Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219048.roa
File: AS219048.roa (raw, json)
Hash identifier: /p5nZASVttKDEvYc4mmEDdrDnI5d9Lf15pTfZ9J2ar8=
Subject key identifier: C7:35:85:19:6B:23:39:46:B2:2E:0A:FE:7B:07:89:C9:D9:40:F4:EF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F12B2BF63B553DA343D00DD56D74675B55B3C71
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219048.roa
Signing time: Mon 19 Oct 2026 18:01:19 +0000
ROA not before: Mon 19 Oct 2026 17:56:19 +0000
ROA not after: Mon 18 Oct 2027 18:01:19 +0000
asID: 219048
IP address blocks: 167.148.93.0/24 maxlen: 24
167.148.95.0/24 maxlen: 24
168.222.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:12:b2:bf:63:b5:53:da:34:3d:00:dd:56:d7:46:75:b5:5b:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 19 17:56:19 2026 GMT
Not After : Oct 18 18:01:19 2027 GMT
Subject: CN=C73585196B233946B22E0AFE7B0789C9D940F4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:d5:3c:82:87:00:30:86:d2:22:51:18:b2:
12:f0:b0:8b:e7:e2:00:7e:aa:16:f9:dc:1f:11:49:
e8:be:16:0a:65:2f:c8:e0:c4:4a:87:e0:dd:3f:77:
0e:a8:81:c5:ef:e7:a9:02:cf:8d:b9:74:08:b1:02:
82:91:4a:81:39:4d:9d:12:1f:1e:dc:3c:df:df:a0:
fe:4d:45:71:bd:fe:76:66:77:aa:ee:d0:56:e9:0d:
41:5d:e3:74:4c:11:4c:a9:1d:e0:d1:9f:76:cd:88:
47:1a:0e:d3:0f:19:a4:3e:b4:83:ee:08:07:6a:e2:
9f:5d:41:b4:0c:19:3b:2b:64:d3:e2:a6:fc:20:b0:
96:d9:61:32:a9:8e:02:5f:fb:17:c6:45:0a:70:01:
e8:af:4a:48:31:de:17:58:27:d6:6e:22:ad:85:94:
be:87:8d:3b:cf:e3:54:37:69:7f:83:e7:aa:34:cc:
4a:14:4a:b3:07:b5:cc:65:a6:f6:55:27:ed:6f:cd:
1c:6b:c2:d3:8e:46:ca:28:75:90:b9:d2:3a:ae:51:
31:ba:a8:37:32:a3:55:77:d6:a3:d0:ae:2d:fd:6e:
75:7e:ee:e1:1f:00:46:ac:3f:46:e0:d1:82:94:08:
1a:6b:72:b6:80:4e:d0:5f:6d:69:e0:58:6c:39:71:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:85:19:6B:23:39:46:B2:2E:0A:FE:7B:07:89:C9:D9:40:F4:EF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.93.0/24
167.148.95.0/24
168.222.50.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c7:44:89:bf:65:59:4a:b7:1e:e9:e2:e5:f6:ac:a6:37:b4:
52:f3:ef:9a:f9:aa:1c:e8:58:f5:82:71:ed:06:7d:63:2c:49:
8d:7a:aa:ab:eb:50:f7:fe:b9:bb:30:d6:97:98:1f:10:2b:26:
62:bb:d8:75:65:ac:92:10:82:99:3e:a6:88:6a:07:38:81:5a:
71:ae:55:72:c8:7e:32:a5:d8:23:b2:7a:ab:a5:16:ba:31:b7:
7b:53:be:c8:86:b9:74:2d:96:f3:24:96:50:14:6b:38:c8:e0:
28:7f:42:92:75:28:0b:5d:dd:2b:c8:c5:ee:31:5a:a7:3e:a8:
29:2e:cf:c9:3a:ad:e4:9e:a5:a3:ab:7b:87:af:f0:de:8f:80:
2b:ad:cd:42:bf:ab:94:f8:e8:88:78:d1:67:b6:dc:53:79:82:
5d:2e:76:77:dd:c5:96:7b:c7:de:35:a8:1f:c4:1c:39:96:7f:
1d:26:b7:ff:11:56:be:01:bc:7a:39:27:45:b1:bf:94:ca:5c:
b6:39:76:2d:c3:a7:9b:4d:86:b4:2c:e0:20:b7:74:7f:45:33:
85:9c:8f:4f:98:32:01:85:0a:e2:7f:98:82:45:0e:9f:fe:41:
21:77:e2:68:06:ec:28:58:54:25:1d:a5:9c:a3:a0:1f:d3:1b:
e4:98:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:39:53 2026 by rpki-client