Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: qCyaUyiegoiW59sxFdb0s+9wHszu+yP4z+kqOJXtWNk=
Subject key identifier: F2:80:A2:F1:37:14:21:13:F5:CD:B4:80:10:C6:48:3F:6A:FF:AC:C8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7477380DC5C15DC6577CB97889F5D2592C4971B3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
Signing time: Fri 18 Sep 2026 10:39:09 +0000
ROA not before: Fri 18 Sep 2026 10:34:09 +0000
ROA not after: Fri 17 Sep 2027 10:39:09 +0000
asID: 219427
IP address blocks: 51.146.244.0/24 maxlen: 24
78.105.143.0/24 maxlen: 24
78.105.145.0/24 maxlen: 24
78.105.147.0/24 maxlen: 24
78.105.157.0/24 maxlen: 24
78.105.161.0/24 maxlen: 24
78.105.163.0/24 maxlen: 24
78.105.170.0/24 maxlen: 24
78.105.174.0/24 maxlen: 24
78.105.176.0/24 maxlen: 24
78.105.187.0/24 maxlen: 24
188.220.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:77:38:0d:c5:c1:5d:c6:57:7c:b9:78:89:f5:d2:59:2c:49:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 18 10:34:09 2026 GMT
Not After : Sep 17 10:39:09 2027 GMT
Subject: CN=F280A2F137142113F5CDB48010C6483F6AFFACC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:e7:ca:75:92:fb:99:8b:b0:ed:9f:99:75:
eb:b7:80:70:29:64:a4:ae:84:cf:12:2e:bc:ea:8e:
62:32:04:a1:ee:9f:55:ae:84:35:1a:fa:39:e9:a3:
08:a6:f7:f9:d4:d1:7d:24:5a:67:7a:c5:31:a8:50:
5e:e0:1b:5e:16:36:af:ad:8b:f7:81:e8:45:0a:48:
7d:b3:d6:90:57:46:22:3e:2f:d5:a0:85:10:8f:53:
01:93:92:3b:3c:3a:fc:76:90:df:3f:1d:9a:26:5c:
d5:83:2b:8a:de:14:0a:8f:0e:cc:ee:e9:82:86:2c:
eb:95:51:4d:21:5a:e7:7e:76:95:96:89:64:f2:3d:
19:02:11:07:b5:16:ef:be:39:2e:aa:4e:5e:f9:43:
5f:e7:0c:05:0b:df:fb:85:1f:0c:17:cd:cf:bb:1b:
22:9c:40:35:31:1b:21:b0:4a:30:78:5b:05:f9:b0:
46:8a:43:1a:b3:4c:64:ec:d1:40:83:c0:2e:07:95:
58:0d:16:90:d6:ed:7f:ec:29:bb:77:4c:ed:67:8f:
99:7f:cc:85:19:63:e4:a1:15:cc:1d:78:e1:44:98:
cd:c1:35:3a:96:fb:85:c6:d2:71:93:7f:3d:85:47:
62:a5:11:a5:dd:c1:7a:b5:c0:f8:38:d3:3a:79:ed:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:A2:F1:37:14:21:13:F5:CD:B4:80:10:C6:48:3F:6A:FF:AC:C8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.244.0/24
78.105.143.0/24
78.105.145.0/24
78.105.147.0/24
78.105.157.0/24
78.105.161.0/24
78.105.163.0/24
78.105.170.0/24
78.105.174.0/24
78.105.176.0/24
78.105.187.0/24
188.220.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:15:81:85:dd:9e:ff:81:4f:2f:87:5c:69:4f:e6:47:e1:82:
60:34:fe:d4:c9:4a:a5:3d:a8:73:45:16:09:52:5b:67:ec:e7:
d3:78:92:a1:76:e8:a6:2d:e3:6b:9c:86:0d:0a:09:6c:cb:eb:
26:10:53:4e:bf:59:77:f9:ac:0d:d2:48:dd:eb:c0:27:09:f3:
fb:0f:7a:d4:86:7b:88:52:b1:a3:f8:dd:26:fc:98:9f:37:51:
42:d3:45:12:30:e4:6d:1f:08:41:ff:2b:ca:0c:1f:d2:5c:05:
71:83:28:c9:4b:2f:19:e0:02:82:8b:74:b5:16:5e:7d:d2:45:
a2:7b:72:8e:b6:68:0f:be:2a:64:70:e6:2c:f1:e3:e6:f3:de:
30:45:e9:94:26:7d:cc:97:9f:c4:19:e0:ba:96:f8:b3:d6:66:
4a:18:e0:d8:dc:25:aa:44:d9:0b:57:ba:71:71:bd:06:e2:8c:
f3:4a:5b:5c:bf:eb:a1:4f:7a:73:f0:5d:8a:b9:b0:50:ba:92:
65:44:8c:b3:59:79:1d:bf:de:92:24:35:28:73:fb:d3:99:fe:
96:20:d4:1e:3d:6f:79:07:2a:85:c5:be:32:9e:ba:3a:6b:ed:
d0:e2:37:e5:61:6a:4f:cf:78:52:e2:4c:1b:46:cf:7a:8a:7f:
83:be:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:18 2026 by rpki-client