Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219100.roa
File: AS219100.roa (raw, json)
Hash identifier: kZ7hkJ8vj0GhHVIhXYEdbTD6oI5b8H9DNRg/N9c9Xvw=
Subject key identifier: AA:C4:37:65:1E:15:B0:63:68:B9:33:D3:DD:BE:3A:AD:69:A6:75:1C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5CD43861F2AC8998CC04DAFD260FECED5055224C
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219100.roa
Signing time: Thu 01 Oct 2026 03:58:51 +0000
ROA not before: Thu 01 Oct 2026 03:53:51 +0000
ROA not after: Thu 30 Sep 2027 03:58:51 +0000
asID: 219100
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 19:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d4:38:61:f2:ac:89:98:cc:04:da:fd:26:0f:ec:ed:50:55:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 1 03:53:51 2026 GMT
Not After : Sep 30 03:58:51 2027 GMT
Subject: CN=AAC437651E15B06368B933D3DDBE3AAD69A6751C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:5b:86:8a:2b:e5:b8:cf:b5:6e:b5:47:46:
7c:81:70:b4:56:e5:f4:d7:65:b9:72:3c:02:62:8f:
09:f5:ff:fe:c6:83:75:56:2a:24:47:12:8e:02:cd:
34:46:ad:19:62:6a:37:b3:68:7d:6d:8f:4e:3b:be:
43:86:ad:ec:de:c2:65:95:72:9d:13:00:ad:b5:c6:
c9:a1:e7:53:1a:ac:b2:76:94:19:e9:ef:21:9d:3a:
55:1d:29:d9:76:e9:6d:a2:f5:8f:28:b6:2b:39:9c:
90:18:7b:85:aa:c2:20:a2:77:4c:40:f9:5b:26:4c:
78:29:f0:c7:11:f3:6b:be:a7:16:9a:c8:05:c6:6e:
cb:fc:1f:ec:31:95:2f:00:cd:dc:eb:65:9c:b4:a3:
cb:f1:ba:76:c5:18:b3:3b:1b:ea:0a:f0:68:d1:06:
be:e5:e0:b5:a2:dc:7f:46:8d:cd:52:56:cd:60:1b:
ee:2c:fd:56:e9:f5:03:43:11:da:6b:d9:72:cc:83:
2d:c1:20:00:9a:50:5d:f3:3c:8c:e6:1a:97:92:a0:
12:7d:27:32:f4:31:e0:e6:c1:a5:6d:74:41:57:ec:
34:f4:18:2b:e8:3b:21:b1:c6:e1:31:3a:05:99:94:
a1:cc:68:93:c5:cf:50:4a:93:1c:bc:f2:4a:55:da:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:37:65:1E:15:B0:63:68:B9:33:D3:DD:BE:3A:AD:69:A6:75:1C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
db:4a:3b:97:75:20:94:1a:c2:ea:5f:7d:87:74:85:99:5a:8e:
78:0b:a9:ed:5b:2d:c6:f3:e0:b0:f2:3d:fd:e3:d1:22:b1:97:
c2:1d:69:33:db:e1:53:5f:d1:47:2c:9e:05:48:ed:17:b3:50:
b8:f0:78:86:96:40:c2:b9:8a:3f:c2:65:f5:4a:fc:f2:69:77:
35:87:79:37:bd:92:e5:46:43:10:17:bb:81:84:ee:57:9b:ee:
85:4e:a5:01:21:c8:2c:d1:d4:82:b1:10:d5:70:9a:28:86:6a:
e0:4d:94:9a:70:71:d3:60:04:27:cc:0d:9a:c0:28:5e:da:1f:
38:68:06:61:15:f7:b8:45:eb:0d:27:82:44:c8:04:6a:62:d5:
fe:45:f4:98:0a:72:11:c6:e6:f3:b3:00:87:da:75:a7:b2:55:
11:de:0e:6e:bf:7b:4d:79:37:21:63:da:55:1f:ea:f8:57:93:
50:1e:f8:41:a3:46:86:56:66:63:04:3a:31:92:4e:d9:3e:3a:
85:8f:cc:b6:f7:41:85:64:49:87:87:49:f1:9f:26:c7:13:ae:
af:07:c2:47:81:77:13:3b:f9:cb:de:c5:8d:58:b1:68:5a:a6:
07:f0:70:9f:6e:0c:7d:7f:d2:d3:ce:92:d5:03:ed:09:d0:77:
8b:96:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:04 2026 by rpki-client