Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219233.roa
File: AS219233.roa (raw, json)
Hash identifier: pQVG7UiDg30ff/Lmsdi4dEMyiuJ7IVnOBDNEHPMPQcY=
Subject key identifier: 16:20:95:49:4A:5C:8A:9E:EF:69:78:29:69:BC:64:D6:CE:6D:DD:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 24D58EE133C1DABB35E6F79AD682E7744C2A0E72
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219233.roa
Signing time: Sat 08 Aug 2026 15:44:42 +0000
ROA not before: Sat 08 Aug 2026 15:39:42 +0000
ROA not after: Sat 07 Aug 2027 15:44:42 +0000
asID: 219233
IP address blocks: 162.141.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d5:8e:e1:33:c1:da:bb:35:e6:f7:9a:d6:82:e7:74:4c:2a:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 8 15:39:42 2026 GMT
Not After : Aug 7 15:44:42 2027 GMT
Subject: CN=162095494A5C8A9EEF69782969BC64D6CE6DDD10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:54:53:b0:39:b7:12:19:a8:c3:ce:8f:8d:
09:2c:4b:ec:a6:88:1c:22:98:a4:b8:07:b4:c5:3c:
19:9b:50:51:0d:0a:b6:be:2e:11:8d:a2:f1:2a:46:
16:00:75:68:62:bc:2f:70:ba:50:1d:29:31:a4:5e:
da:ae:1e:e3:63:7e:fa:28:62:6a:f2:e7:f0:a7:f9:
b5:47:61:c8:0c:c0:bc:1c:5b:3b:31:b4:32:5c:0c:
60:0c:b9:4e:0e:06:bb:8d:9c:84:7a:11:3a:39:c4:
75:b0:ac:78:04:9c:06:ba:01:35:45:2e:ff:4b:62:
b3:bc:bf:09:ab:79:e6:93:89:9e:6a:59:be:db:b3:
2d:4c:99:a8:12:d9:c6:87:80:68:ae:92:49:ec:0e:
a5:9f:19:ac:c8:dc:8e:aa:ba:59:2b:37:0e:77:a2:
c5:04:0c:e8:42:20:f4:f4:c0:2a:30:2f:b3:f1:bb:
94:dd:03:9b:93:0c:2e:4c:46:4b:ab:d5:b5:43:b9:
2a:77:8e:41:ee:2d:0c:fd:d2:c5:4d:a1:da:3b:11:
31:d4:fe:c4:f6:f7:19:c2:5c:5d:42:79:04:53:d7:
cd:d6:34:12:8e:da:a3:ba:2a:85:de:1b:51:df:92:
32:64:83:81:25:d7:04:22:6c:ac:11:79:0c:e6:c2:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:95:49:4A:5C:8A:9E:EF:69:78:29:69:BC:64:D6:CE:6D:DD:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:90:e9:ca:d0:cb:14:ae:ae:61:e3:1d:cd:28:7e:35:ee:9a:
0e:aa:21:ad:df:55:f8:d7:ae:3c:24:10:4c:63:dc:11:3a:55:
5f:5c:e6:33:b8:5d:01:9b:f3:55:c4:06:08:3c:9c:94:4f:ff:
8e:98:fb:80:46:1e:d4:84:c0:4c:50:6f:6b:57:c1:39:13:39:
49:d5:9d:a9:87:13:40:72:8a:dc:99:f6:02:a5:dc:62:02:82:
9a:ab:39:24:2a:c3:ed:7b:52:04:53:34:d8:93:5c:0f:80:2f:
9b:93:fd:15:45:5e:82:84:db:6b:c9:43:44:d4:03:36:b9:e4:
26:c5:9f:2d:b2:01:30:ba:71:e5:39:96:04:1b:8c:ef:8e:6f:
f7:30:78:96:8f:be:2b:69:96:3b:1e:b4:f3:f2:af:0c:f1:0e:
1f:a7:8c:ce:77:90:4a:2c:75:99:4c:71:fe:f2:20:0c:fb:0d:
6f:0f:94:b2:37:8a:78:e8:48:fa:10:ad:d3:ad:ec:57:15:42:
3a:2a:ee:2c:98:b5:7b:2a:70:0f:af:bb:fb:53:34:b3:f8:17:
37:5b:79:58:13:8c:b6:d7:c3:93:2d:7a:5d:d1:78:50:10:a0:
1c:4e:d8:a3:03:d7:a5:69:a9:fd:68:51:ca:bb:93:b3:67:1a:
3a:dd:b5:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJNWO4TPB2rs15vea1oLndEwqDnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MDgxNTM5NDJaFw0yNzA4MDcxNTQ0NDJaMDMxMTAvBgNV
BAMTKDE2MjA5NTQ5NEE1QzhBOUVFRjY5NzgyOTY5QkM2NEQ2Q0U2REREMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcClRTsDm3Ehmow86PjQksS+ym
iBwimKS4B7TFPBmbUFENCra+LhGNovEqRhYAdWhivC9wulAdKTGkXtquHuNjfvoo
Ymry5/Cn+bVHYcgMwLwcWzsxtDJcDGAMuU4OBruNnIR6ETo5xHWwrHgEnAa6ATVF
Lv9LYrO8vwmreeaTiZ5qWb7bsy1MmagS2caHgGiukknsDqWfGazI3I6qulkrNw53
osUEDOhCIPT0wCowL7Pxu5TdA5uTDC5MRkur1bVDuSp3jkHuLQz90sVNodo7ETHU
/sT29xnCXF1CeQRT183WNBKO2qO6KoXeG1HfkjJkg4El1wQibKwReQzmwoJvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUFiCVSUpcip7vaXgpabxk1s5t3RAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE5MjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo1i
MA0GCSqGSIb3DQEBCwUAA4IBAQCskOnK0MsUrq5h4x3NKH417poOqiGt31X41648
JBBMY9wROlVfXOYzuF0Bm/NVxAYIPJyUT/+OmPuARh7UhMBMUG9rV8E5EzlJ1Z2p
hxNAcorcmfYCpdxiAoKaqzkkKsPte1IEUzTYk1wPgC+bk/0VRV6ChNtryUNE1AM2
ueQmxZ8tsgEwunHlOZYEG4zvjm/3MHiWj74raZY7HrTz8q8M8Q4fp4zOd5BKLHWZ
THH+8iAM+w1vD5SyN4p46Ej6EK3TrexXFUI6Ku4smLV7KnAPr7v7UzSz+Bc3W3lY
E4y218OTLXpd0XhQEKAcTtijA9elaan9aFHKu5OzZxo63bVm
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:38 2026 by rpki-client