Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: 19/WAx7AvfYQHdjcFKEtRZfZs+kHlo3DWYUliRpmlDM=
Subject key identifier: 98:73:E6:4C:9C:D3:D1:10:AD:17:E1:DF:11:14:F2:1A:31:AF:6E:C0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 28264B8526693167C5D11A9F7F6106311ED9D5A8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
Signing time: Fri 06 Nov 2026 17:25:47 +0000
ROA not before: Fri 06 Nov 2026 17:20:47 +0000
ROA not after: Fri 05 Nov 2027 17:25:47 +0000
asID: 219047
IP address blocks: 91.124.105.0/24 maxlen: 24
178.92.178.0/24 maxlen: 24
178.93.169.0/24 maxlen: 24
178.93.191.0/24 maxlen: 24
178.94.54.0/24 maxlen: 24
178.94.116.0/24 maxlen: 24
178.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:26:4b:85:26:69:31:67:c5:d1:1a:9f:7f:61:06:31:1e:d9:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 6 17:20:47 2026 GMT
Not After : Nov 5 17:25:47 2027 GMT
Subject: CN=9873E64C9CD3D110AD17E1DF1114F21A31AF6EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:ad:e5:28:ff:64:93:a5:7f:c7:45:40:d7:
b3:51:77:1a:f4:81:49:9e:e3:6c:81:02:9d:cd:59:
db:46:d0:fc:8b:f5:e2:05:d5:53:b8:c9:71:59:22:
82:32:98:12:71:af:f7:6f:ea:d2:64:09:f6:e0:3a:
fd:3d:45:c7:69:a0:f4:3b:a2:de:bb:f4:60:b9:2f:
11:c6:55:20:c9:c3:14:35:12:19:21:af:95:27:b1:
9b:b0:9a:2a:96:c9:a1:70:ca:ae:19:e2:9a:4c:e5:
55:5b:89:24:e4:d1:a4:26:60:76:0a:3e:64:24:cd:
14:ca:8d:1e:cb:5b:f7:f0:29:10:57:f3:22:5d:13:
94:54:ea:a7:fc:00:89:2b:17:e1:dc:24:39:10:e4:
ff:7a:6d:8d:8d:26:52:61:2f:56:53:4d:30:8b:a6:
c5:db:b7:c5:ad:ab:15:f1:d3:1b:6d:04:7c:21:b3:
b7:a6:b4:ea:85:f2:f7:b7:e7:fd:38:09:ab:bd:e9:
4e:31:ee:cc:76:c1:b0:b2:cf:b6:fd:f6:d8:49:c3:
3a:64:1d:6a:b5:84:60:2e:53:23:a8:d9:9b:b0:2b:
a0:ca:74:c2:a4:12:85:08:6c:d4:d7:56:91:65:b2:
49:b4:ad:aa:19:af:2f:56:f2:05:4a:bf:eb:76:29:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:E6:4C:9C:D3:D1:10:AD:17:E1:DF:11:14:F2:1A:31:AF:6E:C0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.105.0/24
178.92.178.0/24
178.93.169.0/24
178.93.191.0/24
178.94.54.0/24
178.94.116.0/24
178.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d8:f7:0b:62:a7:1a:73:9e:b3:c1:83:e1:69:25:fa:ea:8c:
1d:0f:75:f8:04:74:8a:00:d1:da:04:ec:dd:92:9c:16:39:30:
c4:17:a4:d7:80:00:f2:03:af:b3:29:c7:fe:b0:0e:98:67:d6:
03:2c:14:14:a4:f4:b9:ef:e6:5a:db:f2:35:b7:a3:af:d9:52:
9a:65:20:72:a1:00:be:99:13:71:4e:cb:4c:2f:71:07:71:f2:
e9:f0:2d:24:55:b8:cb:a2:28:58:8f:a1:cb:13:a4:3d:6b:69:
b2:d8:62:a6:30:bb:91:b5:35:b9:72:20:10:2d:ef:56:38:cb:
01:c5:5a:7d:89:b5:ca:23:7f:79:b3:1e:a6:8c:d2:8b:5f:ad:
e1:d6:92:bf:92:b6:94:12:32:03:d2:bc:a6:0b:5b:b1:7b:ce:
5c:33:50:6a:02:62:17:e9:5c:38:5b:d6:1a:81:59:a9:f4:0a:
b2:35:b4:5e:49:4e:c0:7d:0d:fa:82:92:ef:ad:79:d5:8c:15:
c2:e6:b1:5d:7f:f8:30:c2:ca:0e:a0:5f:0c:17:1f:b0:61:b4:
e8:f8:ad:c3:f4:30:84:96:07:51:cb:d8:2e:f0:e7:93:88:98:
be:69:ba:bf:17:2c:a2:f0:db:14:9f:6f:0b:c6:31:eb:c0:34:
57:af:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:50:26 2026 by rpki-client