Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219394.roa
File: AS219394.roa (raw, json)
Hash identifier: pJIRUUbh159qANvuWK40EmpQQ0tejBhOLdo9MlRMXsQ=
Subject key identifier: DE:B8:41:11:06:76:94:BC:E2:90:B1:A9:79:C9:B9:7A:C8:3C:3F:DF
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5B880A9679AF5408A26E505B1F3EFBC58C16E33D
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219394.roa
Signing time: Thu 01 Oct 2026 15:46:43 +0000
ROA not before: Thu 01 Oct 2026 15:41:43 +0000
ROA not after: Thu 30 Sep 2027 15:46:43 +0000
asID: 219394
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:88:0a:96:79:af:54:08:a2:6e:50:5b:1f:3e:fb:c5:8c:16:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 1 15:41:43 2026 GMT
Not After : Sep 30 15:46:43 2027 GMT
Subject: CN=DEB84111067694BCE290B1A979C9B97AC83C3FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:db:58:73:4f:3d:c3:79:6f:e1:d4:35:e8:
40:b9:4a:45:96:5f:89:e1:1a:61:a6:6b:14:5a:4f:
d7:1b:56:f4:84:d8:7a:ca:90:0e:20:08:04:00:0b:
55:0a:1e:e1:d0:57:7e:34:08:f8:14:1f:4c:c0:b4:
28:8d:ae:29:61:3a:50:fa:10:72:cb:f2:47:6a:d1:
26:2d:2e:6d:59:e1:a6:8e:d0:9f:4e:ea:cc:d0:23:
bc:63:c6:57:8c:7d:9d:b1:b6:53:64:49:e0:72:36:
21:b4:a0:d7:3a:b8:ba:0e:c0:92:c4:78:cf:ec:bd:
7a:ed:38:d3:2f:d6:ef:d6:dd:50:82:a2:84:3b:e8:
ab:36:b5:a3:22:5c:5b:d1:23:fd:c0:51:b8:c5:51:
0d:72:c8:49:99:fd:40:88:71:1b:6e:7f:73:b6:e8:
04:f3:6c:23:46:33:ce:66:89:bb:68:71:ef:36:e2:
c5:cb:ff:1f:10:5e:eb:d9:16:67:0e:59:99:49:80:
6e:bd:38:68:98:ad:31:ad:f1:f1:1d:10:26:ad:2a:
63:b3:fc:4b:a9:5e:88:29:24:a9:d7:98:ad:fc:da:
94:c3:53:cc:a4:42:2d:9c:6d:97:dd:51:a3:54:6b:
96:cd:1e:27:1b:03:f3:fc:54:96:88:83:9b:95:34:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:41:11:06:76:94:BC:E2:90:B1:A9:79:C9:B9:7A:C8:3C:3F:DF
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS219394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fb:da:3a:29:b1:09:c3:26:ea:42:66:5d:e4:53:4d:bd:d5:
4c:8f:08:32:8c:02:59:d2:7b:50:48:4b:a2:2f:e1:99:22:5a:
d4:02:a3:75:47:89:aa:a9:11:21:1a:44:26:5c:55:95:32:8b:
76:86:ef:0f:f9:43:70:53:c9:a2:91:31:78:95:03:e6:bb:3f:
74:57:eb:0b:06:7a:5d:39:46:be:79:18:f8:b1:ca:3c:07:b6:
7d:65:b3:bd:c8:50:5a:c4:2d:35:c0:fe:c3:1b:89:68:9a:7f:
60:97:46:16:c4:ba:b2:16:5d:6d:b9:5e:58:ad:59:e5:71:2e:
53:81:ef:23:5c:7f:3a:35:21:9b:54:95:0f:40:b0:d5:0d:fc:
4f:c0:6d:2c:fe:f5:cb:ed:e1:2c:55:f5:bb:6b:3a:4f:da:78:
08:1f:05:f6:91:86:87:72:6d:da:0d:9a:a4:76:3f:4d:0d:7a:
38:72:87:68:a1:19:97:3a:2d:a1:8f:19:ff:db:8b:6e:69:3f:
f5:1b:36:d5:18:4e:67:79:c3:1b:b4:e2:06:bd:64:5b:7a:e3:
10:0c:b2:88:78:54:22:7a:19:4f:35:66:dc:42:79:2b:ff:c3:
23:7d:6e:58:45:0b:50:28:67:d2:35:d4:a1:b9:2d:22:6d:5d:
a1:7b:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:43:56 2026 by rpki-client