Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219329.roa
File: AS219329.roa (raw, json)
Hash identifier: xjhrqVHegextAAy1Xt1dQ3yLWoJNX16wCE/6gtGSWc0=
Subject key identifier: EE:C7:0D:08:7D:18:8A:76:4E:88:5A:61:EA:EA:D4:A7:E3:22:2B:45
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 59EA00D2BF5366461357EDE170A73E908172721E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219329.roa
Signing time: Thu 09 Jul 2026 16:47:40 +0000
ROA not before: Thu 09 Jul 2026 16:42:40 +0000
ROA not after: Thu 08 Jul 2027 16:47:40 +0000
asID: 219329
IP address blocks: 155.117.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ea:00:d2:bf:53:66:46:13:57:ed:e1:70:a7:3e:90:81:72:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 16:42:40 2026 GMT
Not After : Jul 8 16:47:40 2027 GMT
Subject: CN=EEC70D087D188A764E885A61EAEAD4A7E3222B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:79:ae:62:a1:7e:0b:b0:58:6e:10:d8:6d:
91:7c:67:69:9a:54:d9:33:71:39:95:b1:8f:8f:45:
7d:ed:06:7d:a4:2e:6f:f9:34:6b:f6:18:27:d1:0d:
c4:7c:83:bc:2f:d5:c0:ce:8b:80:c7:3d:3b:34:9c:
9c:fd:b8:ae:f2:bf:6f:0c:7c:cf:d0:b1:2b:67:02:
e3:ac:73:c8:83:eb:30:1b:87:7a:39:c4:e6:7f:e7:
9a:7e:d1:a2:41:a4:41:d0:f2:8e:0b:95:27:4a:bf:
15:a5:37:75:59:52:ed:e6:b4:39:0c:0c:2a:73:30:
4c:3c:d8:9d:1c:1c:f0:b6:72:8b:4f:88:a9:05:db:
1d:02:77:f1:ff:11:db:7d:20:01:25:d0:d5:81:70:
e4:cf:96:26:62:5c:5b:b7:bd:88:25:96:e4:fc:57:
38:82:b7:2a:ee:6a:ed:b3:3f:2c:94:fe:22:33:a2:
79:53:32:c2:1b:91:9f:14:88:b3:67:28:39:d6:d7:
34:32:25:9b:25:33:14:ec:2c:fa:63:26:c4:20:58:
e1:a5:62:34:a6:55:73:5e:a5:80:5b:6c:61:9d:c5:
80:9d:d8:c0:34:47:e0:0b:ac:76:c4:d5:9b:d3:87:
e8:ff:8b:2b:38:ed:d0:3e:c0:ab:dd:3b:39:20:dc:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:0D:08:7D:18:8A:76:4E:88:5A:61:EA:EA:D4:A7:E3:22:2B:45
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:61:08:a8:63:1a:53:ab:73:d9:26:11:6a:13:eb:d9:98:f4:
17:9b:0f:d6:ed:91:30:49:8d:f0:54:61:fa:0a:18:2a:12:04:
57:b6:39:af:56:11:54:7a:5e:46:5f:82:4f:79:5b:b4:f2:59:
7a:4b:48:4e:23:b7:52:72:8a:99:49:dd:92:30:09:f8:b9:8c:
36:c0:48:b6:c4:a2:4e:8a:2a:8e:69:8a:5c:92:e0:ef:3f:f6:
7c:c3:84:35:e0:bd:1d:ab:c8:c6:84:ba:b8:8d:d9:2b:56:9c:
8f:7e:89:91:ff:7f:41:da:a4:60:06:66:42:ae:23:6b:4c:0e:
b9:03:43:f4:61:bb:ad:38:1a:a5:6d:ab:06:a0:0a:58:aa:47:
b3:ab:00:b5:c2:27:94:3f:c9:af:ac:fe:51:8a:fd:65:50:fa:
92:96:72:db:16:6d:f7:60:fc:a8:12:0c:67:b7:a6:5c:7b:d2:
f2:0f:48:9d:02:e2:33:c3:b3:53:7d:2c:6c:25:30:a8:2a:92:
ca:c7:ff:39:89:7d:11:58:d0:1a:96:6d:24:32:08:8a:7c:e0:
da:69:69:14:24:d3:34:5c:3b:c4:3e:d3:c7:19:a5:d7:f4:d9:
c7:87:62:47:0a:a0:30:05:a7:ed:05:3f:13:c8:e1:f1:2e:49:
56:ce:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:25 2026 by rpki-client