Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: R/K167eN585ldCnPomcbxyXDdDjDttTkJvt+4QlEf/Q=
Subject key identifier: E1:7D:EC:D4:EE:D0:B6:5F:5E:FE:94:29:F5:E5:0C:DB:7B:D3:91:88
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 647FBD6CFD29CEA45DE8FCC3E28C4E0E7A26CF6F
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219393.roa
Signing time: Thu 01 Oct 2026 15:46:42 +0000
ROA not before: Thu 01 Oct 2026 15:41:42 +0000
ROA not after: Thu 30 Sep 2027 15:46:42 +0000
asID: 219393
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7f:bd:6c:fd:29:ce:a4:5d:e8:fc:c3:e2:8c:4e:0e:7a:26:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 1 15:41:42 2026 GMT
Not After : Sep 30 15:46:42 2027 GMT
Subject: CN=E17DECD4EED0B65F5EFE9429F5E50CDB7BD39188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:bb:38:07:95:58:38:8b:e5:c6:97:e3:bc:
91:e8:a9:52:5d:bf:f6:59:d6:f1:8c:a5:25:b9:43:
5c:de:a8:8f:23:65:a2:6a:39:df:7d:c7:21:7f:69:
d7:79:e7:cf:83:64:c1:25:39:07:5a:91:4c:45:c3:
6b:ad:66:0e:6b:83:2e:72:eb:b5:88:fc:54:c3:9f:
fd:24:6e:95:f8:89:96:c1:43:d3:93:9e:f5:fa:31:
8d:69:40:c3:65:1c:fb:bd:c8:4c:0f:8c:b1:10:57:
98:2c:ff:52:47:0b:c6:0f:3c:bf:ac:92:16:79:62:
79:51:66:ab:cc:5b:74:2b:97:28:f1:c9:1a:7e:39:
e9:df:51:f3:8f:a4:4b:c4:5b:6f:e9:2b:25:f3:2f:
1a:bf:bc:f8:c5:9c:3d:e1:b5:21:12:4d:52:14:8e:
b0:51:9e:4f:0d:39:a9:bd:cf:fd:27:a0:60:59:e6:
c6:eb:5d:63:a9:f4:f4:f4:4a:4e:76:f4:a4:26:17:
80:02:2a:33:7a:c2:57:4c:c6:78:49:90:fc:8d:08:
c6:e8:fa:a3:60:06:49:87:12:e7:2f:a7:72:2c:80:
76:90:fa:45:a9:53:d9:a0:30:58:b2:65:d5:8e:c4:
f4:32:8b:68:62:ca:cf:53:b6:c6:d7:87:36:4c:63:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:EC:D4:EE:D0:B6:5F:5E:FE:94:29:F5:E5:0C:DB:7B:D3:91:88
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
26:69:71:91:a2:9f:21:31:77:45:e5:47:74:f4:ea:9c:c1:a4:
51:4c:e6:cf:3c:ff:b2:3c:0d:51:7c:22:16:db:56:67:dd:d7:
dc:e5:3f:d4:1f:63:3b:04:40:3e:b5:b6:b6:89:0d:d4:6e:93:
af:f5:d3:6d:09:bb:2e:69:26:32:64:00:a7:f2:2e:f7:df:7b:
d4:80:64:ed:72:f7:a2:32:12:97:d8:c9:08:29:db:f1:c0:94:
0b:c1:51:aa:5c:15:f5:7e:d4:26:cb:87:91:59:d6:17:d8:51:
ab:44:ae:ea:c1:72:bd:d1:b4:2e:4e:ab:2b:6f:68:53:3b:6d:
e6:39:81:7f:7a:25:ad:fb:6a:13:f1:82:5a:bf:d6:17:e9:14:
32:d4:fb:af:24:4a:37:12:55:ca:c3:0a:da:ba:0b:df:7e:71:
a2:73:05:2c:a6:e5:95:77:7c:6c:6e:7a:22:33:a6:7e:8d:ff:
9a:67:3c:d8:26:28:44:2f:b7:5c:b6:ac:ef:8e:6d:f9:8e:67:
be:43:22:d5:77:75:66:5c:12:03:b7:a4:6a:49:68:a4:78:62:
00:87:98:65:93:40:a0:92:e6:ee:74:f5:f8:95:20:f6:1a:62:
09:42:58:99:16:01:05:53:ca:da:27:14:40:3b:bc:21:ac:c7:
d3:06:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:43:57 2026 by rpki-client