Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: 7IsXLu75eOrlzxCgkChUIY36i53rWyYVIHRMLSmlvt8=
Subject key identifier: F0:80:13:39:FB:40:12:7B:A1:75:29:54:5C:A8:E2:3F:72:DC:91:EF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21808A1EA4A726FF2FA63CEDC0580969E624F3C0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
Signing time: Mon 28 Sep 2026 19:16:48 +0000
ROA not before: Mon 28 Sep 2026 19:11:48 +0000
ROA not after: Mon 27 Sep 2027 19:16:48 +0000
asID: 219427
IP address blocks: 66.132.157.0/24 maxlen: 24
66.132.238.0/24 maxlen: 24
66.155.65.0/24 maxlen: 24
66.234.12.0/24 maxlen: 24
66.234.13.0/24 maxlen: 24
69.90.33.0/24 maxlen: 24
146.103.22.0/24 maxlen: 24
168.222.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:80:8a:1e:a4:a7:26:ff:2f:a6:3c:ed:c0:58:09:69:e6:24:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 28 19:11:48 2026 GMT
Not After : Sep 27 19:16:48 2027 GMT
Subject: CN=F0801339FB40127BA17529545CA8E23F72DC91EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:4c:8c:f1:f5:99:f3:0d:b2:c1:eb:0e:b4:
ad:13:a8:b0:70:49:1e:4d:27:59:fd:b9:fe:ef:2e:
77:3f:fe:a8:29:82:49:60:8c:bb:6d:87:93:12:0d:
b9:b2:d6:13:57:a7:6a:79:e2:6c:46:14:d9:fb:7d:
9b:3d:c7:15:6f:9f:65:16:43:16:14:30:b6:66:66:
8c:00:96:f5:7d:9e:48:cd:b9:6e:f7:54:4e:6e:84:
0a:0d:7c:a3:88:41:bf:34:2e:eb:f2:d5:0b:1b:47:
fc:1c:b1:9b:9a:89:22:cc:db:9e:82:46:28:6d:0e:
d0:2e:2a:65:f5:d9:53:37:32:dd:11:b8:6d:17:6c:
74:aa:52:4c:f4:2e:fa:35:96:d1:16:1b:cc:4e:23:
78:3f:16:fb:e2:f0:9c:aa:b7:77:7b:8c:82:46:de:
e6:c0:62:2e:31:5b:17:90:a9:b4:bb:77:f1:e4:1e:
a6:8c:6a:dc:16:df:c5:74:57:38:a8:4b:ae:10:9f:
b3:3f:16:e4:f3:1b:d9:5e:8e:ca:97:06:c3:26:4b:
c4:fa:61:d4:38:94:e1:ae:a1:25:eb:fb:93:20:51:
d3:82:76:25:cc:68:15:2e:bd:12:43:61:5c:5a:57:
06:92:6e:87:05:24:c4:55:85:ae:92:1b:6d:1c:39:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:13:39:FB:40:12:7B:A1:75:29:54:5C:A8:E2:3F:72:DC:91:EF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.157.0/24
66.132.238.0/24
66.155.65.0/24
66.234.12.0/23
69.90.33.0/24
146.103.22.0/24
168.222.36.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3d:93:07:13:dc:a6:fc:20:63:13:48:f5:c6:c8:b6:ac:0b:
07:45:fc:37:0a:a2:19:fd:50:57:1e:26:02:de:43:52:de:8e:
52:dd:f4:f5:c6:7a:d4:1b:a3:36:81:ab:2c:f4:ef:b2:fb:51:
d5:19:49:03:71:96:62:5c:ba:8d:59:20:7c:9a:38:69:f1:53:
20:ac:e1:a5:06:db:9b:d0:17:dc:84:d3:1d:84:66:aa:1a:f2:
47:c7:ba:ce:76:cd:96:54:1d:6f:18:c3:e3:a5:bb:40:66:1d:
ef:65:7b:23:31:c7:8c:b9:93:56:7f:ee:78:82:e5:22:c2:f2:
83:5f:24:ce:59:3e:96:9d:d3:3b:78:0d:b9:38:4f:53:ae:2e:
38:7c:12:1a:b9:37:c0:15:e7:9f:58:21:d8:72:b5:cc:aa:a2:
4c:61:3f:e2:4c:29:10:6d:b7:3e:ad:37:86:17:96:83:af:c9:
fb:54:95:63:af:f7:fe:50:00:a2:d5:10:11:4f:d9:2b:29:fc:
e8:9f:fd:b0:43:43:44:36:15:8f:5b:c8:b9:b8:7e:ba:d4:17:
8c:5a:68:d3:89:ec:f3:06:e1:fb:45:71:99:f0:2f:3e:2d:79:
e8:1a:53:23:df:ff:88:85:7c:a7:ed:9a:2b:91:30:ca:3c:c4:
e8:ec:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:50:02 2026 by rpki-client