Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219329.roa
File: AS219329.roa (raw, json)
Hash identifier: WzSTn6IjZi8kTB39KjCiKzhBU8J/VGvlLsc0sWtazJU=
Subject key identifier: D3:76:7F:94:0A:6B:59:09:0F:7E:DC:A7:E4:BE:B8:B0:73:F6:18:76
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2B9A0E9CA499095A3C9303B287903F1D93B986D0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219329.roa
Signing time: Wed 16 Sep 2026 12:29:25 +0000
ROA not before: Wed 16 Sep 2026 12:24:25 +0000
ROA not after: Wed 15 Sep 2027 12:29:25 +0000
asID: 219329
IP address blocks: 51.241.159.0/24 maxlen: 24
78.105.162.0/24 maxlen: 24
188.221.14.0/24 maxlen: 24
188.221.99.0/24 maxlen: 24
188.221.103.0/24 maxlen: 24
188.221.223.0/24 maxlen: 24
188.221.248.0/24 maxlen: 24
188.221.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9a:0e:9c:a4:99:09:5a:3c:93:03:b2:87:90:3f:1d:93:b9:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 12:24:25 2026 GMT
Not After : Sep 15 12:29:25 2027 GMT
Subject: CN=D3767F940A6B59090F7EDCA7E4BEB8B073F61876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:c9:73:ce:52:87:e0:4f:b7:a6:d9:ad:6f:
ae:61:32:bc:51:c2:75:6e:08:3b:af:82:03:70:17:
66:8a:4a:b7:a7:64:37:fd:45:f3:f1:73:5e:f2:00:
dd:9c:3c:f0:e2:0d:d0:55:7c:9a:8d:11:6e:cd:e2:
b2:90:a8:7a:1b:68:b2:7d:21:06:a8:c9:d2:0f:71:
d2:d4:01:27:65:69:be:95:d5:66:b6:a9:94:f0:33:
c6:8d:99:12:e9:1f:ac:1d:3e:cf:9c:a9:1a:f3:0b:
3d:3b:a7:4d:b4:32:c5:65:6b:d2:3d:94:f9:5f:05:
d6:fb:c8:e2:b1:cb:d6:9e:9d:a3:36:b3:03:cc:78:
d7:d3:1b:15:c4:39:bc:c6:5d:d2:f3:9a:d4:97:43:
a3:0d:d8:8f:00:97:f0:ef:7d:40:04:f7:fe:20:9e:
70:93:50:e6:e9:4f:2a:5c:f2:7c:65:0e:f4:07:f1:
75:f4:31:0b:8a:1c:e6:75:c9:b4:29:59:f4:3a:42:
7a:d4:01:67:a5:af:a2:4c:1a:a0:16:d5:5f:16:db:
64:23:d1:7f:9b:c0:03:d6:9e:a2:28:b0:c6:8d:f2:
35:0c:b1:e1:4f:16:80:18:ff:b5:bf:9a:fd:79:31:
0d:ec:7a:14:88:e4:ac:9e:db:1c:5e:03:18:5c:82:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:76:7F:94:0A:6B:59:09:0F:7E:DC:A7:E4:BE:B8:B0:73:F6:18:76
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.159.0/24
78.105.162.0/24
188.221.14.0/24
188.221.99.0/24
188.221.103.0/24
188.221.223.0/24
188.221.248.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:88:25:9a:b4:ef:55:ec:40:ce:5a:d8:30:a3:b5:8e:d5:73:
71:e7:02:b1:66:54:d3:5d:af:67:d6:39:2f:d3:b4:b6:55:90:
4c:49:7e:27:a5:4e:c6:a4:71:3f:66:36:a8:a1:91:ad:a5:57:
71:f6:47:da:e3:4b:cd:dc:0e:49:5f:53:17:f5:b2:1b:4e:be:
51:30:6b:fe:cd:2a:2f:62:dc:2d:c3:ea:27:1f:13:cf:6a:2a:
97:b9:9d:e3:15:4e:69:42:a9:54:bf:51:b1:89:63:59:af:d8:
32:46:d3:f0:18:e5:36:25:14:45:3c:c3:9c:5f:ed:fa:0c:1d:
68:4f:85:1c:d8:9d:c4:5e:8d:16:ca:04:1e:f3:37:70:0e:bb:
ee:24:fa:f4:ea:a1:a8:5d:dd:db:b0:76:f9:05:b6:ba:ef:77:
b4:b3:86:8a:cc:37:20:44:8d:3c:fb:9d:c4:ce:16:e0:b6:1a:
c5:6f:c4:1d:3f:f0:48:08:de:3a:f4:cb:76:0b:3b:9b:57:d8:
83:7b:58:db:e5:a3:50:ee:71:57:53:5e:db:fe:5d:de:14:d9:
a7:fc:f1:c4:09:a9:87:f2:95:04:9b:ad:79:47:5a:18:b4:7b:
b2:c0:e4:d8:34:5b:07:df:c6:64:5d:58:5e:72:55:35:8c:e6:
3e:9a:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:37 2026 by rpki-client