Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219238.roa
File: AS219238.roa (raw, json)
Hash identifier: H+7ZagIVHvB92CwTn+dJEV2Xcj7HHXXpBeOyTvkHVmE=
Subject key identifier: AE:C8:00:44:DD:D8:C7:9D:64:04:22:37:72:E0:9E:19:7B:34:6D:D5
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 354CE0930C1C8B270F9831278B8AF039BA92A470
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219238.roa
Signing time: Sat 14 Nov 2026 13:45:42 +0000
ROA not before: Sat 14 Nov 2026 13:40:42 +0000
ROA not after: Sat 13 Nov 2027 13:45:42 +0000
asID: 219238
IP address blocks: 177.166.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4c:e0:93:0c:1c:8b:27:0f:98:31:27:8b:8a:f0:39:ba:92:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 13:40:42 2026 GMT
Not After : Nov 13 13:45:42 2027 GMT
Subject: CN=AEC80044DDD8C79D6404223772E09E197B346DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:e3:f1:06:b1:bc:8b:b9:f4:e9:48:7b:7a:
2b:28:7a:51:a6:11:eb:bb:9a:be:32:6b:29:64:71:
c0:9b:d5:8f:88:d5:96:ef:b6:c0:ac:19:78:ee:96:
59:e9:c7:20:8a:9a:28:e0:41:1a:be:50:fe:9a:d5:
ce:76:51:a4:ce:45:d3:a2:66:83:3e:50:f9:a4:c2:
31:54:d2:fc:25:7a:95:4a:f9:cb:b0:d1:dc:9c:1e:
62:ed:b8:1b:b3:51:8e:08:a9:34:6c:aa:6b:73:d0:
cb:70:ed:1c:cf:75:75:51:c2:6e:34:02:b6:6b:39:
82:8a:ae:e3:3d:6f:e4:d5:59:7d:a0:81:ed:41:cb:
d2:71:38:61:2d:63:80:0f:04:7c:69:db:bd:4a:3f:
3b:2a:e2:ad:19:68:9d:00:7a:b1:08:4e:01:46:09:
9a:8c:50:6e:6c:ca:1d:e1:2a:02:54:ed:28:36:da:
76:3d:4f:6f:c0:58:e2:19:5a:c6:6a:fd:f9:57:f4:
cd:fd:fc:d1:ef:69:1b:49:ab:fb:a0:e1:47:f7:90:
d8:94:92:20:c9:56:94:2d:fd:4c:64:26:e2:90:ce:
4b:23:e1:e8:89:59:ba:80:3b:2b:51:d8:18:df:a7:
6e:60:fa:57:e9:6b:24:2d:93:48:3a:a2:02:75:b6:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:00:44:DD:D8:C7:9D:64:04:22:37:72:E0:9E:19:7B:34:6D:D5
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.166.78.0/24
Signature Algorithm: sha256WithRSAEncryption
04:16:02:d8:55:70:56:0a:31:d0:c8:39:ee:5c:03:05:92:26:
e1:c0:e2:73:6c:9c:fd:90:b2:f9:0f:c5:fe:8b:c4:11:de:34:
d3:09:a0:b5:d4:a8:28:b8:4b:b0:5e:31:d4:c7:24:03:1f:d0:
18:14:78:94:25:7c:91:e1:9a:a5:94:f9:e7:81:b5:bd:12:57:
b4:b7:02:54:4c:87:46:ad:08:f0:97:7b:f6:73:4c:7d:a0:e8:
90:7e:c4:d4:88:70:6b:cb:f9:7e:a8:b4:a7:28:22:5c:49:c3:
93:0e:05:ab:cf:cf:6e:d9:a8:98:58:31:47:ea:ee:d0:70:68:
66:ad:e1:2c:a1:d3:e6:c3:30:72:61:d8:2e:e7:de:74:e8:36:
de:05:92:21:5b:e0:98:09:8b:86:49:f0:81:61:46:1b:54:b7:
29:53:75:9a:ff:da:58:9a:42:61:c8:79:b9:fc:07:a7:77:af:
4f:d6:d8:63:af:f0:ab:7b:66:c3:1d:01:c4:cc:d8:dd:83:7d:
98:ad:87:3d:34:c4:07:77:ad:46:72:a7:87:78:08:7f:a7:2f:
21:b8:08:48:56:f9:4d:64:57:00:9c:6f:66:7e:89:1b:20:cb:
ce:21:8c:47:2b:ee:c8:a6:4a:14:ae:f7:0e:6b:46:ae:d0:bc:
b7:4e:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:57 2026 by rpki-client