Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219410.roa
File: AS219410.roa (raw, json)
Hash identifier: 6sdknWGoVseTk1B5z1yKF72Z1XGyohrKJCy5AyvbbFM=
Subject key identifier: 6A:3E:69:F7:55:E6:91:07:29:57:7C:85:29:A1:13:EE:15:3F:5E:CC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 75FAA99D9F1F535C76B9B4B554BE2F6B1FC0821E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219410.roa
Signing time: Fri 31 Jul 2026 15:46:35 +0000
ROA not before: Fri 31 Jul 2026 15:41:35 +0000
ROA not after: Fri 30 Jul 2027 15:46:35 +0000
asID: 219410
IP address blocks: 168.222.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fa:a9:9d:9f:1f:53:5c:76:b9:b4:b5:54:be:2f:6b:1f:c0:82:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 31 15:41:35 2026 GMT
Not After : Jul 30 15:46:35 2027 GMT
Subject: CN=6A3E69F755E6910729577C8529A113EE153F5ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:88:31:1c:b8:f9:4f:92:48:3f:9a:a2:8c:
c7:2c:41:33:d2:34:6c:39:24:ac:2c:97:e6:4a:e6:
f1:4f:80:1f:8d:52:84:e6:1f:c2:65:51:b9:d7:a4:
ad:2c:f2:af:7d:d8:70:9b:9b:1d:ea:8d:0e:73:18:
b8:c9:e2:07:a9:34:d1:24:8d:92:86:50:31:51:66:
c9:36:1e:41:96:08:27:3b:ed:7b:43:90:36:17:e1:
0f:10:7d:e2:60:87:26:08:dd:93:9b:fd:08:75:22:
8c:51:f8:5e:9e:02:3b:70:9e:22:b9:90:0f:69:22:
16:d5:30:71:bd:5e:b9:26:36:75:3b:8d:29:16:8d:
19:f4:ac:32:eb:89:3e:d4:56:04:a4:51:b7:0e:f0:
d0:cc:b2:ed:b5:3f:ad:68:71:34:93:37:41:26:31:
59:7d:9e:29:e3:ee:c6:46:d8:23:75:8c:80:0a:7d:
a9:28:ce:0a:e3:84:5c:18:b7:f0:51:42:c0:f8:56:
74:96:01:f1:d7:a2:86:0f:e9:52:26:86:1f:f9:18:
11:a7:32:6d:4e:a7:0c:03:44:8b:46:b4:b6:2f:c6:
7e:8d:95:64:dc:93:4b:c0:50:50:ad:85:e2:99:28:
3b:39:bb:4f:09:f3:79:6c:3e:14:c8:cd:ad:28:b2:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:69:F7:55:E6:91:07:29:57:7C:85:29:A1:13:EE:15:3F:5E:CC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.8.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6f:7a:92:9f:96:46:9c:43:96:cc:f4:88:11:28:01:1d:4d:
87:fc:d5:ed:fc:58:97:9d:e1:31:4d:22:38:65:f9:59:f2:79:
09:92:e2:fc:df:0b:3d:5e:f8:f3:64:d8:fa:00:ca:45:74:e3:
3a:27:38:7e:3f:42:d0:5c:ba:6d:c3:cb:b4:11:80:79:27:a0:
b8:07:bd:52:e1:f2:5d:cb:e5:dd:3c:2f:0e:5c:48:5b:c5:0a:
0c:91:5b:50:16:d3:a0:2e:d1:d5:89:3e:f8:b9:37:ef:71:b9:
e8:e5:26:77:94:45:42:cc:b3:b0:a9:0f:78:59:31:6c:21:32:
bd:f0:9b:55:92:12:38:30:ae:1f:4e:a4:74:87:8e:75:a5:a2:
40:26:44:5f:1e:f6:57:a8:62:f1:84:60:9e:a4:5f:46:cc:16:
a3:96:ca:45:d8:4e:5f:60:70:b9:e7:84:2c:4c:5b:31:be:8c:
13:21:c1:81:d7:2d:60:ef:2d:12:9e:19:52:25:fc:b4:00:fb:
00:11:96:cb:4f:12:72:93:88:69:e2:25:2d:ce:8e:b6:c2:61:
62:fb:c7:2d:59:46:44:6a:0b:0b:b7:72:9f:d9:ec:c7:e9:3a:
7e:b5:b1:20:94:9b:ac:ad:ff:b0:11:a1:ec:35:c5:6d:c1:2d:
38:34:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:49 2026 by rpki-client