Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219306.roa
File: AS219306.roa (raw, json)
Hash identifier: q2Pjpnn3yaiYpPi/4Zb47eMIRzbYBODlAdFhUiCTouk=
Subject key identifier: 5B:74:7B:59:CC:A8:9F:B8:3C:CD:9B:3A:CC:1E:D4:76:56:7D:E5:AF
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 670291DA90B3F442EACC6AB24E374C1335E09EF3
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219306.roa
Signing time: Sat 14 Nov 2026 13:42:24 +0000
ROA not before: Sat 14 Nov 2026 13:37:24 +0000
ROA not after: Sat 13 Nov 2027 13:42:24 +0000
asID: 219306
IP address blocks: 177.29.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:02:91:da:90:b3:f4:42:ea:cc:6a:b2:4e:37:4c:13:35:e0:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 13:37:24 2026 GMT
Not After : Nov 13 13:42:24 2027 GMT
Subject: CN=5B747B59CCA89FB83CCD9B3ACC1ED476567DE5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:dc:be:e5:96:9d:cf:69:5c:33:81:bf:b3:
b5:42:9a:b2:8a:6d:79:86:41:f7:5c:33:8d:a3:02:
fc:a9:ea:81:15:94:86:67:1e:99:41:ba:0f:a4:af:
9b:10:70:48:a8:bf:7b:04:b7:47:7c:50:04:4e:5f:
e5:e2:a2:62:01:18:bd:63:14:00:8b:68:54:b0:14:
d0:ef:03:3f:89:0c:ca:4c:42:32:b6:48:84:e1:56:
3f:f6:9b:05:d7:49:6f:fc:00:84:a1:f7:f6:9e:ac:
c2:99:1b:d4:18:11:b6:08:e2:c0:74:3c:1d:df:16:
01:46:22:c7:64:b9:bc:f6:71:dc:eb:a8:2e:58:74:
ea:30:26:8b:21:0a:07:96:ab:52:38:24:ed:d0:72:
94:b0:aa:67:a6:62:f5:a7:88:31:4c:22:bd:17:22:
da:17:38:83:2b:30:26:0d:a3:2e:e2:47:91:88:86:
b2:15:3c:97:5b:52:4a:51:73:71:ac:b9:e2:e6:7c:
76:52:2f:f4:7a:dc:b0:70:06:c5:3d:a3:e7:4e:22:
72:c8:c9:03:fa:2b:51:2b:11:9c:1b:83:06:05:6b:
91:d3:66:0a:21:6a:9b:e4:b0:a5:a0:18:5b:24:7b:
10:75:4c:4a:e9:ce:c7:89:a1:41:88:d8:5e:94:13:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:7B:59:CC:A8:9F:B8:3C:CD:9B:3A:CC:1E:D4:76:56:7D:E5:AF
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.253.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ce:49:58:73:d4:70:6f:9c:3f:22:b6:d3:de:c5:4a:b4:9b:
b9:d5:31:0e:6f:51:31:c5:54:f7:5d:45:b7:8c:2c:39:f5:ea:
7f:15:81:56:3c:d4:3d:7f:26:c1:b4:6f:3a:06:63:0e:e1:e1:
67:76:90:e4:19:59:86:62:50:d6:4c:65:08:ed:2d:a3:68:7a:
2c:a4:10:15:12:27:08:61:60:0f:d0:8b:81:96:b6:97:8e:48:
02:08:f1:e4:3e:b7:8c:dd:ab:92:e1:1d:c5:4a:92:c2:0f:31:
ba:fc:4b:1b:d2:14:19:a6:fd:a6:fc:b0:84:e0:3b:bf:84:d0:
f2:0b:51:2b:f6:4e:5b:9e:40:9f:3f:8f:8f:0e:e5:6e:6a:16:
20:38:59:45:05:db:cb:6b:2d:43:8a:10:20:cf:c5:ea:8d:94:
3a:0c:d9:b5:ab:96:24:9c:62:2c:89:d2:4d:df:83:23:06:8f:
5f:b9:31:78:04:b6:b0:bb:51:af:9b:e3:5b:ae:9e:41:9b:0e:
79:d9:8f:b5:f8:d0:d8:b8:68:f5:b3:55:80:e8:8a:09:45:ef:
78:92:93:5a:5d:4a:57:10:26:dd:d8:ef:66:c6:27:c0:aa:9e:
e2:8f:e7:20:90:c5:58:29:32:e6:ad:9b:ee:7e:42:27:0b:41:
f9:c2:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:55 2026 by rpki-client