Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219068.roa
File: AS219068.roa (raw, json)
Hash identifier: Y5y5QmYdISUWimdUv+7S78INy4NiKEe9H6YQQgSw9jA=
Subject key identifier: CB:75:72:0A:EE:8A:80:A5:D9:8C:D7:84:13:F5:C4:22:91:25:AB:7A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6D5E62A0389D74964C2FA9945CBC6A027F71DF99
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219068.roa
Signing time: Sun 20 Sep 2026 04:07:53 +0000
ROA not before: Sun 20 Sep 2026 04:02:53 +0000
ROA not after: Sun 19 Sep 2027 04:07:53 +0000
asID: 219068
IP address blocks: 143.20.222.0/24 maxlen: 24
143.20.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5e:62:a0:38:9d:74:96:4c:2f:a9:94:5c:bc:6a:02:7f:71:df:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 20 04:02:53 2026 GMT
Not After : Sep 19 04:07:53 2027 GMT
Subject: CN=CB75720AEE8A80A5D98CD78413F5C4229125AB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:5f:b4:f5:37:0d:0e:2e:24:2e:3f:94:2f:
a0:0e:33:20:7a:ff:97:bf:12:6b:87:04:36:38:4d:
18:11:1f:45:0a:ef:50:b2:37:05:90:48:10:98:9f:
8c:49:23:86:ef:4d:3a:be:be:2d:d4:0b:a1:ef:54:
5b:3d:82:fe:00:82:6a:de:fa:fe:2d:88:59:23:9e:
21:01:92:36:09:e0:a5:2a:eb:77:3e:37:a1:06:53:
2f:83:ba:bb:1a:96:7f:60:ec:57:f7:11:bd:7e:8c:
71:e5:ba:37:14:13:3c:1b:b4:66:81:47:04:0e:87:
6b:52:c4:61:b5:1a:07:24:0e:29:78:84:de:bf:a1:
88:34:9a:2a:63:c7:d9:0e:b8:67:c8:1c:b0:ed:8a:
e4:e1:33:be:23:26:fd:e2:e4:96:79:4a:7a:81:fa:
a9:86:31:72:1c:ba:0e:f4:02:8a:f6:3e:17:05:3c:
9e:79:0d:53:64:e1:b8:dc:5b:b3:94:aa:00:75:4d:
0c:e1:4d:c9:8b:b5:ae:23:07:7f:07:fb:c2:52:99:
af:c6:e3:26:c5:49:f9:85:df:0b:1c:db:d4:bc:a1:
30:98:fc:72:21:7c:ec:09:c8:f3:0d:e6:89:26:79:
9c:5c:30:89:32:06:6c:a5:d5:e9:8c:d3:cd:f9:4e:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:72:0A:EE:8A:80:A5:D9:8C:D7:84:13:F5:C4:22:91:25:AB:7A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.222.0/24
143.20.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:97:ee:13:19:f4:90:6d:db:78:ce:c0:ac:26:b8:4c:ba:e1:
48:51:e1:93:d2:89:ca:9a:ec:63:4c:f4:3a:4b:39:e2:9c:5e:
13:7e:5f:46:13:75:4c:aa:d4:2d:6d:a1:33:53:83:70:35:91:
d9:68:37:58:c3:73:e7:b6:5f:6b:03:5b:37:6c:3d:0a:b5:5e:
c6:8a:a7:0f:a3:70:8f:d8:42:08:b3:50:b6:e3:99:2d:af:a8:
f2:87:7e:cd:15:d6:a6:4b:bb:ec:52:a7:08:d5:23:69:c8:a6:
25:29:22:55:89:3f:4d:ec:63:27:96:2e:41:7b:84:3c:4c:35:
0f:7e:48:8e:b7:37:2e:4c:75:0d:b3:e4:4f:ab:54:25:30:b1:
c1:ba:f9:ec:7b:ce:09:85:e7:9f:12:26:08:db:0c:69:2e:67:
3c:c0:a8:50:bb:33:f1:6c:2d:2f:cc:f7:3b:b5:d3:c9:46:1e:
ce:2c:2c:55:45:c8:40:89:96:bc:6b:ed:e4:47:32:ea:cd:e9:
b6:13:7a:24:0e:5d:c1:65:85:65:58:27:e7:07:2b:6f:09:60:
2e:a3:01:29:b0:6d:02:b9:08:81:19:ea:8d:c0:96:b8:4e:3a:
5b:7f:83:db:6a:0d:0d:b6:4a:e2:86:de:8a:53:1a:24:8d:e1:
15:4a:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:26:53 2026 by rpki-client