Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219394.roa
File: AS219394.roa (raw, json)
Hash identifier: pkkZJL/UpNdwT3YqY17RoSOyhvC+DR1v3qFZGJD9VmY=
Subject key identifier: 51:55:28:DF:7F:66:27:A6:C6:B8:0E:D6:EC:45:AA:EB:28:03:BB:A0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0FA1BEEBF414FADEDC8FA92BCD78336813824060
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219394.roa
Signing time: Mon 29 Jun 2026 15:21:33 +0000
ROA not before: Mon 29 Jun 2026 15:16:33 +0000
ROA not after: Mon 28 Jun 2027 15:21:33 +0000
asID: 219394
IP address blocks: 155.117.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a1:be:eb:f4:14:fa:de:dc:8f:a9:2b:cd:78:33:68:13:82:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 29 15:16:33 2026 GMT
Not After : Jun 28 15:21:33 2027 GMT
Subject: CN=515528DF7F6627A6C6B80ED6EC45AAEB2803BBA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:43:76:47:ac:5e:13:e6:82:3e:33:f4:26:4a:
72:c3:9b:a5:59:a5:50:27:ba:fa:7f:e4:d3:77:5b:
a5:48:67:69:ac:99:59:5b:b5:3c:4e:2c:d7:df:04:
60:b6:d9:6c:fb:34:18:2f:97:d3:71:8c:fe:f7:39:
cb:85:bb:d9:31:37:8c:a7:c7:7c:e8:66:92:51:9c:
5c:d1:25:3d:c7:4c:94:90:82:da:cd:4d:97:1c:6c:
8a:0e:c4:71:0e:3c:f9:6d:cf:cf:62:06:b4:32:43:
7c:eb:5d:82:ad:de:08:87:d3:8d:73:97:75:35:86:
e6:09:6e:87:32:0c:bc:36:b5:e7:07:73:08:0d:72:
66:5a:96:47:d6:b1:c8:2a:b2:de:25:af:95:3b:a2:
fb:a3:78:35:3c:1a:20:2e:aa:5a:53:b7:d4:e1:0b:
56:f9:d4:1b:53:61:08:1b:b8:4c:71:2b:f8:cf:9f:
cd:e4:82:9a:91:74:b7:20:73:e8:73:d5:6e:2f:e2:
7a:c0:f0:4b:e0:c9:43:4e:4c:75:7d:11:c8:d4:fc:
2c:81:1c:e2:9c:c7:8c:02:f7:80:99:74:ce:71:15:
66:39:ab:73:d3:69:98:7a:3c:c0:87:29:7b:a8:e0:
35:9a:58:c6:db:09:cb:36:3b:b8:c4:ad:a3:a8:67:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:28:DF:7F:66:27:A6:C6:B8:0E:D6:EC:45:AA:EB:28:03:BB:A0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.200.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6a:73:07:87:03:11:05:0c:fc:86:82:e3:ca:18:1d:31:1b:
29:0d:a8:8d:8f:df:c3:6b:66:bd:3b:a9:bc:d9:8f:b7:2a:64:
78:11:48:68:4a:a9:5d:77:f8:7b:bb:1d:21:5e:c8:6e:f1:2b:
5c:6b:fa:63:0b:49:f6:4f:9d:b8:50:cf:bd:08:58:4f:d2:ef:
c7:2e:42:90:a8:2c:cb:90:a6:f8:08:cc:cf:3a:4f:f4:1a:aa:
73:8d:ae:0b:74:cf:0d:e6:c3:eb:23:3f:78:66:bc:24:2b:db:
22:f7:dd:c6:8c:34:1e:14:27:a0:52:41:a9:3c:0f:e0:6f:2c:
ba:a5:8e:24:ea:bc:42:35:cb:4f:5e:bd:72:4f:28:2a:2e:cf:
4a:03:d2:2c:e6:26:11:da:02:10:78:f6:b6:b4:6d:d3:a5:d8:
05:fc:3f:42:6c:08:c6:90:cc:b6:5e:36:25:de:03:90:f4:3b:
a4:6c:0f:ad:2a:aa:fa:7b:89:b9:b8:a4:af:f9:e3:1e:bb:9a:
ba:97:83:78:e0:29:d2:4c:46:f8:03:75:25:42:fe:bd:55:ff:
95:a3:29:7b:da:86:6f:cb:fb:c5:b6:b7:3b:5b:45:56:f5:87:
c9:f2:96:a5:ea:c2:b9:40:e2:c5:22:00:66:a3:c6:c6:36:b7:
73:40:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:54:32 2026 by rpki-client