Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219183.roa
File: AS219183.roa (raw, json)
Hash identifier: 4UrOLweT+qrf1NMg3fly9j1yLDdaczMTQLgIHVuO3gA=
Subject key identifier: 82:45:E5:0B:86:4E:8F:3E:81:81:9A:24:2D:7B:44:A3:82:87:E9:3A
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 3F06E69BEA40634222973B1EDDA8166C1520217F
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219183.roa
Signing time: Sun 06 Sep 2026 10:58:31 +0000
ROA not before: Sun 06 Sep 2026 10:53:31 +0000
ROA not after: Sun 05 Sep 2027 10:58:31 +0000
asID: 219183
IP address blocks: 177.28.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:06:e6:9b:ea:40:63:42:22:97:3b:1e:dd:a8:16:6c:15:20:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 6 10:53:31 2026 GMT
Not After : Sep 5 10:58:31 2027 GMT
Subject: CN=8245E50B864E8F3E81819A242D7B44A38287E93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:a9:6b:66:f3:b7:9c:b4:16:0e:25:ad:ee:
a9:73:b9:97:29:51:2e:42:08:cb:65:1c:ab:66:a5:
ca:98:fa:ba:c7:e3:26:16:14:36:4e:90:93:89:1a:
5e:50:63:2d:f2:76:e5:f0:6d:72:d5:b7:8e:47:22:
ab:e4:b2:7a:98:ec:3c:df:85:b7:fa:28:2a:44:f2:
9b:03:9e:53:9c:3f:f3:80:88:4d:cd:96:b8:25:73:
dd:39:3f:60:dc:f1:19:17:f7:95:a1:b9:ae:0c:93:
e9:bc:38:bf:1f:f7:be:a7:ad:1a:d8:5a:8e:a8:9d:
fd:b1:25:67:d7:53:4c:92:d2:99:36:a8:ea:a6:31:
df:15:b3:5e:48:0c:ec:ae:92:88:69:e6:21:64:f7:
54:6f:cb:05:f7:20:1a:64:6d:25:fd:4c:85:66:20:
55:a0:4e:35:2c:51:38:6d:1f:f9:04:c5:08:1f:fe:
b6:15:9a:53:0c:6a:a4:e4:22:a7:76:db:aa:12:f7:
5d:c5:3e:b0:f1:cd:71:d6:be:19:95:aa:a2:37:1e:
c8:0d:8c:a6:3f:a1:79:b4:c9:0b:68:26:99:b7:fe:
a9:7b:94:7c:12:dd:ab:39:b6:5e:fb:57:0e:e6:35:
42:bb:24:38:ef:71:9b:b8:58:0f:2f:22:3a:f9:8b:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:E5:0B:86:4E:8F:3E:81:81:9A:24:2D:7B:44:A3:82:87:E9:3A
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:79:1a:6c:43:ae:f6:cc:04:28:c4:42:2f:bb:52:71:cb:7d:
b6:57:97:51:7d:61:81:0f:51:5a:a5:55:03:f8:aa:46:56:39:
19:0b:89:da:1b:af:1a:f6:34:ad:9a:8e:33:83:95:6e:7d:ad:
22:9f:6d:4e:e6:99:ab:f2:4d:c7:fa:5e:de:fc:88:6e:8f:10:
95:20:d0:f1:79:ba:53:18:20:9b:1d:c6:e1:a2:48:46:9c:c4:
43:07:f1:a5:35:a2:52:e4:92:b0:8c:ea:45:ba:65:d3:08:e5:
38:f4:5c:6b:c9:73:01:5b:89:df:ec:15:74:6b:4f:00:44:7d:
29:e5:7e:6f:b5:a7:71:a1:d1:63:3c:8e:71:c2:e0:89:e0:eb:
2c:0f:80:54:1a:b3:01:9a:3b:5a:cb:83:c1:9f:a1:7c:cd:f7:
0d:9a:78:82:bf:e4:1c:fa:ab:be:19:25:84:b2:e0:20:4d:fe:
56:38:8f:14:1d:99:4d:28:81:d9:83:ae:34:02:60:09:8e:c9:
29:be:0d:36:67:48:cf:15:fe:a0:b9:93:45:b9:d5:4e:a0:93:
68:9d:80:67:41:3e:81:56:1c:06:92:84:00:8b:d5:39:90:42:
97:00:1c:43:55:f8:32:fd:f2:95:5d:27:52:a7:59:dd:e6:a2:
e8:4a:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:11 2026 by rpki-client