Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219053.roa
File: AS219053.roa (raw, json)
Hash identifier: d5twCRruauoXQqfEubgV9xPdKsEGH3U0y/wsn4oEMtk=
Subject key identifier: 18:F2:01:DA:B8:A7:C9:C0:3B:C0:DE:0A:CD:34:67:83:91:19:CA:AA
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 66EA6ADC9511C6233CB4FCAB659D228BD8625AD6
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219053.roa
Signing time: Thu 15 Oct 2026 10:16:52 +0000
ROA not before: Thu 15 Oct 2026 10:11:52 +0000
ROA not after: Thu 14 Oct 2027 10:16:52 +0000
asID: 219053
IP address blocks: 5.199.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ea:6a:dc:95:11:c6:23:3c:b4:fc:ab:65:9d:22:8b:d8:62:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 15 10:11:52 2026 GMT
Not After : Oct 14 10:16:52 2027 GMT
Subject: CN=18F201DAB8A7C9C03BC0DE0ACD3467839119CAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:56:5c:e7:21:da:1a:81:97:4c:ec:e9:0d:
73:e0:76:64:17:fe:b0:8e:6f:f4:2e:38:14:13:04:
65:1f:69:4d:3a:c9:78:55:09:41:a4:04:89:f4:c0:
00:fd:31:78:ec:da:cf:e2:ba:1f:c1:5a:49:ac:4a:
73:2d:8e:1f:92:6a:c4:ce:27:13:81:01:63:39:91:
1a:ff:48:b1:e6:0f:92:79:82:50:16:a7:86:0d:6d:
e4:d5:f5:65:4e:88:46:6e:4e:81:88:ee:c8:98:b1:
9a:e1:56:f4:4b:19:43:f1:c3:fc:dd:2a:86:d6:da:
01:6c:37:50:f4:08:82:e0:ff:0a:55:a0:6e:89:ca:
1b:0a:7b:ea:f6:5d:fc:1c:ea:d0:e5:37:8d:35:62:
0e:1c:0b:35:c8:18:98:5b:28:49:db:af:a9:83:7b:
83:a4:3d:7f:5d:28:69:1e:31:e8:b1:c2:99:90:91:
88:1f:5c:60:1c:9c:1c:ec:00:68:76:de:6f:d2:7c:
75:bb:81:d6:ef:5c:af:21:6d:10:3b:d4:da:e2:51:
7b:9d:c0:55:d6:85:f5:e0:53:b3:00:97:34:18:7d:
dd:08:aa:3b:1c:1f:ac:61:fc:5d:d6:5e:f6:c4:45:
a7:9c:53:a1:2a:5b:9b:4d:72:6f:16:a8:de:87:a2:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F2:01:DA:B8:A7:C9:C0:3B:C0:DE:0A:CD:34:67:83:91:19:CA:AA
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1c:d1:b9:cb:72:0b:a7:62:65:1b:c0:6d:0c:89:a4:9a:f1:
f3:d4:0d:17:ae:89:af:9b:a9:3b:23:78:a3:98:83:9a:0d:e1:
c7:64:e6:4d:15:2e:0f:b4:d1:e4:2d:cc:27:d1:1c:36:80:de:
5d:c0:0e:60:f6:ae:73:67:a3:1e:e4:5f:33:63:f9:4b:93:44:
9d:60:09:9b:8b:d7:4f:b3:97:b0:0e:47:a0:38:53:8f:cc:bb:
0f:65:e4:eb:d1:d4:b5:0a:2a:63:f4:2c:09:07:3c:07:28:02:
21:c8:b4:3e:c5:b3:92:9a:fa:46:5f:7a:7c:1c:2f:ff:b4:31:
b8:6c:08:03:cb:77:28:48:34:1f:76:86:c2:d4:02:ea:ed:c2:
d8:34:34:c7:20:1e:9c:eb:69:ff:81:40:4b:fb:49:ea:67:28:
d7:ba:f8:16:82:f7:7a:5d:5b:f5:9f:57:e6:58:16:b3:9c:48:
52:c7:a7:9f:21:5b:bf:da:11:a7:65:3e:b4:af:c6:68:e9:5c:
14:a0:56:74:2f:d4:e7:c7:f5:6f:30:65:95:28:60:30:5c:5f:
c4:06:3f:1d:7b:b5:c5:ae:47:59:f7:4e:52:64:1c:1a:06:1d:
5e:a9:81:1f:7b:c4:8f:bd:ef:04:a1:ab:22:e7:9e:e5:e5:05:
a7:61:bd:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZupq3JURxiM8tPyrZZ0ii9hiWtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjEwMTUxMDExNTJaFw0yNzEwMTQxMDE2NTJaMDMxMTAvBgNV
BAMTKDE4RjIwMURBQjhBN0M5QzAzQkMwREUwQUNEMzQ2NzgzOTExOUNBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDFZc5yHaGoGXTOzpDXPgdmQX
/rCOb/QuOBQTBGUfaU06yXhVCUGkBIn0wAD9MXjs2s/iuh/BWkmsSnMtjh+SasTO
JxOBAWM5kRr/SLHmD5J5glAWp4YNbeTV9WVOiEZuToGI7siYsZrhVvRLGUPxw/zd
KobW2gFsN1D0CILg/wpVoG6JyhsKe+r2Xfwc6tDlN401Yg4cCzXIGJhbKEnbr6mD
e4OkPX9dKGkeMeixwpmQkYgfXGAcnBzsAGh23m/SfHW7gdbvXK8hbRA71NriUXud
wFXWhfXgU7MAlzQYfd0IqjscH6xh/F3WXvbERaecU6EqW5tNcm8WqN6HoiPzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUGPIB2rinycA7wN4KzTRng5EZyqowHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTMjE5MDUzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABccl
MA0GCSqGSIb3DQEBCwUAA4IBAQCOHNG5y3ILp2JlG8BtDImkmvHz1A0Xromvm6k7
I3ijmIOaDeHHZOZNFS4PtNHkLcwn0Rw2gN5dwA5g9q5zZ6Me5F8zY/lLk0SdYAmb
i9dPs5ewDkegOFOPzLsPZeTr0dS1Cipj9CwJBzwHKAIhyLQ+xbOSmvpGX3p8HC//
tDG4bAgDy3coSDQfdobC1ALq7cLYNDTHIB6c62n/gUBL+0nqZyjXuvgWgvd6XVv1
n1fmWBaznEhSx6efIVu/2hGnZT60r8Zo6VwUoFZ0L9Tnx/VvMGWVKGAwXF/EBj8d
e7XFrkdZ905SZBwaBh1eqYEfe8SPve8Eoasi557l5QWnYb0D
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:25 2026 by rpki-client