Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219425.roa
File: AS219425.roa (raw, json)
Hash identifier: a6+NTLz2ChXwq3YHthmLicIucpbyL0zCUSJ45P9QOgQ=
Subject key identifier: 4B:B1:6C:19:36:6E:0A:8E:D8:8B:CB:66:2B:03:8E:8C:47:4C:AA:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 351FF92C76E1B801FA489A036376592CEA4D24BC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219425.roa
Signing time: Mon 22 Jun 2026 01:43:43 +0000
ROA not before: Mon 22 Jun 2026 01:38:43 +0000
ROA not after: Mon 21 Jun 2027 01:43:43 +0000
asID: 219425
IP address blocks: 143.14.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1f:f9:2c:76:e1:b8:01:fa:48:9a:03:63:76:59:2c:ea:4d:24:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 01:38:43 2026 GMT
Not After : Jun 21 01:43:43 2027 GMT
Subject: CN=4BB16C19366E0A8ED88BCB662B038E8C474CAA10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:e1:d2:09:4b:97:c2:62:47:8d:9d:c3:42:
52:8a:ac:08:37:2f:17:24:f2:34:98:53:47:82:5b:
af:f6:37:7d:e3:af:53:1f:4a:8d:20:12:60:39:e5:
78:b2:f5:51:ae:cd:fb:be:29:5f:0b:0d:e5:bc:03:
f0:61:75:59:fd:8a:9c:3b:31:df:c7:53:a4:13:d6:
7a:25:cf:5e:50:e8:42:85:63:35:31:98:fb:56:68:
9e:2b:07:19:0c:7f:98:a8:8b:d9:d4:6f:84:4e:a5:
16:d7:74:98:b2:39:11:d3:39:cd:1b:d9:68:d8:78:
db:db:2f:73:4f:d0:46:c6:53:65:4f:47:07:18:8b:
29:ee:12:57:aa:c3:cb:26:07:68:8c:0d:b6:de:7c:
7f:4c:dc:1f:90:21:d4:84:53:64:cb:53:02:ba:7c:
1e:f4:81:7b:90:a5:65:9e:5a:c5:5b:c8:1c:55:0d:
66:f7:cc:34:64:99:77:a7:00:97:8e:2b:99:67:e8:
86:e3:aa:29:47:93:66:3c:d8:54:68:27:00:6e:34:
1a:39:0d:05:e9:eb:ba:b2:30:c1:0b:cd:a6:5d:ac:
3f:52:5d:f4:d2:11:9d:84:d2:fb:c8:02:31:ef:b7:
11:63:bc:e7:9c:26:fb:b7:80:57:b1:0a:b3:92:ce:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B1:6C:19:36:6E:0A:8E:D8:8B:CB:66:2B:03:8E:8C:47:4C:AA:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.104.0/22
Signature Algorithm: sha256WithRSAEncryption
56:3d:5b:d5:3d:59:53:51:19:d4:13:d2:ed:9a:90:a1:b6:74:
b1:74:e9:43:0c:05:f8:cc:ba:f8:26:4e:27:1e:63:98:19:73:
91:51:b0:c6:d5:af:07:0c:ee:09:7f:21:a5:2a:de:6d:f8:28:
fb:cc:45:af:b5:5a:b7:4e:86:44:11:7e:d3:fe:6a:4f:5e:e5:
66:79:32:ca:08:13:50:f8:a1:ab:94:7c:78:31:27:de:28:75:
dc:6c:cc:b2:5e:aa:b3:66:76:bd:23:e8:87:55:bb:31:de:2f:
2c:8e:c1:2b:9c:27:a9:c3:37:c1:33:3b:7b:13:bc:99:3f:ca:
b5:ae:97:90:8d:4e:85:14:95:78:b8:32:9f:24:b0:cf:68:2a:
4a:30:9d:5e:5d:fd:46:bd:13:8d:7e:f0:98:d4:f5:7f:24:18:
f4:e7:dc:20:02:63:75:78:ca:ab:ab:70:33:ab:8a:1b:e7:80:
15:f8:de:21:82:a9:93:68:d0:ac:ad:38:fc:1d:07:78:94:5f:
92:15:d5:a2:6e:a8:e9:22:41:1a:41:4e:a9:b6:25:33:99:d0:
c6:b4:aa:77:44:c1:11:57:40:43:28:bb:d6:3d:8c:03:c1:5b:
df:3f:86:fb:6b:cf:1e:ce:86:a5:7b:24:56:76:7a:ab:c0:c4:
8e:0b:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:18:33 2026 by rpki-client