Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219036.roa
File: AS219036.roa (raw, json)
Hash identifier: ljOUNtUP+lCoFFlEsiWzZPjwXm5dAjd67XFzyIFTtTw=
Subject key identifier: 17:93:64:A3:2F:29:AD:C1:34:7E:72:82:07:78:AE:AE:F6:9D:16:A6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 652BF8C6631C1E97B8CCF226F2FFDC3D356DD03A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219036.roa
Signing time: Fri 09 Oct 2026 13:23:41 +0000
ROA not before: Fri 09 Oct 2026 13:18:41 +0000
ROA not after: Fri 08 Oct 2027 13:23:41 +0000
asID: 219036
IP address blocks: 94.194.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2b:f8:c6:63:1c:1e:97:b8:cc:f2:26:f2:ff:dc:3d:35:6d:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 9 13:18:41 2026 GMT
Not After : Oct 8 13:23:41 2027 GMT
Subject: CN=179364A32F29ADC1347E72820778AEAEF69D16A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:d2:bb:1b:09:52:62:59:ed:68:46:2c:49:
2c:d6:74:fd:87:87:dd:7e:c2:8e:e0:df:98:2b:f6:
a6:12:c2:ab:b8:5c:43:58:7e:5d:55:7d:3b:50:40:
68:15:58:c5:33:da:5b:59:f4:de:7b:00:7a:0f:65:
bd:8b:08:a8:87:15:c9:bc:d8:08:f9:38:e3:04:09:
ba:18:3b:7f:07:a8:c5:c2:eb:a8:09:0f:ab:3e:76:
0d:c6:3e:31:d6:a4:0b:d4:a2:ba:2e:c7:2b:fa:63:
bf:77:f1:c9:65:2e:a0:b0:40:ca:54:06:e6:0f:a2:
36:1f:80:e9:f3:90:97:c3:b7:e3:26:78:ac:87:2f:
4a:13:ca:e5:7f:f6:a7:cb:e0:43:20:e4:83:08:63:
3e:e1:b3:08:4c:14:41:8f:bb:7e:4e:b4:80:1e:fb:
84:8b:2f:10:40:20:ff:fa:7a:40:e9:93:e8:2e:9b:
8f:75:77:dd:9b:b3:72:d6:37:5f:b9:e6:4f:31:38:
f7:e5:1f:a4:bd:4e:6d:a7:3e:1e:39:c8:ea:f1:d9:
67:45:df:00:80:af:59:a3:99:ab:8a:e9:09:ed:a0:
c2:34:a4:b6:c9:01:97:1b:f2:ca:f0:a2:e1:80:67:
5f:03:50:f3:a3:e2:97:f3:4f:83:2e:90:a4:22:72:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:64:A3:2F:29:AD:C1:34:7E:72:82:07:78:AE:AE:F6:9D:16:A6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:e7:61:82:8b:2e:38:fe:31:43:11:e6:10:a7:9e:2e:d9:7e:
47:f2:11:f4:c4:45:24:fc:e5:fd:29:7b:60:95:46:03:28:02:
74:83:5b:73:cb:e3:6a:53:9a:e4:24:eb:8a:67:e6:81:fa:12:
f6:3e:c7:18:92:76:9c:54:c7:3d:18:2d:4b:fa:42:23:bc:ea:
8a:bf:96:05:a2:02:32:e9:63:f6:ad:0e:c4:07:1b:73:51:87:
9a:a1:35:c5:d1:72:dc:c3:e9:2c:db:ae:3d:c9:41:75:f4:e0:
f7:32:b0:53:6b:46:96:23:8d:ca:b6:ab:7b:e4:e4:95:bd:ac:
61:bc:98:c3:5b:c7:e1:cd:42:b2:b1:6a:84:3f:58:22:0e:fb:
c5:a5:6e:1f:e3:1f:12:6b:57:e4:14:ba:f1:4b:75:24:65:fa:
4d:00:34:fa:e6:8b:c3:90:01:21:c9:93:c8:64:e3:d5:2c:2c:
0a:03:c4:04:4b:58:91:01:90:7f:1b:23:4b:0a:2b:91:9f:fe:
46:40:25:93:6c:2f:48:ee:f5:91:49:c7:56:15:b7:4d:76:1f:
3e:b0:7e:d0:15:b2:76:4a:87:45:1b:88:f1:3e:12:78:b9:0c:
b6:db:cb:b4:0c:41:6c:fe:26:9a:88:0b:37:45:07:19:1d:e9:
f5:69:89:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZSv4xmMcHpe4zPIm8v/cPTVt0DowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMDkxMzE4NDFaFw0yNzEwMDgxMzIzNDFaMDMxMTAvBgNV
BAMTKDE3OTM2NEEzMkYyOUFEQzEzNDdFNzI4MjA3NzhBRUFFRjY5RDE2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xNK7GwlSYlntaEYsSSzWdP2H
h91+wo7g35gr9qYSwqu4XENYfl1VfTtQQGgVWMUz2ltZ9N57AHoPZb2LCKiHFcm8
2Aj5OOMECboYO38HqMXC66gJD6s+dg3GPjHWpAvUorouxyv6Y7938cllLqCwQMpU
BuYPojYfgOnzkJfDt+MmeKyHL0oTyuV/9qfL4EMg5IMIYz7hswhMFEGPu35OtIAe
+4SLLxBAIP/6ekDpk+gum491d92bs3LWN1+55k8xOPflH6S9Tm2nPh45yOrx2WdF
3wCAr1mjmauK6QntoMI0pLbJAZcb8srwouGAZ18DUPOj4pfzT4MukKQicoi5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUF5Nkoy8prcE0fnKCB3iurvadFqYwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE5MDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXsKo
MA0GCSqGSIb3DQEBCwUAA4IBAQCc52GCiy44/jFDEeYQp54u2X5H8hH0xEUk/OX9
KXtglUYDKAJ0g1tzy+NqU5rkJOuKZ+aB+hL2PscYknacVMc9GC1L+kIjvOqKv5YF
ogIy6WP2rQ7EBxtzUYeaoTXF0XLcw+ks2649yUF19OD3MrBTa0aWI43Ktqt75OSV
vaxhvJjDW8fhzUKysWqEP1giDvvFpW4f4x8Sa1fkFLrxS3UkZfpNADT65ovDkAEh
yZPIZOPVLCwKA8QES1iRAZB/GyNLCiuRn/5GQCWTbC9I7vWRScdWFbdNdh8+sH7Q
FbJ2SodFG4jxPhJ4uQy228u0DEFs/iaaiAs3RQcZHen1aYl3
-----END CERTIFICATE-----
Generated at Mon Oct 19 03:13:59 2026 by rpki-client