Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219409.roa
File: AS219409.roa (raw, json)
Hash identifier: hEQAXKY3Z1nxnqZ71ocbbYNBcE9Mby/FSpD3YELBNss=
Subject key identifier: 39:62:E6:E9:DA:B8:50:53:95:A9:7D:3A:6B:88:AD:98:80:A7:B8:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7DA9D159917CDFF41B2104977ECEDB45D057EE22
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219409.roa
Signing time: Mon 29 Jun 2026 13:56:28 +0000
ROA not before: Mon 29 Jun 2026 13:51:28 +0000
ROA not after: Mon 28 Jun 2027 13:56:28 +0000
asID: 219409
IP address blocks: 143.14.18.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
155.117.169.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a9:d1:59:91:7c:df:f4:1b:21:04:97:7e:ce:db:45:d0:57:ee:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 29 13:51:28 2026 GMT
Not After : Jun 28 13:56:28 2027 GMT
Subject: CN=3962E6E9DAB8505395A97D3A6B88AD9880A7B86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:74:89:13:3e:8e:f0:7d:70:d0:9c:3c:49:
e5:00:c7:57:1a:de:b8:64:4d:42:56:1d:04:f8:7f:
82:79:a4:09:5b:7b:ad:66:79:0f:93:0a:55:94:a3:
f7:a8:09:d4:9d:82:2f:65:94:4b:19:7b:ef:29:94:
6c:4e:ef:28:28:ab:79:38:3f:83:5a:8a:98:83:4e:
34:4a:d7:ac:de:9d:eb:d1:4e:18:74:9b:24:c1:64:
5c:23:1e:d7:e2:8a:83:0d:e7:db:b8:7a:19:94:a4:
6f:81:98:34:58:c4:a8:b6:9f:f7:ea:f6:b5:6c:ce:
eb:76:47:76:92:f5:4a:5d:21:72:62:35:17:ba:87:
62:04:7a:ad:6b:ca:da:f3:62:80:2d:7e:ae:b3:d3:
f3:dc:da:83:82:73:26:89:70:03:19:70:b7:13:ac:
db:59:cf:a9:cb:64:b0:86:5d:48:e2:99:57:d5:0d:
d0:a3:86:05:bc:18:a5:f8:6e:c8:77:9f:be:48:99:
89:f3:ae:7d:da:85:52:f4:b0:7e:41:3c:02:1d:ad:
f8:a5:8f:14:fc:76:9f:b2:b8:50:da:7f:a1:d5:c0:
04:4a:7a:0b:1d:5e:51:51:13:75:20:35:93:2d:83:
d7:5a:a7:e1:c1:5f:d6:1f:44:e0:4d:fa:76:38:ab:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:E6:E9:DA:B8:50:53:95:A9:7D:3A:6B:88:AD:98:80:A7:B8:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.18.0/24
150.241.242.0/24
155.117.169.0/24
162.141.126.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9e:c1:02:f9:24:a4:94:78:f0:9d:0c:f0:f5:13:6e:fd:6b:
88:73:9d:95:bb:ae:91:53:18:17:8d:0f:44:c9:13:bb:c5:46:
f5:c5:d2:a0:38:a3:0c:6c:be:a2:c9:40:c7:c7:25:61:89:65:
23:ee:68:2f:ab:7e:e0:6e:9f:d1:76:7f:63:70:8b:7c:28:03:
bc:54:e8:56:97:17:41:e2:ea:2a:a9:a2:ce:60:cb:66:ec:c7:
6e:85:57:ba:a1:14:a0:8b:32:6d:5b:3f:61:b9:0d:a9:38:e8:
57:eb:c9:c1:a4:ef:8d:e8:aa:85:25:04:c3:80:13:98:30:08:
7c:ca:83:05:4b:14:8f:87:4f:cf:48:04:bd:68:21:19:0b:73:
c2:87:73:8b:21:6b:df:e5:2e:90:66:a8:5b:ec:3e:42:18:ee:
2d:c5:83:37:4f:9a:3d:62:90:e1:9d:5b:7f:00:80:7f:fe:74:
c7:e9:a7:6a:5d:94:31:0e:53:45:4e:97:07:85:bb:8b:e4:96:
56:97:e4:3f:92:8e:c7:4f:f0:0e:b6:54:4e:9c:b4:79:d3:d4:
76:68:05:74:71:a8:0b:d3:de:19:93:3f:b9:c4:6b:1b:be:15:
c5:e1:d4:32:be:ee:a2:bb:f1:fa:c2:4b:e4:da:0c:51:da:f4:
f6:1d:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:54 2026 by rpki-client