Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219216.roa
File: AS219216.roa (raw, json)
Hash identifier: Q2jPGX8LTx8+LTHRAIXCA6/jskBWkc6IdJRSxykBXXE=
Subject key identifier: 70:0D:A6:7D:71:AE:18:76:D9:C3:80:9D:D6:40:D4:6F:37:A1:DF:75
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 29274D83872E22827EBB1468BBA6E5CABD510977
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219216.roa
Signing time: Sat 14 Nov 2026 08:02:24 +0000
ROA not before: Sat 14 Nov 2026 07:57:24 +0000
ROA not after: Sat 13 Nov 2027 08:02:24 +0000
asID: 219216
IP address blocks: 177.122.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:27:4d:83:87:2e:22:82:7e:bb:14:68:bb:a6:e5:ca:bd:51:09:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 07:57:24 2026 GMT
Not After : Nov 13 08:02:24 2027 GMT
Subject: CN=700DA67D71AE1876D9C3809DD640D46F37A1DF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:59:9c:6d:b8:bc:35:b5:6b:0a:2c:be:38:
db:14:f8:69:fe:28:eb:fa:07:15:93:ff:bd:3c:50:
05:a2:6d:49:18:1d:0b:67:4a:81:1b:fd:37:9e:08:
9b:89:d5:a4:4c:e0:43:7c:52:d6:71:1e:db:32:3c:
f5:55:07:0c:92:46:3b:ac:f5:55:1e:fb:f6:b6:f1:
cc:89:58:bb:8b:64:ff:32:4c:0b:1b:56:55:a2:e4:
94:b6:ca:df:2a:25:bf:c6:1d:33:59:dd:fe:a6:07:
68:c9:fe:72:2c:d6:48:eb:17:c4:49:ec:df:67:03:
0d:19:8c:d4:39:39:42:17:fd:39:88:c9:e1:8d:53:
21:e0:ad:b0:82:74:ab:ee:03:6d:e9:eb:35:02:58:
8e:e6:81:81:07:b7:34:23:9a:7d:b6:df:89:98:3e:
f8:04:cd:09:74:f2:92:2d:a8:80:4c:16:75:d5:4f:
be:4d:db:1c:a6:25:e0:a5:3c:5e:e0:48:99:7d:4c:
02:ee:e4:1f:20:44:05:0e:1a:06:14:8a:93:f7:41:
05:dd:10:b2:f3:f5:0a:54:b7:e8:92:bc:0a:33:10:
5b:f5:54:c2:bf:f4:3a:a3:2c:da:17:db:0c:55:69:
ac:3e:b6:6e:d1:ff:52:dd:4e:9d:59:57:8f:f6:28:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:A6:7D:71:AE:18:76:D9:C3:80:9D:D6:40:D4:6F:37:A1:DF:75
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.229.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c4:2f:b0:6d:34:f2:20:8d:3a:64:b8:d2:98:8a:5c:cc:0b:
51:4b:ac:87:64:51:80:e5:68:d6:cd:0a:37:2a:c8:50:29:80:
bf:7b:e9:8e:92:79:56:d8:ea:94:71:91:79:73:c9:01:75:a2:
d5:7e:cb:36:52:9e:7f:89:96:80:1b:6d:89:e3:14:13:bc:08:
8f:1d:5b:6a:12:ae:a2:ce:42:c5:0d:a4:8b:a5:2c:59:bf:6b:
0f:35:63:c2:4b:b9:ef:c4:99:f0:b0:5c:34:c7:64:83:90:41:
eb:46:3a:3c:e5:43:63:c6:bd:bb:ac:72:16:c7:c4:f9:71:15:
f4:79:ba:83:e9:91:3b:22:03:16:15:47:48:f6:0c:87:6f:3c:
b2:ab:73:13:28:01:ce:cd:35:30:a0:d5:c3:b8:1b:0a:ad:7e:
77:54:e8:4e:28:9b:ae:ec:1e:8d:0b:c6:06:02:00:fe:4d:47:
bf:1d:3e:a5:7a:44:d4:51:be:87:dd:36:e7:23:5e:d8:36:b8:
04:e8:4a:02:a6:13:21:da:8b:e6:dd:49:aa:8d:77:58:04:ca:
9d:53:8e:a0:28:38:b6:cf:5e:e6:36:46:8f:0b:c7:d8:dc:76:
2d:fb:11:10:47:1f:2d:17:98:61:12:d5:c9:cc:06:08:d7:d3:
af:30:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:40 2026 by rpki-client