Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: 2uq+RqEC0krjR698pSdmlXw1iyhfxZT9gtdYSUPe4XE=
Subject key identifier: 30:60:D7:F6:CB:8B:35:72:48:5E:64:A7:AD:40:F7:2B:AB:C5:92:BA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69A1F07B0AF8B09F9825DE8DE9DB4C223E9776A3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219393.roa
Signing time: Thu 25 Jun 2026 07:01:20 +0000
ROA not before: Thu 25 Jun 2026 06:56:20 +0000
ROA not after: Thu 24 Jun 2027 07:01:20 +0000
asID: 219393
IP address blocks: 155.117.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a1:f0:7b:0a:f8:b0:9f:98:25:de:8d:e9:db:4c:22:3e:97:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 25 06:56:20 2026 GMT
Not After : Jun 24 07:01:20 2027 GMT
Subject: CN=3060D7F6CB8B3572485E64A7AD40F72BABC592BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:dc:a0:cd:71:70:6d:7a:6e:e5:54:08:93:
e6:9d:1b:90:ff:2c:87:74:76:4a:88:22:c5:d3:0e:
52:eb:b5:c6:f2:75:b8:0e:6e:e1:9c:3f:74:8c:8f:
c8:90:67:0f:ec:30:c0:ff:b3:46:74:f2:d9:6d:c4:
83:74:b0:41:6e:5c:0f:b8:b2:7b:60:9a:de:eb:c5:
31:03:6b:34:a8:c5:1e:d3:7f:ce:b5:30:f1:e1:fc:
fd:a3:ab:53:7d:8f:ca:15:67:a5:7d:14:66:40:42:
49:98:26:3d:6e:32:bb:4f:08:63:da:ef:83:e0:8d:
68:87:d1:e1:44:7d:44:cb:84:91:5e:11:74:4b:e5:
a8:97:d4:10:db:c6:64:40:51:0f:1d:1f:0f:73:0d:
fd:55:dd:0f:dd:79:ec:6b:47:82:3e:9d:a6:cf:e3:
93:d0:a5:1a:3a:08:97:e8:18:7c:94:23:61:7a:07:
57:d2:b1:51:42:53:ec:d2:fc:40:4d:d1:89:13:be:
51:ad:a0:d4:e9:af:dd:82:9e:43:b7:26:92:25:7b:
a1:f8:77:47:da:35:28:32:33:68:70:2e:aa:b8:32:
ad:3e:d7:d0:7e:dd:bc:cf:af:a5:f2:dd:f0:9e:65:
78:1b:cb:2b:a8:40:a1:3d:8b:96:1b:b8:cb:b9:af:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:D7:F6:CB:8B:35:72:48:5E:64:A7:AD:40:F7:2B:AB:C5:92:BA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7f:ec:e0:bd:98:8e:3f:b0:4c:77:23:dd:a4:90:13:43:8a:
90:c1:48:c1:52:f4:98:e8:62:99:6e:00:2d:ca:3f:7e:6b:ab:
63:18:d6:a8:3d:64:27:3f:4d:20:ca:e7:20:e0:8c:0f:ed:7a:
ef:0c:98:ff:ab:07:d8:07:37:d4:47:41:96:40:20:fc:5e:82:
85:aa:44:f2:8b:de:23:4f:f4:c8:c8:e7:8e:7d:30:3d:0f:00:
65:8e:50:bd:9b:2e:fd:a1:38:c9:e8:95:17:ed:a1:52:65:59:
58:67:6e:b7:6c:f9:00:0d:84:ee:bb:4f:92:b7:1f:2c:ee:88:
ee:d4:09:b9:2e:e1:9e:d2:84:2a:ae:59:23:35:3a:30:3f:17:
db:16:34:87:b2:33:c2:ba:e1:12:4a:8e:c7:8e:1a:80:88:58:
aa:8d:74:5d:2d:b3:53:52:1b:fc:c9:f4:d8:72:1c:6b:14:a0:
08:a0:64:2a:91:1d:b0:07:21:aa:39:ca:30:5d:81:34:37:29:
94:b0:68:f2:13:bb:89:d4:24:80:b5:f3:71:37:81:63:0f:76:
d3:e7:cf:32:5e:3d:53:b8:b3:42:d5:b6:52:2f:b8:97:fa:25:
9a:b2:ae:cc:ec:5c:e8:6f:bd:96:00:9b:f8:84:f5:69:81:8e:
cf:f1:fc:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaaHwewr4sJ+YJd6N6dtMIj6XdqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MjUwNjU2MjBaFw0yNzA2MjQwNzAxMjBaMDMxMTAvBgNV
BAMTKDMwNjBEN0Y2Q0I4QjM1NzI0ODVFNjRBN0FENDBGNzJCQUJDNTkyQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YtygzXFwbXpu5VQIk+adG5D/
LId0dkqIIsXTDlLrtcbydbgObuGcP3SMj8iQZw/sMMD/s0Z08tltxIN0sEFuXA+4
sntgmt7rxTEDazSoxR7Tf861MPHh/P2jq1N9j8oVZ6V9FGZAQkmYJj1uMrtPCGPa
74PgjWiH0eFEfUTLhJFeEXRL5aiX1BDbxmRAUQ8dHw9zDf1V3Q/deexrR4I+nabP
45PQpRo6CJfoGHyUI2F6B1fSsVFCU+zS/EBN0YkTvlGtoNTpr92CnkO3JpIle6H4
d0faNSgyM2hwLqq4Mq0+19B+3bzPr6Xy3fCeZXgbyyuoQKE9i5YbuMu5r5JfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMGDX9suLNXJIXmSnrUD3K6vFkrowHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE5MzkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3XI
MA0GCSqGSIb3DQEBCwUAA4IBAQCkf+zgvZiOP7BMdyPdpJATQ4qQwUjBUvSY6GKZ
bgAtyj9+a6tjGNaoPWQnP00gyucg4IwP7XrvDJj/qwfYBzfUR0GWQCD8XoKFqkTy
i94jT/TIyOeOfTA9DwBljlC9my79oTjJ6JUX7aFSZVlYZ263bPkADYTuu0+Stx8s
7oju1Am5LuGe0oQqrlkjNTowPxfbFjSHsjPCuuESSo7HjhqAiFiqjXRdLbNTUhv8
yfTYchxrFKAIoGQqkR2wByGqOcowXYE0NymUsGjyE7uJ1CSAtfNxN4FjD3bT588y
Xj1TuLNC1bZSL7iX+iWasq7M7Fzob72WAJv4hPVpgY7P8fxM
-----END CERTIFICATE-----
Generated at Fri Jul 3 19:54:37 2026 by rpki-client