Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: bu3+AcJRX+5BG9MaY76UCOIJ4AQo503uswbtvQMK224=
Subject key identifier: 3F:CC:7A:95:23:A4:F4:30:15:9A:C0:61:D0:0D:1D:4C:6F:1E:AF:22
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 252DBFF5C9F81B852415DE5E60F225C46BF0DB51
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
Signing time: Sun 23 Aug 2026 11:19:08 +0000
ROA not before: Sun 23 Aug 2026 11:14:08 +0000
ROA not after: Sun 22 Aug 2027 11:19:08 +0000
asID: 219427
IP address blocks: 143.14.171.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
168.222.52.0/24 maxlen: 24
168.222.73.0/24 maxlen: 24
168.222.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2d:bf:f5:c9:f8:1b:85:24:15:de:5e:60:f2:25:c4:6b:f0:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 23 11:14:08 2026 GMT
Not After : Aug 22 11:19:08 2027 GMT
Subject: CN=3FCC7A9523A4F430159AC061D00D1D4C6F1EAF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:6a:7f:27:05:6c:e2:65:53:09:08:92:0e:
ab:67:aa:b8:6a:8d:bc:6c:6d:89:c7:23:4f:13:89:
93:b1:ab:e2:d7:f5:83:1f:2c:8f:da:c1:4d:41:81:
8b:95:0f:d6:97:ab:66:83:c4:5b:2f:c9:14:6f:41:
2f:a0:d9:01:c7:28:ff:d1:4a:0a:9f:62:9e:1f:49:
ef:77:b9:32:01:4f:5c:9f:31:91:8f:17:eb:f1:9b:
76:e3:4d:bb:89:d0:15:18:c7:77:99:b5:fb:c4:d2:
5a:62:ab:2b:b8:43:6b:3e:24:55:28:cf:6d:f1:bf:
a3:07:bf:ce:a6:b8:d4:ea:24:8e:2a:4f:87:49:e5:
7f:3d:33:c1:30:9d:47:21:cb:96:be:4a:47:61:f0:
00:62:70:ee:4f:52:9e:b4:cb:57:60:70:1f:a2:7e:
19:73:4d:2d:5a:a5:0b:69:a9:81:80:8e:2b:48:77:
4e:0d:11:f8:01:af:3c:00:18:58:26:e9:99:d9:08:
97:be:06:ca:f9:dd:78:aa:d1:1a:67:77:2f:d8:6d:
ae:8e:e8:fa:e1:ae:e9:d2:9a:4d:2f:78:dc:6e:a9:
c5:6b:0d:62:41:81:d8:bf:56:cd:b5:51:95:4f:1d:
72:78:60:71:80:9f:e5:43:fd:2f:82:a6:34:44:45:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:7A:95:23:A4:F4:30:15:9A:C0:61:D0:0D:1D:4C:6F:1E:AF:22
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.171.0/24
155.117.86.0/24
162.141.8.0/24
168.222.52.0/24
168.222.73.0/24
168.222.92.0/24
Signature Algorithm: sha256WithRSAEncryption
45:58:2f:d7:c4:38:59:bb:16:7f:35:79:05:e0:21:d2:2e:2d:
2d:8d:83:f3:37:64:fc:ed:92:af:7d:c8:59:c4:ee:78:ba:8e:
ef:1f:87:2b:01:cf:91:07:bc:be:0d:1d:80:d8:8d:68:a7:75:
bb:dd:4d:73:cf:f0:37:22:9b:bf:a4:c7:4c:3c:dc:0d:64:ba:
df:a3:67:48:62:5a:ec:22:52:0c:e3:d6:59:10:3d:8f:7d:6e:
da:4e:06:9c:9f:4d:90:0a:c1:ef:8c:f5:a6:6d:51:07:c6:f7:
0a:ce:82:f6:a0:2e:59:1c:8c:f2:11:2c:02:6e:ba:aa:5d:65:
4f:c6:2c:4d:18:57:3f:80:f1:13:e0:c6:7b:18:e8:46:92:55:
6a:9f:06:8b:35:b9:bf:75:90:88:a5:ff:f0:84:c7:9a:7e:b5:
ce:0a:78:8c:0f:56:37:3b:45:1f:e0:e8:2e:83:5b:5c:f4:d5:
f8:4a:3e:b0:db:3a:10:b0:e5:ef:80:cf:15:16:46:4c:a9:a9:
c5:88:22:6b:ee:c9:ab:ae:65:c8:2f:29:b9:fd:1a:18:c8:29:
ba:76:a4:8c:b8:53:79:0e:fc:ba:11:92:12:10:f2:58:ac:1b:
b2:46:d0:30:b5:d2:83:80:dd:58:cd:ee:14:06:cd:14:8f:0c:
8a:84:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:18 2026 by rpki-client