Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219182.roa
File: AS219182.roa (raw, json)
Hash identifier: nwQ25RrwsWcF0loCxc0+KqEHFvhP+wsmo8UUiV+Mm4A=
Subject key identifier: 63:3F:16:54:9D:81:6B:CD:2A:47:32:4D:13:FD:76:8F:23:B5:C6:AA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7134F9684A4456112BDA0749D59A0DC2597496E3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219182.roa
Signing time: Tue 01 Sep 2026 12:57:58 +0000
ROA not before: Tue 01 Sep 2026 12:52:58 +0000
ROA not after: Tue 31 Aug 2027 12:57:58 +0000
asID: 219182
IP address blocks: 155.117.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:34:f9:68:4a:44:56:11:2b:da:07:49:d5:9a:0d:c2:59:74:96:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 12:52:58 2026 GMT
Not After : Aug 31 12:57:58 2027 GMT
Subject: CN=633F16549D816BCD2A47324D13FD768F23B5C6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:d4:3f:2c:cf:3b:ef:ed:ab:fc:df:e5:83:
73:92:27:6c:b9:83:c1:74:13:f4:d6:ae:d9:88:d4:
33:dd:d3:70:26:0c:be:d4:63:cb:fe:87:05:af:e8:
4a:bd:1b:da:82:77:62:98:0d:50:27:e7:2b:98:b4:
0e:28:46:91:ee:0f:75:31:9e:b7:7a:b0:34:c7:27:
c9:73:60:02:11:e8:1d:cc:2c:6b:72:2e:88:53:f7:
4b:cf:43:58:c6:35:f3:08:b8:56:c2:e6:d0:1a:c8:
49:60:af:41:bf:ba:78:1d:d8:4b:31:e6:43:01:aa:
6e:8f:b6:72:0e:03:6c:27:be:f4:2b:99:e8:cc:c7:
49:c0:c9:62:8e:eb:34:c8:91:33:4c:6e:92:7b:99:
29:81:47:09:24:50:70:a1:20:5e:ee:67:fa:01:56:
a1:50:8e:90:d1:9b:33:0b:89:ed:9d:5d:f3:1a:32:
a1:c1:4d:e9:bc:4d:51:42:c1:a6:ed:b2:d8:4f:bd:
3c:23:8f:25:60:0b:7c:47:8f:ed:8d:85:2b:41:97:
b1:69:dc:3d:ff:43:8a:e4:56:bc:85:da:fd:7c:93:
78:f7:88:94:9d:b4:c1:d1:c5:b2:df:15:70:14:1d:
c3:73:fb:f6:8f:57:f1:13:f8:af:74:2d:3d:2a:b0:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:16:54:9D:81:6B:CD:2A:47:32:4D:13:FD:76:8F:23:B5:C6:AA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:37:99:21:d7:aa:a8:f2:27:e0:d8:fa:44:7e:1e:2a:dc:91:
90:54:52:a6:6d:d4:e6:5d:93:5d:e8:ad:24:6f:43:40:f2:fb:
ed:f7:b5:52:a9:97:91:8e:1f:b6:85:d7:c2:e1:80:3f:b6:f3:
7c:68:2a:b1:f0:46:ac:ee:85:fa:c5:39:1b:2e:a2:01:7a:48:
20:2d:67:88:13:88:a0:47:e3:74:14:6e:bc:f0:50:f8:14:70:
c7:96:91:2a:bb:8c:9f:0f:f1:74:6b:92:01:56:2f:a8:a3:c2:
c5:ee:97:4a:6d:bf:fa:0e:2c:99:f3:b2:e8:10:ca:e5:51:dc:
28:67:ba:ea:cc:d4:d7:fb:5b:cf:5b:8c:e5:cc:f6:83:d4:5a:
ea:c4:f5:cd:64:d3:47:70:41:2e:65:89:af:0d:5d:54:9b:ed:
a2:65:36:a6:ec:37:ed:f9:52:cb:1d:a1:15:24:79:fb:23:98:
0c:36:be:a7:a9:49:da:cd:04:c4:74:1d:d3:f5:3f:57:10:73:
95:34:9e:11:9b:48:4e:1c:44:a2:65:48:10:f5:25:a4:ba:dc:
9a:ee:f5:66:ed:5c:cb:75:bd:42:45:2a:07:5b:85:90:ef:a3:
b6:ec:9f:8d:20:86:a3:80:35:6b:f8:44:c1:50:67:fc:a9:82:
65:64:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:02:57 2026 by rpki-client