Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219305.roa
File: AS219305.roa (raw, json)
Hash identifier: grPtzO+5MgLfLDxJ6U4jx2eXdQv+dBuQzEMRsRB2m0g=
Subject key identifier: CB:01:19:51:04:64:25:83:C2:0E:AF:D0:0F:33:B7:65:68:D4:0D:2E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 793A54E4F3DE12DFC171CAC6D5CBF051D63202F9
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219305.roa
Signing time: Sat 14 Nov 2026 13:36:52 +0000
ROA not before: Sat 14 Nov 2026 13:31:52 +0000
ROA not after: Sat 13 Nov 2027 13:36:52 +0000
asID: 219305
IP address blocks: 177.29.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3a:54:e4:f3:de:12:df:c1:71:ca:c6:d5:cb:f0:51:d6:32:02:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 13:31:52 2026 GMT
Not After : Nov 13 13:36:52 2027 GMT
Subject: CN=CB01195104642583C20EAFD00F33B76568D40D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:a9:e2:d3:35:fc:5a:6a:7d:0e:4d:e1:54:
64:cc:fe:17:dc:d4:54:66:5c:65:97:19:2a:70:71:
09:5d:86:ae:2b:1e:6f:0d:5d:3a:21:95:48:1d:92:
31:8f:aa:36:3e:73:c1:b0:21:8c:db:2d:e7:56:c5:
e6:a4:81:0b:80:00:95:05:3f:ee:96:a8:fb:a8:ab:
2c:aa:85:5c:1d:01:64:c8:c1:1b:a4:9a:8f:3b:8c:
d6:1e:56:19:76:e3:a6:d1:01:9f:2b:96:31:d9:f2:
0f:cf:ad:98:d8:31:fb:b2:bc:3d:37:eb:c0:b0:1f:
ad:85:4e:b5:7b:85:2f:5a:69:ad:6d:03:9c:83:76:
03:23:b8:0a:1c:34:d9:27:0d:e7:07:f1:b3:66:7e:
6b:4b:11:6a:5d:d5:d0:55:90:a3:6e:1d:a2:6b:8f:
3a:d7:99:6f:4f:fb:34:85:e8:7e:70:17:b1:ec:8b:
89:fb:b3:3d:f1:40:a6:c2:71:d6:cb:c4:95:21:51:
41:df:36:86:4c:5c:dc:5d:26:0f:93:16:d2:cb:d8:
9a:6f:7b:a6:36:83:dc:bf:aa:94:e7:7b:a0:ec:85:
6a:d5:d1:c2:be:ce:c1:a1:45:a9:4c:12:6f:ff:bf:
e5:a9:58:d9:a6:94:e0:18:1f:70:fe:6b:c0:f9:a1:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:19:51:04:64:25:83:C2:0E:AF:D0:0F:33:B7:65:68:D4:0D:2E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.252.0/24
Signature Algorithm: sha256WithRSAEncryption
85:18:bf:81:fa:f1:98:70:48:a2:9e:9c:4f:8b:a4:6a:02:66:
db:b8:eb:00:2a:57:34:fd:bf:70:0b:86:ec:ea:ed:75:94:0e:
35:b8:6a:fa:ad:14:50:db:aa:05:3f:19:9b:1a:17:69:e8:37:
fd:b4:8e:ae:0c:1c:02:97:42:7c:89:a6:58:97:85:c7:b7:6d:
0d:a4:1f:45:c8:f8:02:89:56:c9:e5:a9:ae:b7:70:05:90:0d:
e3:09:28:c5:8c:0a:21:01:f9:10:12:e0:e1:83:42:17:e4:57:
cd:c3:20:f8:48:c1:5a:87:69:01:8a:49:b9:fb:77:35:cc:ce:
c5:67:bb:e4:41:14:f1:3b:5a:05:92:9b:18:f5:be:98:1a:aa:
77:3a:bd:1e:8d:84:0a:85:64:b8:6a:71:aa:aa:e5:08:fb:09:
14:41:82:a5:9f:eb:c0:f7:0b:ec:1d:b3:c7:c9:3c:a3:6c:a1:
3e:33:7f:7d:d1:15:1e:02:b3:2d:9f:4b:77:bf:76:38:29:7a:
4e:85:96:11:4c:43:6d:bd:2b:f1:19:f8:b5:38:fb:6b:6b:38:
9d:5d:46:3f:ed:61:ce:c1:2d:6f:07:50:94:88:1c:0b:92:e6:
78:53:76:12:04:30:8b:9c:31:96:79:00:5d:e9:91:37:9c:3f:
ec:d2:a3:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeTpU5PPeEt/BccrG1cvwUdYyAvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjExMTQxMzMxNTJaFw0yNzExMTMxMzM2NTJaMDMxMTAvBgNV
BAMTKENCMDExOTUxMDQ2NDI1ODNDMjBFQUZEMDBGMzNCNzY1NjhENDBEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmrKni0zX8Wmp9Dk3hVGTM/hfc
1FRmXGWXGSpwcQldhq4rHm8NXTohlUgdkjGPqjY+c8GwIYzbLedWxeakgQuAAJUF
P+6WqPuoqyyqhVwdAWTIwRukmo87jNYeVhl246bRAZ8rljHZ8g/PrZjYMfuyvD03
68CwH62FTrV7hS9aaa1tA5yDdgMjuAocNNknDecH8bNmfmtLEWpd1dBVkKNuHaJr
jzrXmW9P+zSF6H5wF7Hsi4n7sz3xQKbCcdbLxJUhUUHfNoZMXNxdJg+TFtLL2Jpv
e6Y2g9y/qpTne6DshWrV0cK+zsGhRalMEm//v+WpWNmmlOAYH3D+a8D5oeiLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUywEZUQRkJYPCDq/QDzO3ZWjUDS4wHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMjE5MzA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsR38
MA0GCSqGSIb3DQEBCwUAA4IBAQCFGL+B+vGYcEiinpxPi6RqAmbbuOsAKlc0/b9w
C4bs6u11lA41uGr6rRRQ26oFPxmbGhdp6Df9tI6uDBwCl0J8iaZYl4XHt20NpB9F
yPgCiVbJ5amut3AFkA3jCSjFjAohAfkQEuDhg0IX5FfNwyD4SMFah2kBikm5+3c1
zM7FZ7vkQRTxO1oFkpsY9b6YGqp3Or0ejYQKhWS4anGqquUI+wkUQYKln+vA9wvs
HbPHyTyjbKE+M3990RUeArMtn0t3v3Y4KXpOhZYRTENtvSvxGfi1OPtrazidXUY/
7WHOwS1vB1CUiBwLkuZ4U3YSBDCLnDGWeQBd6ZE3nD/s0qP8
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:00 2026 by rpki-client