Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: z2VZoBXZlV8JU9bGFte89S/0CYBVp4x+OFgJbV6GHEI=
Subject key identifier: 69:8A:4E:57:70:FB:BF:A9:98:1A:42:2A:1D:51:78:48:2D:67:3A:72
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 416AEBA1B69F86965A5C807DA18EF70100C49D6D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
Signing time: Tue 20 Oct 2026 08:43:08 +0000
ROA not before: Tue 20 Oct 2026 08:38:08 +0000
ROA not after: Tue 19 Oct 2027 08:43:08 +0000
asID: 219105
IP address blocks: 64.226.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:eb:a1:b6:9f:86:96:5a:5c:80:7d:a1:8e:f7:01:00:c4:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 20 08:38:08 2026 GMT
Not After : Oct 19 08:43:08 2027 GMT
Subject: CN=698A4E5770FBBFA9981A422A1D5178482D673A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:f0:ec:1d:85:10:03:f9:cd:7a:7f:52:f0:
de:46:2b:db:3d:37:45:46:08:46:88:cb:60:5c:46:
9e:14:1a:bc:fe:aa:a8:39:73:6d:d9:cc:7a:87:e1:
b1:b0:f7:3e:38:12:81:63:a7:ad:d7:93:d2:27:ce:
8a:d8:a9:c6:75:9c:a5:dc:fc:e1:cb:28:75:55:bf:
f1:bd:68:fc:25:b8:1f:93:df:1d:e3:b8:90:b0:55:
5a:70:ea:43:88:49:01:a9:69:19:a6:73:3d:b5:99:
5d:e5:f4:b7:bb:7a:b2:48:40:4e:e8:94:d0:d3:ac:
1e:a1:ba:c9:70:cb:25:ac:e3:4f:ee:20:bd:65:93:
af:a1:a9:be:bf:5c:85:c3:49:be:74:53:1e:7a:a7:
f2:56:40:50:44:fd:b3:25:ba:cb:ca:b3:bf:a3:a5:
2a:82:9e:07:e9:9e:f2:fa:ad:a6:c5:db:80:8e:ea:
ec:c4:3c:8c:76:41:88:f9:ac:3d:f4:74:75:b8:35:
fc:db:35:4e:38:5e:6d:79:52:55:a2:26:e0:e8:32:
7b:b6:a1:d7:ef:59:41:1e:3c:fd:bd:74:ca:3b:88:
a9:15:b7:6e:81:2e:db:d8:f4:e2:3b:a7:44:04:40:
1e:5e:0f:ae:81:06:7f:5f:ae:32:e3:52:03:66:85:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:4E:57:70:FB:BF:A9:98:1A:42:2A:1D:51:78:48:2D:67:3A:72
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.205.0/24
Signature Algorithm: sha256WithRSAEncryption
75:65:1f:9f:e7:d2:ba:73:9d:75:f8:f3:90:52:84:3b:09:31:
3e:1e:0e:ea:7d:2b:b5:ae:c6:5d:d8:52:e1:01:84:e5:a9:87:
c9:af:ac:b8:1b:3d:85:4f:52:eb:ea:d6:ab:96:28:c1:6f:14:
ff:68:5c:9f:6d:8d:66:f8:70:dd:e6:7f:bf:46:17:55:37:25:
bd:ed:de:1c:29:3c:3a:6a:79:ee:01:29:24:50:06:e0:3c:d7:
10:aa:8c:8a:83:1f:bb:a4:14:db:4a:03:06:9c:86:75:73:43:
fc:da:7e:6d:c5:9e:30:3a:2b:1c:b7:81:78:8b:af:bb:9a:16:
36:73:84:50:0f:94:2a:f4:c6:e0:0e:fb:a4:e0:f1:90:96:a6:
0c:71:a0:aa:17:e0:1f:e4:5b:43:e0:90:5e:59:68:fc:89:82:
81:e7:8c:de:03:ff:56:1c:a4:7e:40:09:bf:51:3e:9a:32:69:
81:d8:89:f6:af:19:3e:7b:f1:fa:3d:aa:0e:79:e6:d9:11:5d:
14:3a:72:9d:d2:76:4e:c9:61:a2:e0:60:eb:e9:f2:96:db:e2:
8c:d4:4e:4d:ac:35:3c:48:0a:b7:5e:5c:0d:7b:28:a8:cf:ae:
2c:28:ae:ba:a1:c8:42:9f:3b:70:a0:f8:44:47:58:3a:d6:cd:
ae:92:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:43:44 2026 by rpki-client