Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219160.roa
File: AS219160.roa (raw, json)
Hash identifier: hNNsQrXxrWy9pL24ScVZvsSSjaQaUkeT7PspMzuNXJQ=
Subject key identifier: B4:21:ED:6B:37:D7:63:07:21:87:06:2F:44:7F:09:F1:ED:8F:1F:95
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5320F56502F21086FAF59434C90F295956564F43
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219160.roa
Signing time: Fri 28 Aug 2026 21:11:09 +0000
ROA not before: Fri 28 Aug 2026 21:06:09 +0000
ROA not after: Fri 27 Aug 2027 21:11:09 +0000
asID: 219160
IP address blocks: 150.241.143.0/24 maxlen: 24
155.117.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:20:f5:65:02:f2:10:86:fa:f5:94:34:c9:0f:29:59:56:56:4f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 28 21:06:09 2026 GMT
Not After : Aug 27 21:11:09 2027 GMT
Subject: CN=B421ED6B37D763072187062F447F09F1ED8F1F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c8:48:ac:1c:59:83:4b:5d:c7:47:32:f4:e0:
1d:b0:02:0e:ca:8b:b0:e7:68:43:ff:85:6d:e3:8d:
1e:17:a7:24:4c:7c:25:20:2b:e8:76:f5:4a:b6:7f:
14:7c:2e:56:05:ce:9a:4e:3e:fa:a4:16:0f:b9:97:
82:e6:30:06:8a:d2:43:5c:b8:bc:cb:17:31:e4:26:
ae:b2:c0:fa:04:0d:ca:ea:cc:99:d8:59:d6:d6:0d:
ec:7b:c5:35:c0:73:c3:d4:36:09:47:ae:49:f4:9e:
5c:5e:8c:00:58:6d:1c:5b:fb:67:cc:af:d9:cc:f1:
fa:11:39:82:86:9d:ed:53:d7:31:b4:38:71:c5:46:
1d:4d:75:19:99:98:c0:a9:b7:e2:2b:1a:e6:0a:5f:
4e:4a:ce:46:a9:23:33:39:61:96:0d:4d:53:a3:76:
7a:a1:6a:50:bb:1a:46:25:51:87:23:0d:89:41:91:
2f:39:51:5a:a2:1e:f0:1a:bd:50:eb:3e:b5:fd:0b:
00:3e:a3:64:86:56:4e:3a:ec:17:36:c2:a1:14:49:
91:e9:3a:ea:dc:d6:95:81:ae:1e:f2:3e:43:5d:59:
05:f7:26:db:24:1b:79:7c:08:4f:3a:29:10:90:9d:
54:c2:ce:e8:b7:19:75:4b:09:97:60:23:e5:6e:91:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:21:ED:6B:37:D7:63:07:21:87:06:2F:44:7F:09:F1:ED:8F:1F:95
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.143.0/24
155.117.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6e:b8:e9:ff:5d:17:40:00:4b:a9:9f:95:40:0a:e1:f8:d7:
9f:8e:c1:1b:c0:c6:79:eb:81:a6:32:eb:92:0f:35:00:7a:ee:
43:a5:95:a4:7f:d6:6e:bb:d8:f3:4b:51:9b:01:40:22:ba:78:
fa:e6:74:df:ab:7c:14:35:79:45:de:19:49:08:63:d3:8f:d0:
27:1d:a2:66:63:bc:45:1f:2f:ec:b4:4b:0c:89:53:54:82:8f:
fa:b4:1b:32:50:69:c4:96:d9:eb:40:db:ab:ba:ed:af:74:9b:
af:0d:58:66:f3:9c:ba:8e:e6:b7:65:33:a9:2b:16:8c:fa:6a:
62:98:5b:ba:78:db:1c:e8:87:55:aa:df:6e:68:5c:bf:83:d5:
2f:33:85:6c:55:a3:ae:7b:bc:43:46:9c:85:6c:8a:37:1e:84:
6f:20:6d:88:57:17:ee:9f:af:7c:1e:e5:25:6e:0b:b8:cd:36:
b9:ad:45:e5:a2:2a:c7:f9:25:32:ec:38:27:e1:e2:05:13:08:
a9:4a:69:cf:9e:da:e0:ce:a8:57:8c:5e:a1:0b:71:4e:49:ab:
e2:62:02:c6:12:2c:13:e3:35:bd:ed:6e:55:3b:18:c4:8b:15:
46:76:71:04:4d:31:20:73:65:1e:81:5c:23:83:4d:c4:33:64:
22:65:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:04:34 2026 by rpki-client