Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS19429.roa
File: AS19429.roa (raw, json)
Hash identifier: MOJDEFsxIGPKn08kavJSaKsfq/WTlf7gy32ERKiA6Jo=
Subject key identifier: D7:7F:86:5F:BF:09:02:89:64:92:75:2A:72:63:11:7C:9E:F8:D6:D4
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 277B6F90120D233132A23122514F7A7DB3C1492B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS19429.roa
Signing time: Tue 06 Oct 2026 02:27:10 +0000
ROA not before: Tue 06 Oct 2026 02:22:10 +0000
ROA not after: Tue 05 Oct 2027 02:27:10 +0000
asID: 19429
IP address blocks: 82.139.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7b:6f:90:12:0d:23:31:32:a2:31:22:51:4f:7a:7d:b3:c1:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 6 02:22:10 2026 GMT
Not After : Oct 5 02:27:10 2027 GMT
Subject: CN=D77F865FBF0902896492752A7263117C9EF8D6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:53:f9:12:60:39:26:60:6e:1d:c5:2e:0b:
a3:cb:31:f4:dd:d8:37:ca:2f:c6:4a:e6:3e:a8:62:
a3:d7:e1:1d:c8:d6:f1:ad:80:b5:f1:11:71:87:f6:
fc:2c:a3:4c:cb:59:47:e3:f4:d2:f3:37:ba:5d:29:
56:0c:14:31:9b:42:5a:c8:5d:5a:d2:72:a6:3c:0f:
82:c9:a5:8a:0f:26:91:2b:cf:2e:20:70:2f:c3:c6:
6a:d3:0b:2d:23:80:32:13:ca:2c:b4:a0:a1:40:75:
37:0d:d7:18:de:72:b1:d4:9e:e7:57:88:9d:1f:76:
91:4c:95:5c:8c:6b:5c:87:21:da:6b:4c:74:7b:da:
85:72:82:16:e6:6d:f8:54:20:fb:97:7d:93:ae:82:
4e:0b:bd:c7:83:e7:a0:27:ef:24:54:db:b4:af:8d:
93:c3:f4:e6:c0:6d:d4:96:82:09:1a:fe:7d:b9:80:
a6:70:e3:1d:7b:59:5b:3c:23:2c:b5:09:b5:34:b1:
a2:2c:c1:6f:56:4f:68:30:1e:34:79:8f:c3:f1:d0:
e9:48:56:23:e1:7f:46:b1:fc:4b:2b:c9:dc:0b:85:
41:b0:e2:e0:d8:47:bf:55:c7:c0:e9:2a:ec:d0:6f:
3a:c7:e5:76:be:8a:84:15:ae:fd:1f:61:54:94:a2:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:86:5F:BF:09:02:89:64:92:75:2A:72:63:11:7C:9E:F8:D6:D4
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS19429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.232.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d2:7a:c2:33:03:39:53:61:76:83:27:7e:1d:ab:48:1f:fe:
36:13:62:39:3c:77:39:48:b7:42:e8:23:1d:39:e8:8e:bb:0c:
dc:33:0f:d9:94:4b:30:0e:2b:f9:2a:99:d0:2b:d5:b5:71:4c:
21:e3:f8:69:89:dc:5e:ea:54:a5:e8:1c:7c:d7:cb:02:5a:d4:
22:76:54:e7:8b:15:3c:58:6b:db:fd:94:e9:a4:cb:6f:20:4f:
f8:d5:eb:33:1f:0a:80:47:af:63:b9:fb:8b:3c:fd:6b:84:cf:
e0:d5:3d:4d:41:3f:c6:2a:2a:cd:1f:31:0d:1b:b4:de:4a:0c:
c9:43:b9:b5:0d:03:66:fa:cd:e7:f9:6d:d3:09:cf:38:0e:c3:
6e:e2:df:f9:5f:dd:63:79:0c:f0:18:a6:e2:cc:44:d2:7a:cf:
db:cb:79:02:6e:c0:48:14:40:7a:6f:b8:cb:84:5c:f3:5f:fb:
2f:e7:e3:4d:6b:c6:4e:d4:49:a0:e2:fb:c5:75:1f:76:11:ab:
d0:2f:2e:49:32:b4:c4:55:6c:96:06:75:87:53:83:71:a0:4b:
04:60:00:54:21:19:6d:d7:fc:e1:9e:23:6e:2f:da:54:19:6e:
ef:f7:02:59:88:86:e6:25:f2:fa:44:ca:7c:cf:a4:47:07:b2:
f0:66:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:09:58 2026 by rpki-client