e3:64:88:f8:54:75:20:e7:41:6e:2f:3b:83:c5:
04:8a:24:ba:77:d7:5a:1f:94:a4:a8:a5:a9:63:12:23:15:ef:
73:83:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:59:41 2026 by rpki-client