Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: mhlY+vTYEwolmK++KW2UKqnRCYA71du3EmJ5+v4EUs4=
Subject key identifier: 69:C8:54:A0:19:01:E2:9F:E8:E0:6F:E7:A3:D0:C6:36:EA:E2:B9:15
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0745B794E431F85E26C21538E19E080BA6AD318F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219075.roa
Signing time: Tue 03 Nov 2026 06:06:34 +0000
ROA not before: Tue 03 Nov 2026 06:01:34 +0000
ROA not after: Tue 02 Nov 2027 06:06:34 +0000
asID: 219075
IP address blocks: 91.124.107.0/24 maxlen: 24
178.93.208.0/24 maxlen: 24
178.95.191.0/24 maxlen: 24
178.95.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:45:b7:94:e4:31:f8:5e:26:c2:15:38:e1:9e:08:0b:a6:ad:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 3 06:01:34 2026 GMT
Not After : Nov 2 06:06:34 2027 GMT
Subject: CN=69C854A01901E29FE8E06FE7A3D0C636EAE2B915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:a4:18:e7:fd:23:a3:b2:de:b5:f6:7f:c2:
23:5f:d2:cf:5b:32:a2:70:f9:b2:27:02:73:a2:c0:
27:e0:0d:e0:ff:ce:a8:04:bf:28:50:bb:a7:63:e7:
d7:d3:8d:f0:cd:1f:96:5c:fe:67:51:92:17:b2:36:
10:d1:be:a3:b9:6b:24:01:5b:10:1b:9f:88:f4:c5:
c1:e9:ef:10:a7:d2:29:9f:96:d5:df:78:94:dd:7f:
70:7d:69:5f:b6:ce:f5:00:9c:25:f9:c2:86:e7:c5:
c3:35:81:f3:2d:35:87:c5:5c:b2:78:f6:79:35:b9:
23:d2:48:ef:57:3a:c0:ab:61:0a:78:d9:27:14:ad:
80:66:e3:67:5f:9a:29:68:c9:86:10:70:72:20:57:
b9:81:57:0f:df:56:be:bd:d0:42:21:af:f1:fc:8c:
9e:1b:ce:07:20:5a:b9:50:e2:dc:b3:dc:e8:64:af:
b8:45:5b:e8:a9:b4:3d:ab:f4:b6:40:32:c6:fe:55:
59:0f:32:b4:67:18:5d:cf:03:93:c2:57:81:d7:34:
b4:6f:8d:46:44:0f:ce:80:c5:f6:a8:06:84:c8:9f:
d0:0a:33:00:9a:16:60:41:2a:8d:b0:58:e5:56:a5:
a3:c6:83:17:0d:1d:c5:ce:81:d5:18:60:1b:e3:66:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:54:A0:19:01:E2:9F:E8:E0:6F:E7:A3:D0:C6:36:EA:E2:B9:15
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.107.0/24
178.93.208.0/24
178.95.191.0/24
178.95.216.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b4:e4:4f:f8:dd:64:e3:fb:d9:a8:2e:6a:c7:ee:9c:cc:8c:
80:c4:af:11:23:cb:17:07:9c:eb:9e:b6:9c:a1:8c:25:57:2f:
6e:85:b0:6d:ec:bd:c9:85:1c:33:f9:5c:35:f1:b9:65:4b:19:
3e:a4:e4:2a:75:e4:0d:5e:41:3d:9b:63:1f:be:db:36:63:19:
e6:a2:c9:b6:99:41:9d:66:f3:b5:6a:72:e4:7c:6a:15:88:08:
23:6a:27:db:b8:1a:a4:ca:2d:34:bc:f9:c7:a8:c9:85:84:a7:
8d:a0:a5:f5:dc:ad:ea:e1:97:eb:02:b9:34:d7:11:3f:bf:bb:
fd:72:89:38:83:8e:f3:d5:52:fe:d9:39:83:25:d1:2b:41:e6:
f5:56:ed:3a:e6:97:90:36:ec:87:e2:c1:4e:ec:d5:5b:bc:74:
b4:98:39:69:1e:06:4c:a4:9a:83:94:5b:f9:78:ab:2f:fe:de:
ce:6f:c0:7b:e6:55:c2:a7:56:0c:5a:12:f5:d0:08:ad:1c:1c:
58:a4:45:7b:dd:59:0a:a1:29:4b:f4:61:6b:62:90:59:03:4c:
3c:c7:8a:b2:7d:1f:55:78:b6:eb:66:36:15:62:ae:4d:65:ad:
fc:fd:d1:a9:66:14:83:80:01:4d:d7:79:fc:af:74:68:cd:5f:
86:53:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:45:55 2026 by rpki-client