Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219225.roa
File: AS219225.roa (raw, json)
Hash identifier: 4rGeQu3mSJO9gOWVtvrGhgU3z8OfbvdXxoHezpp0GK4=
Subject key identifier: 1A:CF:02:A7:F7:53:D6:20:BA:D9:34:8A:F4:54:9A:BE:A1:C9:58:8E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 2D24AD2CAD91F87C7C5F9FC9931464FDE7862D85
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219225.roa
Signing time: Thu 12 Nov 2026 06:20:33 +0000
ROA not before: Thu 12 Nov 2026 06:15:33 +0000
ROA not after: Thu 11 Nov 2027 06:20:33 +0000
asID: 219225
IP address blocks: 177.122.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:24:ad:2c:ad:91:f8:7c:7c:5f:9f:c9:93:14:64:fd:e7:86:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 12 06:15:33 2026 GMT
Not After : Nov 11 06:20:33 2027 GMT
Subject: CN=1ACF02A7F753D620BAD9348AF4549ABEA1C9588E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:86:c8:0d:ff:81:65:e5:86:02:80:50:e7:
12:60:3e:6f:f5:3c:f0:1f:81:af:7d:5d:37:51:62:
f8:c3:88:56:cf:b0:12:56:26:98:49:33:95:34:d2:
38:b1:45:a4:6b:41:8a:68:7e:b1:39:e7:a8:2c:d9:
ad:10:8d:5d:fd:95:f2:7b:ef:bc:e0:1e:a0:be:44:
38:eb:40:d7:89:6c:de:4e:3b:97:d3:7a:3e:5b:27:
6c:08:5d:29:3d:64:79:a1:bb:68:40:05:3d:bb:20:
ba:b0:e1:ff:cf:88:74:86:9a:35:9d:ef:33:a3:65:
f0:bb:ac:8c:03:6e:04:9f:6d:05:e8:fb:dc:8d:6e:
bf:94:2d:39:ca:cc:fb:1c:dc:1d:8f:c7:6b:09:5e:
d2:5d:5d:a4:74:39:96:ef:e5:ed:8b:02:26:b9:0f:
61:10:a0:bb:c7:36:1a:ad:8a:9b:c3:d7:7f:ca:9e:
61:91:eb:b1:54:d4:bb:66:21:ed:6e:2d:06:0b:e3:
ec:4c:92:4f:db:4a:47:90:3b:8f:8f:bf:67:3f:10:
8b:cd:51:f1:f4:48:a2:15:85:e6:7a:81:9e:b5:af:
30:c6:88:b7:40:da:bd:f8:fe:05:a4:62:97:87:03:
79:04:14:72:00:49:8c:02:b0:61:cf:2c:aa:b4:ea:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:02:A7:F7:53:D6:20:BA:D9:34:8A:F4:54:9A:BE:A1:C9:58:8E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219225.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5d:77:dd:5c:14:87:29:07:b7:4c:a0:25:15:18:ea:6d:94:
e3:62:f9:d7:3e:b8:8a:d3:e6:e5:9f:c3:ff:6b:1e:03:ad:24:
a4:91:38:fe:6b:0e:6d:1d:70:86:a5:2a:ff:17:ec:ae:b0:03:
37:0a:45:b3:f0:5a:ec:7c:c4:77:61:cb:f6:3a:05:60:11:9c:
26:26:4c:f4:fd:3f:ad:94:0c:77:f7:40:dc:98:6e:ff:c2:b2:
ec:27:b5:f0:10:f1:e0:b1:a6:98:a1:ac:87:66:fb:7b:45:9c:
cc:65:d9:12:f9:64:e6:46:54:bd:3b:f2:05:c1:6c:7b:e3:b5:
94:35:b2:f0:12:4b:f8:ee:1f:9c:04:8b:41:ec:9e:f8:19:23:
ef:23:fc:e5:bf:c8:f5:56:e1:f9:ca:01:f1:db:22:a8:7f:75:
2a:85:1b:33:8e:35:66:39:91:8c:4b:d7:1c:6a:9a:b7:d3:c7:
f9:7e:25:ec:b5:ba:35:7f:74:5b:43:f4:b4:c7:31:2a:93:35:
06:33:dc:54:70:6b:75:d9:ef:3a:91:2b:63:7c:13:1d:e6:53:
69:50:19:42:f2:a1:51:f4:2d:1e:58:30:09:0d:41:90:2d:e2:
c7:a2:4d:6e:a7:81:15:e6:6a:c2:19:c4:67:40:fd:35:53:59:
f1:67:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:40 2026 by rpki-client