Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: wFPrlP4SEwyKqBGbz7iCKM+2tjqGOVz+Z349cCeJfHM=
Subject key identifier: C9:55:53:6D:72:08:20:CC:9A:70:4F:05:29:21:B8:77:53:A7:D8:E9
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7690D8B0BAD0D12BD1BD83D09885A40AA60E73EC
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219105.roa
Signing time: Wed 29 Jul 2026 11:08:37 +0000
ROA not before: Wed 29 Jul 2026 11:03:37 +0000
ROA not after: Wed 28 Jul 2027 11:08:37 +0000
asID: 219105
IP address blocks: 212.17.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:90:d8:b0:ba:d0:d1:2b:d1:bd:83:d0:98:85:a4:0a:a6:0e:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 29 11:03:37 2026 GMT
Not After : Jul 28 11:08:37 2027 GMT
Subject: CN=C955536D720820CC9A704F052921B87753A7D8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:ad:f3:30:d0:c5:64:cc:06:72:ec:28:50:
b3:11:ba:4f:10:6b:45:e2:78:a6:05:bb:91:fa:b8:
c5:f9:2d:d0:8a:9a:40:90:bf:b4:a8:32:62:a8:17:
bb:51:53:23:e5:e0:52:56:d0:ec:1d:da:95:b6:2a:
52:f6:bc:4d:37:01:7d:a2:27:7e:4a:ee:a9:c1:6c:
65:84:b0:80:9c:4d:fc:67:d1:0c:a3:85:1b:07:ce:
65:29:e0:4f:84:44:ba:e9:eb:0c:5b:1c:a7:1a:69:
2b:06:b8:d2:d3:6c:81:32:d8:ec:16:e9:a3:72:ff:
9f:1e:f6:45:8b:49:28:fc:c8:0a:7d:ac:67:aa:33:
6f:28:33:63:15:f5:0d:9a:2b:8c:48:87:a3:5a:c3:
37:93:84:7f:fa:c3:e3:3a:eb:18:3a:ba:f8:3c:14:
7a:7e:0b:74:8e:d5:53:d1:17:e6:99:3d:0a:70:91:
0a:43:00:e9:97:df:84:b0:06:f4:69:a0:ad:b3:b4:
d8:d3:01:bd:6a:4f:a7:36:d7:20:32:47:01:5a:06:
e4:8d:b3:90:0b:25:f9:f7:76:f0:7b:41:9d:37:3e:
99:03:e4:63:e0:94:7e:de:09:5f:b7:a8:26:7a:88:
e4:3a:c3:69:9d:b0:c6:05:c6:d4:f7:c1:8a:ba:c3:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:53:6D:72:08:20:CC:9A:70:4F:05:29:21:B8:77:53:A7:D8:E9
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9a:16:57:89:00:ce:ef:90:6a:ff:79:cb:54:6b:c0:6c:d7:
b8:fc:d7:2e:34:ed:88:8b:69:07:e7:a0:4e:76:2c:68:62:94:
bc:9e:dc:43:d7:b5:f1:f7:3c:7e:a3:21:8e:25:10:0e:06:06:
1e:29:3a:08:8a:1c:4b:a7:03:3f:c8:29:0b:a6:98:99:32:bc:
a5:f9:1e:2e:d3:1b:35:9b:82:da:c2:94:34:e4:ed:c4:1c:f1:
02:93:f5:fb:64:38:c8:ff:79:eb:0e:d9:b3:de:6c:26:7a:94:
e8:a3:03:cf:d1:cf:cf:04:36:8b:4d:ff:5b:aa:85:79:ab:63:
b7:25:a4:cd:f8:41:1b:d5:55:c4:02:f2:69:b9:c8:be:fd:26:
9a:a5:83:06:08:1f:d8:0d:5a:d2:a3:b6:0d:55:3e:2b:4c:4c:
a1:84:48:bc:13:bb:ff:b8:52:7e:c3:17:ba:f4:f6:76:f7:91:
71:c1:d9:10:79:54:c2:ae:86:3c:35:2c:40:19:79:ec:85:a6:
a1:83:96:ad:ce:41:bf:fa:99:c2:3a:fd:37:3e:f9:19:89:a4:
3a:46:d1:d0:e5:36:b9:48:5e:f6:0f:bf:0d:9c:c2:fb:b0:75:
0c:6d:58:27:00:cd:11:87:fa:17:99:3b:25:36:cb:21:3f:fc:
a4:63:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:41:07 2026 by rpki-client