Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219160.roa
File: AS219160.roa (raw, json)
Hash identifier: epinuhReiK/ErBwfYBPRUAWeP1+LyA3i72HrxeIq3+s=
Subject key identifier: 54:A1:F2:C7:6A:1E:79:90:38:FF:AB:11:D8:3E:F5:78:9F:CE:0C:53
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7DA05C719E75C001FE12089DF248CC550D9EDB11
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219160.roa
Signing time: Fri 24 Jul 2026 18:44:47 +0000
ROA not before: Fri 24 Jul 2026 18:39:47 +0000
ROA not after: Fri 23 Jul 2027 18:44:47 +0000
asID: 219160
IP address blocks: 150.241.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a0:5c:71:9e:75:c0:01:fe:12:08:9d:f2:48:cc:55:0d:9e:db:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 24 18:39:47 2026 GMT
Not After : Jul 23 18:44:47 2027 GMT
Subject: CN=54A1F2C76A1E799038FFAB11D83EF5789FCE0C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:a4:77:0b:c2:17:10:cb:72:6e:01:70:7d:
78:e9:28:15:25:4a:a5:9e:26:78:da:a3:86:ac:6b:
95:1d:ec:35:4d:d9:2a:67:2c:cb:17:ae:be:d6:4b:
f0:d3:47:c8:08:60:73:e3:bd:cd:b3:68:f9:a4:30:
17:f4:26:18:aa:35:38:84:c8:c2:d1:23:94:f0:71:
db:d2:3b:06:4f:69:c4:19:8a:77:af:94:33:d0:ea:
92:66:b7:8b:bc:de:df:09:2b:84:90:a4:1b:e4:5a:
f3:60:3e:27:f1:1d:b9:8f:1e:ac:6b:3a:40:90:24:
be:46:e8:3a:c3:ce:03:f2:33:c4:91:11:b5:14:4f:
10:15:76:5c:33:32:dd:85:f5:ee:c5:87:8e:b6:de:
9e:c5:3e:21:3d:3e:a2:cb:c7:8f:ab:cb:65:4c:7f:
8b:9a:e2:fe:cd:b2:90:63:f9:57:15:33:48:14:4f:
d9:df:97:ba:d2:ea:74:eb:b9:e4:f9:4a:99:50:6c:
26:46:ec:3e:39:e1:37:55:c1:97:84:9a:63:8a:81:
6a:73:3e:bc:c4:1f:9a:1d:e5:8b:d1:01:52:94:20:
1c:e6:ee:67:fa:fe:26:a9:7c:78:7a:30:fa:79:a3:
ab:75:1e:0e:f8:c2:ce:ed:5a:9b:6f:39:83:c2:0f:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:F2:C7:6A:1E:79:90:38:FF:AB:11:D8:3E:F5:78:9F:CE:0C:53
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.143.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ae:aa:4a:f5:a9:c1:20:a5:b1:34:cc:e3:af:18:33:c6:80:
37:a9:c9:4b:dc:22:0e:46:8e:bb:b2:3a:f8:74:05:a7:f9:97:
a6:54:7b:ca:cb:aa:34:8c:19:17:2f:4d:8a:58:d9:99:cc:b6:
eb:65:9b:24:fc:78:df:a9:a9:00:5e:66:15:aa:4c:bb:b9:fa:
27:3c:da:c6:b5:bc:06:f0:58:56:fd:0f:d7:1c:81:c3:93:87:
e3:be:05:55:c6:2f:f7:91:23:1d:1c:3f:f3:21:36:14:5d:aa:
b4:b8:65:68:a6:3f:b9:e5:8a:bc:d4:ca:8f:fb:d8:76:46:b8:
d6:cc:56:7f:0c:ae:65:f6:1d:3d:4d:01:54:3d:4e:43:fa:b2:
ce:1c:bf:3d:54:9c:34:b1:ed:07:d1:6d:29:94:75:40:b6:cb:
37:85:c9:9b:69:ca:c3:74:28:82:14:78:cc:00:c6:be:42:97:
72:7a:90:e5:99:e7:a9:a6:60:59:e2:31:0f:e0:0b:eb:62:97:
d6:3d:d9:9e:f4:73:54:e0:25:97:9d:8f:3e:f0:b0:e8:29:98:
e3:89:d3:ea:dd:95:8f:ac:cb:5d:27:c9:49:12:e3:52:bd:02:
70:bb:de:a5:f2:17:48:b3:11:0b:bb:ba:07:33:e2:97:d4:92:
76:54:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 11:37:08 2026 by rpki-client