Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: E7Ke3V3uSaEqPD5KtcMOXiKW1fjJsGCL1SxcLNiXokc=
Subject key identifier: FB:E4:AC:C2:98:27:13:48:1E:CA:48:69:DA:01:69:B8:C8:14:EB:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2B521E89D030E5815CA285FF7E0FD8CE63624982
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
Signing time: Fri 11 Sep 2026 17:45:03 +0000
ROA not before: Fri 11 Sep 2026 17:40:03 +0000
ROA not after: Fri 10 Sep 2027 17:45:03 +0000
asID: 219105
IP address blocks: 162.141.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:52:1e:89:d0:30:e5:81:5c:a2:85:ff:7e:0f:d8:ce:63:62:49:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 11 17:40:03 2026 GMT
Not After : Sep 10 17:45:03 2027 GMT
Subject: CN=FBE4ACC2982713481ECA4869DA0169B8C814EBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:ce:7d:7b:20:28:c6:36:58:e9:a2:44:3c:
d0:a9:f4:af:ee:3a:28:d6:83:df:45:a1:ac:db:48:
b3:0b:f0:27:e1:d5:7b:70:16:1e:fe:08:0e:e2:ba:
7a:f3:d8:19:7d:8f:45:69:d8:77:f2:43:c1:9c:18:
f9:5e:47:62:43:70:cd:b4:e5:ef:5a:52:cd:28:76:
24:28:8c:3e:a9:5a:1d:13:70:a4:a8:bb:7a:58:67:
8c:2c:79:2f:ff:74:a3:d7:00:57:1e:5b:4a:4e:e6:
47:f5:8e:b5:c1:aa:7b:0f:92:49:e7:71:53:65:9d:
aa:22:b1:c2:1a:cf:19:dd:24:42:0c:02:bc:43:a6:
ae:db:9e:4f:f1:63:71:32:37:ff:70:1e:8b:a8:fb:
6c:25:98:a8:bd:cc:a8:ff:33:53:e6:90:f1:c1:18:
4a:88:67:a6:4d:52:38:87:3e:f1:c1:74:e5:7f:78:
5c:d5:dc:5c:09:58:58:cc:c9:51:fd:ee:b3:91:52:
88:9b:c6:23:ff:4b:90:a1:55:2a:1b:31:93:31:29:
16:f8:f1:c0:8d:2a:35:a0:d2:5d:99:7a:e3:c4:43:
13:6f:ce:da:e8:f3:d7:62:bf:1e:d5:ca:c9:9a:7f:
d0:d0:da:4c:a9:95:b1:1f:f0:cd:85:71:be:b4:d8:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:AC:C2:98:27:13:48:1E:CA:48:69:DA:01:69:B8:C8:14:EB:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.185.0/24
Signature Algorithm: sha256WithRSAEncryption
29:86:83:a2:5d:58:45:01:1a:ec:79:1c:06:07:59:29:62:ba:
b1:cb:63:11:fd:84:f0:62:e2:55:c5:29:ba:4e:ce:d3:58:69:
d5:ea:d7:24:d0:b7:e4:02:ad:63:0a:9a:0e:40:e8:29:d5:b0:
3b:ec:e8:3d:4e:42:45:2b:54:f7:a1:48:14:cd:f9:bd:ef:25:
28:76:2b:3e:98:a9:b2:a9:09:42:50:91:54:bc:8c:5a:b9:b3:
39:fb:4b:24:1f:77:45:f1:e2:ec:2e:ef:ca:cd:48:d1:69:44:
77:22:51:f7:c4:51:58:dd:1c:ed:78:ca:52:d2:b0:de:e2:68:
91:9d:ce:9d:80:88:ac:40:d7:f4:ae:9d:c4:41:a4:b7:db:76:
fc:fa:8d:ee:1f:6b:6d:99:3a:55:89:62:fe:f5:e2:22:5a:a6:
80:69:ab:39:b0:5b:d0:74:63:24:db:4b:31:e9:d6:b8:c4:9e:
a9:02:8c:a1:64:40:d9:ba:d3:58:50:d0:b8:66:1e:f1:03:c1:
d4:1d:42:2a:85:fe:24:41:32:3e:36:72:33:ed:6d:54:15:e4:
94:99:44:2b:b7:d7:27:c0:aa:b2:66:63:ff:06:3d:53:3e:7b:
25:cd:7e:f9:31:d9:ee:83:2b:41:30:e9:e3:c3:25:e1:75:99:
e2:34:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:24:26 2026 by rpki-client