Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
File: AS219053.roa (raw, json)
Hash identifier: nnTFDTEOJEzhAw/pJo+32tSQfRftRh+mS7yVOb/Oc+8=
Subject key identifier: 2D:FC:66:3E:0C:5F:B5:5E:F6:96:DE:A9:6E:D3:CB:30:B9:43:8B:3A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0B95B41D38CFB49513AB8D83F942DEB02EF3D730
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
Signing time: Fri 06 Nov 2026 17:25:47 +0000
ROA not before: Fri 06 Nov 2026 17:20:47 +0000
ROA not after: Fri 05 Nov 2027 17:25:47 +0000
asID: 219053
IP address blocks: 91.124.105.0/24 maxlen: 24
178.92.178.0/24 maxlen: 24
178.93.169.0/24 maxlen: 24
178.93.191.0/24 maxlen: 24
178.94.54.0/24 maxlen: 24
178.94.116.0/24 maxlen: 24
178.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:95:b4:1d:38:cf:b4:95:13:ab:8d:83:f9:42:de:b0:2e:f3:d7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 6 17:20:47 2026 GMT
Not After : Nov 5 17:25:47 2027 GMT
Subject: CN=2DFC663E0C5FB55EF696DEA96ED3CB30B9438B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:14:83:38:2a:52:78:4c:d5:05:bb:cb:73:
87:d7:70:f7:6b:68:21:ea:f7:b4:a0:0e:bd:9a:cf:
57:3b:f7:5c:02:7d:29:9f:46:c1:63:dc:57:f1:19:
0f:7c:fc:fa:e9:89:5d:ce:95:53:9e:10:2d:af:60:
96:9d:89:ed:9d:08:1a:e8:d0:56:f5:ec:ee:0e:70:
15:07:d5:04:43:06:c1:58:da:08:dd:d2:05:40:9f:
83:7f:42:8c:fc:3a:bf:7f:48:9a:6e:ed:6c:5c:7f:
72:62:65:6a:34:22:c3:fc:90:3f:43:73:59:5e:b4:
3a:65:86:a6:96:a6:27:2e:d1:f1:3a:a2:91:a2:3c:
42:1b:9d:6a:26:1f:7f:45:8b:b9:13:41:76:ae:84:
d4:0a:be:70:eb:fc:92:f6:f7:35:1d:a8:35:26:e2:
37:42:4a:c9:f1:b7:c8:8d:70:0f:c3:8b:e5:14:47:
69:e0:7a:b4:66:e2:7f:5b:5d:85:b6:72:28:70:cf:
ad:bd:77:3c:59:c9:9c:c2:d3:b0:26:5e:75:55:7b:
02:c5:ec:ea:df:65:97:6e:54:9e:8f:f7:5f:c3:d1:
63:9b:81:cf:2f:06:6c:b6:c9:72:8b:3b:c4:8a:23:
44:74:9d:38:ae:34:62:39:e4:f4:fe:4f:3a:d7:21:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:66:3E:0C:5F:B5:5E:F6:96:DE:A9:6E:D3:CB:30:B9:43:8B:3A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.105.0/24
178.92.178.0/24
178.93.169.0/24
178.93.191.0/24
178.94.54.0/24
178.94.116.0/24
178.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
99:79:31:2d:0d:a3:24:67:cb:94:41:88:04:ef:df:14:79:4a:
27:e0:b8:28:54:4a:59:51:05:1c:34:41:dc:17:3b:33:0a:d9:
3c:24:ad:8e:bf:f6:18:c2:cc:8c:6c:4d:3f:49:4d:74:94:f5:
56:bb:45:46:72:5f:d2:32:6c:c3:6c:c3:2c:0a:0a:c0:be:84:
5f:2d:e0:44:fa:53:10:8f:f2:94:16:2d:53:d1:d1:08:9b:a2:
53:e7:60:c1:60:f4:3b:63:9d:9e:2b:18:f1:b4:95:cc:b2:ea:
e3:a9:1f:5a:f0:ca:c4:07:ef:c6:b3:f6:2c:1a:23:20:0b:1a:
5a:1c:68:36:4d:40:33:70:b6:b4:c7:57:72:6b:6a:b6:04:0f:
c7:00:fe:af:92:a6:92:bf:2f:ce:4a:e0:b3:e1:53:a7:6e:44:
00:c9:94:c2:1e:53:c6:78:6b:6e:35:de:b4:16:c8:9e:03:ad:
93:c1:35:d4:39:7e:26:27:03:26:df:75:da:be:c6:8c:7b:82:
17:a8:5e:b9:22:0a:e8:1a:92:e4:36:45:81:a1:2b:d5:9e:96:
70:0e:0b:f2:9d:99:84:4b:79:e0:05:66:c9:9f:91:d8:30:60:
4f:f8:97:d5:88:3a:fb:e0:a0:0b:57:48:2d:53:1f:b2:61:ec:
33:c5:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:43:00 2026 by rpki-client