Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: xqq6zutcbgPBrvgff02voPKQ3Cu+9O5XAgm6BfTuG5Y=
Subject key identifier: B2:D8:51:FF:BF:38:B3:70:81:8A:04:4A:8D:D1:1F:24:CE:1A:43:37
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5B49F5E07B65E2095EBBE3FF97AC6999A8385C06
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219447.roa
Signing time: Sun 04 Oct 2026 00:00:19 +0000
ROA not before: Sat 03 Oct 2026 23:55:19 +0000
ROA not after: Sun 03 Oct 2027 00:00:19 +0000
asID: 219447
IP address blocks: 188.220.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:49:f5:e0:7b:65:e2:09:5e:bb:e3:ff:97:ac:69:99:a8:38:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 3 23:55:19 2026 GMT
Not After : Oct 3 00:00:19 2027 GMT
Subject: CN=B2D851FFBF38B370818A044A8DD11F24CE1A4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:22:3a:d1:d7:76:ca:db:79:7d:b6:18:9f:
ed:d5:1a:1c:cb:c5:59:67:e8:f6:df:62:16:90:24:
db:39:c8:34:c3:72:e8:ee:b0:dd:0f:40:81:90:d9:
86:24:ad:c2:e3:38:f4:9e:4a:78:e0:ee:07:00:3e:
e7:65:18:2a:ab:1d:e1:96:c9:40:5e:77:9f:94:87:
ca:c5:37:f1:fb:32:a6:5e:cf:86:20:e6:f2:69:e6:
49:d8:5b:be:92:ac:04:2d:8e:9f:71:0a:86:7d:bf:
f4:d2:4e:db:70:c7:b7:80:30:ab:c9:c9:a0:9d:9c:
a6:a4:82:0a:85:4a:a2:1c:17:f4:e8:d6:5c:53:0d:
30:b3:b5:b0:c5:d2:7a:ad:1b:e1:a3:12:40:07:a7:
e1:24:c3:85:f6:b4:2a:39:8d:75:c8:c0:11:0f:cd:
c0:da:fc:5f:ea:cf:70:1c:75:7f:cd:6a:3d:37:9d:
1d:7a:62:f4:9b:5a:8f:9b:dc:3a:6d:88:db:c8:61:
10:24:3b:fe:b8:9c:22:91:e2:47:6f:d7:fc:14:62:
f7:27:3a:0b:45:51:06:e8:1a:ee:5d:c8:3b:d8:2e:
79:98:e4:dc:8d:24:83:be:ff:d3:ed:e5:2d:e6:c7:
7f:24:1f:36:7d:40:9d:77:bd:c3:da:31:f6:20:70:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:51:FF:BF:38:B3:70:81:8A:04:4A:8D:D1:1F:24:CE:1A:43:37
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cb:2e:c1:61:20:f5:a3:39:c1:c8:72:d5:a9:29:f6:f6:e6:
9d:c1:5b:c3:dc:91:33:de:cf:f4:a3:a8:49:b8:6c:f5:81:b2:
93:6c:47:1f:54:20:ce:e0:d8:fc:3b:44:45:75:64:51:e8:f5:
53:e3:26:d6:90:7a:ed:71:fb:d8:4b:a5:9a:61:52:5e:45:5c:
3a:08:f1:40:35:51:bd:ca:00:5c:c5:eb:62:d6:6c:9f:91:7d:
21:c3:d3:04:bf:ca:a4:5f:20:87:38:c0:4c:f8:f4:67:ee:ab:
f0:3c:a1:52:51:70:74:02:56:51:06:a9:f0:ca:d6:30:bf:4a:
62:d5:7e:ea:37:5f:c4:a3:03:db:92:ff:79:50:80:f5:a6:48:
07:15:e8:c0:9c:f4:68:45:46:95:99:d3:ef:8c:e2:18:aa:28:
6c:09:02:cc:64:02:92:45:13:2a:92:c6:96:d8:c1:26:5c:68:
53:74:76:31:94:64:9a:19:dd:0b:6b:42:92:6a:a7:da:22:ae:
89:05:2e:36:c0:36:a9:2b:cb:08:ab:bf:c4:b4:9b:25:da:17:
85:2b:f0:3b:19:36:e4:fe:33:7d:b3:a6:fc:76:de:89:f0:1c:
5c:25:fb:0b:a1:42:a6:1e:e0:84:34:c1:0a:f1:96:21:b2:81:
32:86:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:16:42 2026 by rpki-client