Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: 5nMBNTNHRd9GVZeMr6dgAGUD0MMKZuwQmv+MVlrVac4=
Subject key identifier: 93:CB:92:FF:91:41:61:2F:7D:B0:0F:3D:C5:F1:1B:00:FF:56:2A:F1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1D3F6E54B821437F45632C7900E20D5DCE17BAA0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219047.roa
Signing time: Tue 29 Sep 2026 07:35:47 +0000
ROA not before: Tue 29 Sep 2026 07:30:47 +0000
ROA not after: Tue 28 Sep 2027 07:35:47 +0000
asID: 219047
IP address blocks: 188.220.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3f:6e:54:b8:21:43:7f:45:63:2c:79:00:e2:0d:5d:ce:17:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 29 07:30:47 2026 GMT
Not After : Sep 28 07:35:47 2027 GMT
Subject: CN=93CB92FF9141612F7DB00F3DC5F11B00FF562AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ce:d9:7e:7e:8a:29:06:af:fb:ec:70:5d:b6:
4c:f4:6f:24:ab:db:9a:61:63:d7:a3:06:35:1d:fc:
02:f6:5d:ed:09:23:ba:0b:f8:07:b8:e4:c8:1d:bc:
71:aa:f2:93:35:06:62:97:8b:39:4c:05:0a:95:62:
71:23:32:aa:e0:d7:58:4f:4d:20:df:cb:21:c2:35:
e6:3e:c5:ce:0d:86:17:2c:78:b3:02:32:e5:1d:c5:
a8:53:2f:d0:ba:74:cb:34:c9:bc:76:38:3f:51:7e:
b5:5d:61:3a:d2:01:a5:18:b9:bf:15:72:cd:6c:cb:
80:68:bd:b1:eb:2f:c7:db:21:d5:57:e5:27:7c:b7:
1c:35:70:a3:08:7a:c3:a3:ac:24:b1:14:cd:c6:80:
5b:c5:bc:01:ee:7d:8d:7d:d4:2a:d0:61:b6:f7:d1:
be:d3:29:f9:c8:4d:23:90:cb:c8:a4:c1:b6:19:77:
6c:b0:21:74:21:0c:be:f9:f8:4c:ed:a1:41:5b:a0:
e7:bf:6c:00:d4:de:2e:ff:d5:00:50:f8:3d:5a:3a:
90:a8:ca:70:bf:4c:af:ba:24:2d:d4:43:5b:cf:0b:
2e:6c:df:aa:e7:3c:2f:07:c1:ca:c5:7e:e7:41:3f:
73:1a:2c:b2:94:41:96:b7:69:b4:ed:42:c4:7b:3a:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:92:FF:91:41:61:2F:7D:B0:0F:3D:C5:F1:1B:00:FF:56:2A:F1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.85.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a9:b9:26:4c:d7:e5:e5:61:b2:7f:f0:ae:8f:d1:f4:fb:83:
ec:5e:41:47:fd:cf:11:3d:d1:53:94:9b:08:a6:93:42:ca:8c:
26:d6:72:df:02:41:04:45:5a:a7:b7:c0:c0:46:23:42:c9:4c:
d3:6f:2f:2c:b3:b7:6f:42:74:0a:7b:bd:f7:91:58:71:72:f1:
7b:b9:12:c1:da:67:45:4b:1a:f0:76:09:37:b0:1f:6b:a7:43:
8b:4a:ef:56:f1:9e:38:8c:2f:dc:27:c8:ff:fc:34:c6:a0:86:
ff:43:7d:c6:b2:90:3d:24:3a:cd:97:e4:e6:23:a8:4c:c5:a4:
89:71:b5:9c:f0:63:fe:55:19:f4:35:4a:e4:b8:31:bf:5b:47:
93:99:87:08:dd:aa:d2:31:06:2b:25:7b:b2:a0:af:21:15:0d:
8a:7d:e6:dd:bc:0c:90:42:fa:e0:c2:2b:48:76:7d:56:92:8b:
ea:34:51:25:05:ec:2f:e3:b7:b0:df:b3:20:32:d5:9e:ca:10:
e9:1c:8f:45:c9:0e:b1:f2:da:dd:4e:d9:1d:62:4c:a7:bb:46:
59:a4:2e:be:97:5d:00:54:2a:c9:f8:84:0e:1a:9a:44:30:88:
79:ff:82:09:bc:bd:8b:71:0b:c0:58:7d:2e:63:6b:6b:aa:4c:
b1:ca:ec:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHT9uVLghQ39FYyx5AOINXc4XuqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjkwNzMwNDdaFw0yNzA5MjgwNzM1NDdaMDMxMTAvBgNV
BAMTKDkzQ0I5MkZGOTE0MTYxMkY3REIwMEYzREM1RjExQjAwRkY1NjJBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyztl+foopBq/77HBdtkz0bySr
25phY9ejBjUd/AL2Xe0JI7oL+Ae45MgdvHGq8pM1BmKXizlMBQqVYnEjMqrg11hP
TSDfyyHCNeY+xc4NhhcseLMCMuUdxahTL9C6dMs0ybx2OD9RfrVdYTrSAaUYub8V
cs1sy4BovbHrL8fbIdVX5Sd8txw1cKMIesOjrCSxFM3GgFvFvAHufY191CrQYbb3
0b7TKfnITSOQy8ikwbYZd2ywIXQhDL75+EztoUFboOe/bADU3i7/1QBQ+D1aOpCo
ynC/TK+6JC3UQ1vPCy5s36rnPC8HwcrFfudBP3MaLLKUQZa3abTtQsR7Oup/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUk8uS/5FBYS99sA89xfEbAP9WKvEwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE5MDQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNxV
MA0GCSqGSIb3DQEBCwUAA4IBAQBHqbkmTNfl5WGyf/Cuj9H0+4PsXkFH/c8RPdFT
lJsIppNCyowm1nLfAkEERVqnt8DARiNCyUzTby8ss7dvQnQKe733kVhxcvF7uRLB
2mdFSxrwdgk3sB9rp0OLSu9W8Z44jC/cJ8j//DTGoIb/Q33GspA9JDrNl+TmI6hM
xaSJcbWc8GP+VRn0NUrkuDG/W0eTmYcI3arSMQYrJXuyoK8hFQ2KfebdvAyQQvrg
witIdn1WkovqNFElBewv47ew37MgMtWeyhDpHI9FyQ6x8trdTtkdYkynu0ZZpC6+
l10AVCrJ+IQOGppEMIh5/4IJvL2LcQvAWH0uY2trqkyxyuzG
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:39:30 2026 by rpki-client