Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: Bgyp5NaqnucPUQXB5UWhjC4J5DXVn78v/0Ux4WHOWHE=
Subject key identifier: 93:7B:5A:B7:26:69:4F:6B:78:27:94:61:94:31:A3:34:64:8B:3C:7A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1AB78758581B638AE38AF704AB03E4C6373A4381
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
Signing time: Sun 20 Sep 2026 08:58:40 +0000
ROA not before: Sun 20 Sep 2026 08:53:40 +0000
ROA not after: Sun 19 Sep 2027 08:58:40 +0000
asID: 219105
IP address blocks: 51.194.240.0/24 maxlen: 24
78.105.149.0/24 maxlen: 24
94.118.4.0/24 maxlen: 24
188.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b7:87:58:58:1b:63:8a:e3:8a:f7:04:ab:03:e4:c6:37:3a:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 20 08:53:40 2026 GMT
Not After : Sep 19 08:58:40 2027 GMT
Subject: CN=937B5AB726694F6B782794619431A334648B3C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:4e:d5:7c:8c:b8:d6:65:64:aa:32:7b:49:
3a:1a:3a:02:51:96:c3:82:dd:2a:52:01:6b:d6:22:
60:f3:d6:da:09:98:85:27:0a:dd:0b:62:88:65:3b:
0e:26:b0:ef:d9:98:04:de:a5:cf:94:8e:2e:f1:c9:
b4:ca:25:99:d4:86:a4:97:98:cb:7e:56:28:c2:9b:
32:23:16:81:b2:bd:cf:0e:9f:2b:93:e9:f5:a8:55:
1b:48:51:4c:e5:4e:b8:93:03:22:60:39:04:ee:8f:
aa:cf:0e:f6:46:c3:16:f1:1d:99:c1:8d:dd:30:2f:
ae:3a:ef:24:14:b0:ed:bf:45:59:81:6c:56:8f:db:
9f:a3:dd:05:79:cd:42:53:d1:3d:83:12:f6:4c:36:
04:60:ec:25:f0:25:ad:ac:53:ed:9d:6b:5d:7e:1d:
cd:3d:63:8d:e9:8c:f1:b5:78:e4:6e:17:e7:77:fa:
39:a5:82:d5:fb:23:95:15:2d:1b:8a:d0:5f:c4:33:
8c:d5:1e:e5:9e:f2:61:26:8e:30:1a:7b:25:78:97:
93:a3:b9:6d:1f:7a:a1:e2:97:f8:03:93:49:b5:c9:
8d:ae:63:c3:6b:5f:78:84:82:01:f7:3e:37:05:7f:
8f:e9:f1:62:20:98:50:46:87:d3:84:4d:dc:d1:38:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7B:5A:B7:26:69:4F:6B:78:27:94:61:94:31:A3:34:64:8B:3C:7A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.240.0/24
78.105.149.0/24
94.118.4.0/24
188.220.139.0/24
Signature Algorithm: sha256WithRSAEncryption
09:26:82:2b:11:90:93:be:4b:67:86:d7:3c:1b:e0:94:75:1f:
5b:42:e1:f3:30:5d:94:15:30:09:32:13:d8:c0:a2:47:58:17:
2b:05:a9:bc:ee:a3:0f:59:6a:2c:77:2b:95:23:47:a7:34:6b:
8d:59:32:eb:54:2b:c0:8a:ea:93:f2:71:45:5d:40:31:51:91:
df:74:72:06:d2:bd:08:60:27:56:cc:4a:94:af:5d:d1:06:8b:
62:bb:c2:17:72:e3:0a:28:7b:53:20:6e:57:22:1e:59:d2:f5:
13:dd:85:87:d2:f6:70:cc:8b:d8:8b:a9:f1:d0:28:25:38:cb:
05:78:2a:bb:a3:ba:b6:1e:ea:fe:62:fd:0b:b5:9e:99:4f:e0:
aa:9e:3d:f8:86:e1:dc:85:de:7d:9f:b7:98:4e:64:05:d5:a0:
91:28:5a:9f:cf:ce:16:e0:2e:56:a9:23:b6:a6:19:13:1e:6e:
52:1a:8f:0a:c4:3f:d2:45:78:23:c6:d2:9d:39:70:2d:48:86:
94:8d:27:b0:89:f8:e7:e5:14:1d:45:21:f2:26:46:bc:2d:99:
1a:2a:0c:f4:8e:1a:d9:40:15:b7:53:8a:f5:79:b4:3c:e9:8a:
b9:36:32:14:ec:b1:35:56:09:af:a2:81:9d:55:a5:0f:1b:a4:
87:1b:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:22:28 2026 by rpki-client