Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: YYpLYUNep7AJjlFQZPDGhRB+M3e6Zd3JhLG+M8+iPeQ=
Subject key identifier: DA:7F:4C:F0:E2:F4:4C:93:7D:DB:E8:CE:D8:30:73:54:23:3C:E8:7F
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0710AC2FB8870C3521EBED4D4957C592EEFF992A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219447.roa
Signing time: Thu 15 Oct 2026 10:16:07 +0000
ROA not before: Thu 15 Oct 2026 10:11:07 +0000
ROA not after: Thu 14 Oct 2027 10:16:07 +0000
asID: 219447
IP address blocks: 5.199.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:10:ac:2f:b8:87:0c:35:21:eb:ed:4d:49:57:c5:92:ee:ff:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 15 10:11:07 2026 GMT
Not After : Oct 14 10:16:07 2027 GMT
Subject: CN=DA7F4CF0E2F44C937DDBE8CED8307354233CE87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:da:41:07:2e:59:65:73:75:57:77:96:3d:
eb:9d:66:b8:e3:71:b0:32:f5:52:89:bc:28:5c:3a:
89:02:76:35:84:40:4d:60:5d:19:a2:73:64:41:91:
4f:9e:44:1d:50:af:ad:57:e6:32:5d:c6:10:8a:23:
91:66:09:c1:15:27:6d:3f:f8:7e:2c:b8:95:c7:4b:
20:95:40:72:c7:8b:88:0f:1b:b4:f1:a9:e4:de:27:
de:fa:c8:f6:44:e4:e6:43:72:00:93:2d:41:2d:57:
27:1e:ca:09:2b:7a:43:33:13:91:55:24:39:0b:da:
b4:00:12:fa:a2:23:e8:68:40:4a:ff:fd:84:17:bc:
31:fa:1d:1c:c1:ad:4c:97:98:0b:d3:05:bd:7a:a6:
ec:e2:c0:2e:8d:7b:60:51:96:f3:cf:8e:d6:26:3a:
a8:d2:46:d5:2c:df:90:b5:55:89:07:17:94:67:51:
41:6a:7b:2d:3e:29:ea:b7:73:e4:66:d2:ae:f6:b2:
53:93:49:d5:44:16:fd:e2:53:ee:85:64:58:a8:31:
fc:1a:98:2d:0e:1b:38:46:a3:f6:28:a3:4c:50:b6:
bc:d4:2e:96:fa:c6:10:b4:48:a3:d8:65:f3:a6:14:
76:d2:41:2c:14:07:e7:8d:e8:f3:e8:38:a3:a8:7d:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:4C:F0:E2:F4:4C:93:7D:DB:E8:CE:D8:30:73:54:23:3C:E8:7F
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6a:a8:c3:74:9c:74:75:a7:d5:5d:19:4c:2e:15:cf:a1:a9:
dc:95:23:47:c1:43:c2:8b:3f:0a:57:86:2e:9b:be:09:d7:fa:
21:e4:58:ed:a6:b0:65:a7:14:1b:b5:45:47:cc:1d:f7:47:dd:
c0:ab:6a:46:64:aa:fa:b3:52:6c:0a:a5:02:2c:0b:3c:6b:b9:
12:c5:42:2a:f0:5a:02:d3:a5:de:0a:6f:e3:be:b6:8f:09:83:
39:23:c5:ef:8f:dc:36:9c:e1:6c:c4:6f:c1:9d:64:fb:41:ae:
18:47:ca:63:61:b2:35:18:73:39:17:f9:6c:d3:fb:ec:0e:86:
7a:08:10:01:b7:96:02:d2:73:45:80:49:d4:12:3d:4b:75:3b:
70:8c:8f:48:63:e7:a1:3b:66:25:b8:63:0c:e0:4c:9b:52:54:
af:e5:96:0e:05:32:b1:07:36:74:f6:83:5c:c0:be:34:26:93:
eb:f5:a6:ae:14:c0:5b:46:f4:22:66:62:99:a5:d4:f2:1a:48:
d3:da:82:ad:40:b3:f8:49:aa:2d:23:7d:59:8c:ea:97:1b:35:
27:ff:38:c5:0f:92:69:f1:ba:88:82:ac:27:a0:61:6a:20:77:
e0:02:00:5a:c7:8f:ae:36:5e:30:68:4c:28:f9:bc:2a:0a:00:
53:fe:8f:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUBxCsL7iHDDUh6+1NSVfFku7/mSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjEwMTUxMDExMDdaFw0yNzEwMTQxMDE2MDdaMDMxMTAvBgNV
BAMTKERBN0Y0Q0YwRTJGNDRDOTM3RERCRThDRUQ4MzA3MzU0MjMzQ0U4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+dpBBy5ZZXN1V3eWPeudZrjj
cbAy9VKJvChcOokCdjWEQE1gXRmic2RBkU+eRB1Qr61X5jJdxhCKI5FmCcEVJ20/
+H4suJXHSyCVQHLHi4gPG7TxqeTeJ976yPZE5OZDcgCTLUEtVyceygkrekMzE5FV
JDkL2rQAEvqiI+hoQEr//YQXvDH6HRzBrUyXmAvTBb16puziwC6Ne2BRlvPPjtYm
OqjSRtUs35C1VYkHF5RnUUFqey0+Keq3c+Rm0q72slOTSdVEFv3iU+6FZFioMfwa
mC0OGzhGo/Yoo0xQtrzULpb6xhC0SKPYZfOmFHbSQSwUB+eN6PPoOKOofWBzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2n9M8OL0TJN92+jO2DBzVCM86H8wHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTMjE5NDQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABccl
MA0GCSqGSIb3DQEBCwUAA4IBAQAfaqjDdJx0dafVXRlMLhXPoanclSNHwUPCiz8K
V4Yum74J1/oh5FjtprBlpxQbtUVHzB33R93Aq2pGZKr6s1JsCqUCLAs8a7kSxUIq
8FoC06XeCm/jvraPCYM5I8Xvj9w2nOFsxG/BnWT7Qa4YR8pjYbI1GHM5F/ls0/vs
DoZ6CBABt5YC0nNFgEnUEj1LdTtwjI9IY+ehO2YluGMM4EybUlSv5ZYOBTKxBzZ0
9oNcwL40JpPr9aauFMBbRvQiZmKZpdTyGkjT2oKtQLP4SaotI31ZjOqXGzUn/zjF
D5Jp8bqIgqwnoGFqIHfgAgBax4+uNl4waEwo+bwqCgBT/o8S
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:26 2026 by rpki-client