Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219428.roa
File: AS219428.roa (raw, json)
Hash identifier: xBrOZ+QKUmh4k9do6Kug74iICOHmW2EQ70oJtf/UG9Q=
Subject key identifier: 60:B3:BB:3C:26:EB:0A:54:E8:37:DF:BD:D6:8C:F1:4B:A7:C3:DE:48
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20EA5140BDD0566F17671988275C4914929D0211
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219428.roa
Signing time: Fri 19 Jun 2026 13:57:41 +0000
ROA not before: Fri 19 Jun 2026 13:52:41 +0000
ROA not after: Fri 18 Jun 2027 13:57:41 +0000
asID: 219428
IP address blocks: 167.148.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ea:51:40:bd:d0:56:6f:17:67:19:88:27:5c:49:14:92:9d:02:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 19 13:52:41 2026 GMT
Not After : Jun 18 13:57:41 2027 GMT
Subject: CN=60B3BB3C26EB0A54E837DFBDD68CF14BA7C3DE48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:7c:f1:57:19:46:65:a9:9b:4a:11:1f:97:
99:c3:1d:d2:cf:6b:96:6e:ad:84:8d:75:67:46:f5:
ad:27:4e:1f:c3:8e:0c:bc:21:6a:b5:03:33:70:ae:
10:e3:82:7f:df:57:32:a4:ae:5e:bb:2d:06:4c:51:
f6:f2:ac:b6:a8:af:bb:79:da:16:1d:67:5b:19:04:
b4:8d:b6:bb:7c:1d:ca:ea:af:a1:86:b4:85:35:fc:
d8:d3:88:6d:ff:73:25:97:1a:1a:29:03:d4:69:67:
06:bb:de:4c:fb:08:2a:09:4d:f7:08:0a:72:32:e4:
2d:cf:ad:99:62:d9:bd:80:ca:ba:0a:8f:59:98:a2:
2f:5e:53:4f:85:e2:dd:50:9e:72:53:4f:37:5f:10:
fb:85:7b:ff:ec:bb:a0:04:f4:ee:8a:d3:13:33:e2:
1b:b1:75:36:b5:1e:9f:3a:7f:d5:02:9b:a4:3e:fe:
c0:d8:31:ae:1f:7d:67:9a:b0:75:7f:63:8a:bb:62:
ad:13:a9:e4:c5:9d:b2:f5:bf:12:ac:7a:8b:81:29:
70:48:52:04:9b:3d:00:9e:97:a4:7a:64:5e:53:db:
ce:c0:50:17:c1:86:f9:ed:e1:a9:80:5d:d0:52:e2:
c9:55:42:c1:70:fe:38:9e:e6:eb:3e:6c:8b:9d:37:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B3:BB:3C:26:EB:0A:54:E8:37:DF:BD:D6:8C:F1:4B:A7:C3:DE:48
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:34:ba:0c:75:53:13:30:d3:1c:36:01:a3:d9:54:eb:8f:2d:
45:f3:0b:2f:18:c2:19:4c:ea:52:bf:4a:64:ae:b6:6c:e2:ba:
87:85:02:19:2e:5d:94:2c:68:46:7b:9d:ae:04:ad:62:bb:71:
26:21:69:bd:e4:dd:67:00:fc:63:a6:a8:05:22:98:b6:59:66:
33:36:7a:30:84:ed:e7:83:81:d7:52:08:f1:e6:7b:56:cc:3e:
52:cb:0b:bf:39:4a:f8:02:ed:59:48:ed:a3:5e:19:7e:d2:f9:
9c:e6:38:18:fd:0f:a7:52:86:e6:88:fc:82:74:58:71:b7:a8:
e3:0b:c2:bc:73:e5:c9:26:e5:76:f5:3a:24:3d:64:e1:93:75:
61:a1:5c:de:0f:5c:db:5c:44:15:8b:e3:39:b0:92:d0:ee:7c:
05:0e:3d:47:be:a9:d6:49:da:b0:11:8d:8b:43:df:14:0b:07:
71:05:c0:a1:6b:fe:b0:88:4a:a5:b4:65:3b:95:d2:b8:b8:18:
aa:e2:62:cf:56:ee:72:1b:b9:db:d6:45:38:fb:d3:87:97:23:
dc:80:42:e9:06:82:72:83:19:a0:31:26:d0:9c:ef:9c:72:bb:
01:81:94:9e:79:bf:2b:a6:4a:24:a6:7b:be:93:eb:3c:f0:49:
0c:43:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:29 2026 by rpki-client