Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219262.roa
File: AS219262.roa (raw, json)
Hash identifier: +XGKoYo1eS5iXjOfKHWdfJpZcrZEbmheOPTrPIkm7tE=
Subject key identifier: AF:B6:28:9F:43:7C:DA:AB:26:C3:34:20:20:4F:84:4D:D7:2D:51:D2
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 153D3F45DCC302B72FF151C96F77FB8296553916
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219262.roa
Signing time: Sat 14 Nov 2026 13:45:27 +0000
ROA not before: Sat 14 Nov 2026 13:40:27 +0000
ROA not after: Sat 13 Nov 2027 13:45:27 +0000
asID: 219262
IP address blocks: 177.166.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3d:3f:45:dc:c3:02:b7:2f:f1:51:c9:6f:77:fb:82:96:55:39:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 13:40:27 2026 GMT
Not After : Nov 13 13:45:27 2027 GMT
Subject: CN=AFB6289F437CDAAB26C33420204F844DD72D51D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:1c:46:4a:4b:53:da:ef:a6:55:ca:52:1e:
30:11:b6:23:61:d0:c1:68:9d:cd:ef:02:e9:1a:5d:
e1:f5:c0:67:dd:55:56:f8:68:2c:79:72:a1:c9:86:
05:df:74:ae:f2:33:32:e7:8c:87:22:05:18:dd:1c:
d8:f4:4c:b4:e6:68:e4:b0:56:07:43:99:53:14:81:
0b:3b:bf:28:e1:60:7d:77:af:11:a2:21:07:25:6c:
9c:8e:07:60:69:02:fe:58:a6:c6:f4:ed:f0:e7:82:
36:2d:e5:b6:76:fd:a0:b7:06:7e:a4:70:55:81:70:
80:a4:38:76:94:ff:93:08:62:54:7c:6b:b6:6b:43:
d3:f4:ba:e5:5d:1c:40:da:d3:37:93:18:b2:ca:06:
d7:bc:66:2e:d3:1d:0c:14:5e:2a:ea:ff:0a:71:d1:
5c:ee:16:0e:87:d5:15:37:ae:30:6c:86:27:d4:ba:
ce:e5:94:f8:d5:8c:3f:58:ae:01:9f:6b:3e:16:dc:
11:d0:2d:04:98:9e:30:be:1d:7c:74:b4:50:fd:84:
93:d3:e8:f0:22:40:63:1a:35:68:52:45:aa:d2:4b:
a6:dc:f1:6e:d3:7b:c5:42:56:48:3f:b9:f1:d4:e1:
c6:17:9d:df:41:8b:ed:a0:ba:a6:6e:13:64:76:68:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:28:9F:43:7C:DA:AB:26:C3:34:20:20:4F:84:4D:D7:2D:51:D2
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.166.74.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8c:5d:f1:ca:98:59:2b:04:c3:5e:24:62:69:85:1f:5a:6f:
55:24:ce:74:f3:c3:62:60:c0:58:51:05:5c:45:4d:b0:39:43:
11:e8:bb:f8:1b:67:0f:5f:0b:f5:ce:d9:bd:bb:0e:01:2e:76:
79:c3:08:38:c9:fd:80:a4:d8:c0:3b:17:f4:a5:14:4d:0b:f7:
fd:40:7a:53:51:94:06:d4:08:2b:43:4c:9e:7d:5b:35:1e:d2:
dd:e3:d3:2b:39:2c:d3:89:d9:9c:03:01:3b:0e:35:64:0f:f0:
f1:65:f6:2d:61:cb:dc:41:d5:c2:23:85:0e:23:5e:85:9a:13:
30:c8:58:d9:62:f0:8f:54:dd:42:8e:f5:30:f2:0e:a1:19:ed:
fd:6c:11:54:f2:88:70:a4:d9:1a:be:26:01:8f:de:a9:e8:c0:
00:a6:c6:b4:f1:58:cd:f5:a9:eb:fc:2b:0e:5c:7a:c2:0a:81:
81:6d:78:f8:41:a1:8f:fa:58:13:d3:85:ea:32:5e:b9:e6:66:
fe:23:2d:03:13:82:5a:b4:f2:5d:b1:32:72:f6:d8:20:80:02:
40:96:e4:cf:f4:d2:ea:06:4a:f5:ae:9a:f6:a3:a5:be:c6:c7:
69:2a:ca:f7:15:dc:5f:5f:91:05:da:6b:4b:e8:69:a1:be:57:
71:f1:05:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFT0/RdzDArcv8VHJb3f7gpZVORYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjExMTQxMzQwMjdaFw0yNzExMTMxMzQ1MjdaMDMxMTAvBgNV
BAMTKEFGQjYyODlGNDM3Q0RBQUIyNkMzMzQyMDIwNEY4NDRERDcyRDUxRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNBxGSktT2u+mVcpSHjARtiNh
0MFonc3vAukaXeH1wGfdVVb4aCx5cqHJhgXfdK7yMzLnjIciBRjdHNj0TLTmaOSw
VgdDmVMUgQs7vyjhYH13rxGiIQclbJyOB2BpAv5Ypsb07fDngjYt5bZ2/aC3Bn6k
cFWBcICkOHaU/5MIYlR8a7ZrQ9P0uuVdHEDa0zeTGLLKBte8Zi7THQwUXirq/wpx
0VzuFg6H1RU3rjBshifUus7llPjVjD9YrgGfaz4W3BHQLQSYnjC+HXx0tFD9hJPT
6PAiQGMaNWhSRarSS6bc8W7Te8VCVkg/ufHU4cYXnd9Bi+2guqZuE2R2aMbtAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUr7Yon0N82qsmwzQgIE+ETdctUdIwHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMjE5MjYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsaZK
MA0GCSqGSIb3DQEBCwUAA4IBAQAJjF3xyphZKwTDXiRiaYUfWm9VJM5088NiYMBY
UQVcRU2wOUMR6Lv4G2cPXwv1ztm9uw4BLnZ5wwg4yf2ApNjAOxf0pRRNC/f9QHpT
UZQG1AgrQ0yefVs1HtLd49MrOSzTidmcAwE7DjVkD/DxZfYtYcvcQdXCI4UOI16F
mhMwyFjZYvCPVN1CjvUw8g6hGe39bBFU8ohwpNkaviYBj96p6MAApsa08VjN9anr
/CsOXHrCCoGBbXj4QaGP+lgT04XqMl655mb+Iy0DE4JatPJdsTJy9tgggAJAluTP
9NLqBkr1rpr2o6W+xsdpKsr3FdxfX5EF2mtL6Gmhvldx8QWg
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:49 2026 by rpki-client