Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219447.roa
File:                     AS219447.roa (raw, json)
Hash identifier:          RYgHX6/auzs2FGC3ermej9LBkf6wYE66xxIY9S6GSzI=
Subject key identifier:   F5:2B:3B:8D:6F:BF:E0:BD:CD:D1:4D:9D:7C:70:53:96:8A:65:17:FC
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       05CD03BCCB71824EA3E25B5A2184AA71CF3CEF83
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219447.roa
Signing time:             Thu 15 Oct 2026 10:16:06 +0000
ROA not before:           Thu 15 Oct 2026 10:11:06 +0000
ROA not after:            Thu 14 Oct 2027 10:16:06 +0000
asID:                     219447
IP address blocks:        79.180.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 18:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cd:03:bc:cb:71:82:4e:a3:e2:5b:5a:21:84:aa:71:cf:3c:ef:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 15 10:11:06 2026 GMT
            Not After : Oct 14 10:16:06 2027 GMT
        Subject: CN=F52B3B8D6FBFE0BDCDD14D9D7C7053968A6517FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e4:38:bf:da:b2:2f:7d:88:1b:66:ef:26:c6:
                    7f:85:69:d7:38:cf:cb:8d:ff:db:d6:0f:16:d4:79:
                    81:e4:1f:2b:ec:70:e6:34:47:10:d9:e4:6e:49:8c:
                    01:5c:05:d3:aa:4e:98:e7:d7:17:de:22:8b:c0:bf:
                    25:cf:49:8e:97:fd:66:df:2b:ec:5c:f3:96:77:21:
                    e9:5d:1b:36:8c:9e:52:2c:7d:ca:1a:81:0d:bc:a3:
                    be:7f:6c:f9:56:a4:21:b5:4b:fc:42:14:2e:2e:7c:
                    10:95:f2:6f:01:0e:fb:4f:c8:de:e9:f5:67:f0:65:
                    04:de:42:14:d0:de:e0:39:3b:6a:a2:6f:84:e4:2b:
                    70:ea:86:1b:cb:27:a1:c9:07:38:c6:b2:2a:86:2b:
                    e7:a4:0b:90:30:cf:79:f9:d3:6a:54:79:da:c1:9c:
                    41:7f:f3:93:86:df:32:89:f8:68:56:f7:44:9d:92:
                    9b:0f:17:f3:a9:98:a5:33:ed:88:46:ef:6b:78:ee:
                    09:86:71:aa:12:9f:ba:13:cb:4c:0a:d7:72:c4:b4:
                    9c:c6:c2:a4:48:03:44:86:5d:1d:33:e4:e7:78:4c:
                    28:be:4b:7e:1a:b8:cc:4f:32:4d:19:1a:fc:73:aa:
                    f8:36:bb:e0:aa:91:70:e7:b2:34:7f:a9:60:a7:3f:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:3B:8D:6F:BF:E0:BD:CD:D1:4D:9D:7C:70:53:96:8A:65:17:FC
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219447.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:09:8a:95:b6:91:49:3c:57:83:76:56:f5:43:3c:7d:1a:49:
         a0:35:24:cc:49:22:00:1a:b7:8c:c9:13:d4:4e:bb:93:42:91:
         74:69:f6:cf:d8:f4:8e:4b:f8:f7:57:b3:90:ab:16:a0:21:2b:
         08:c0:a8:16:7d:b2:52:f7:e3:f6:28:ef:a5:25:29:f3:b4:36:
         f7:08:dd:82:d1:1e:e5:94:60:8f:80:a8:cd:cf:42:30:c4:d2:
         e9:82:40:a5:eb:f8:b9:92:b3:4b:6c:2d:3c:cc:fc:45:da:d9:
         b6:56:2c:f8:68:57:94:17:9e:e0:f7:50:a2:c3:fb:a2:be:86:
         95:62:d4:43:d0:fd:0b:de:5b:46:25:ce:49:bb:c1:f8:1d:ee:
         4a:ef:fd:e9:cd:b4:b9:1f:43:03:7f:97:72:f2:b6:f1:17:b0:
         be:e4:fa:9f:ee:44:d2:8b:4a:37:38:6d:1c:58:25:40:d2:23:
         23:39:a1:f8:41:07:b0:3d:36:be:0e:06:be:eb:fc:4d:02:4e:
         7d:03:87:5c:c5:ae:66:bf:83:25:e4:29:f6:e8:8d:ad:18:7e:
         d7:e8:8a:47:f7:86:49:cd:c7:fa:07:25:19:35:40:11:fb:4c:
         34:8e:a7:09:a8:52:a4:73:51:d1:50:cb:3d:df:6e:e8:29:e5:
         5c:6a:5a:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:00:32 2026 by rpki-client