Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219217.roa
File: AS219217.roa (raw, json)
Hash identifier: fxg/BZj5g7AKYTzjHEQ3dTbX49zcxtqWB630qxBN1Cg=
Subject key identifier: 51:88:E6:B9:C2:B4:F0:EB:38:BC:6C:09:51:12:04:9F:23:B3:75:27
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3CA7832A23A64379FB686617430C317C573C6999
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219217.roa
Signing time: Wed 29 Jul 2026 14:19:51 +0000
ROA not before: Wed 29 Jul 2026 14:14:51 +0000
ROA not after: Wed 28 Jul 2027 14:19:51 +0000
asID: 219217
IP address blocks: 82.139.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a7:83:2a:23:a6:43:79:fb:68:66:17:43:0c:31:7c:57:3c:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 29 14:14:51 2026 GMT
Not After : Jul 28 14:19:51 2027 GMT
Subject: CN=5188E6B9C2B4F0EB38BC6C095112049F23B37527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:72:6a:0f:c0:8b:80:16:1a:d5:02:7c:ee:
02:2c:6f:69:0a:22:99:cc:36:86:48:32:3a:4f:c1:
0c:3a:f0:b9:1b:1b:d2:81:21:6a:07:1f:3f:cb:8d:
92:07:9d:0e:d2:b7:95:ee:ec:d1:f2:2c:e4:47:05:
32:09:82:d2:22:49:a6:c7:bc:82:ad:fc:e5:b4:48:
f6:24:2b:8e:27:f6:90:e4:52:bc:67:44:8e:97:c6:
ad:a0:15:7d:66:9e:ca:14:ac:f4:23:9b:b3:b0:25:
50:23:61:81:f6:00:8e:15:93:dd:be:e8:ec:e6:f8:
a9:a8:de:70:0c:35:8d:17:fe:b2:05:0a:1f:c1:41:
71:c9:39:96:9c:9d:cf:94:89:9e:34:63:ee:59:d5:
de:cc:3f:82:14:5d:a4:27:2e:27:52:8a:af:4f:97:
7c:5f:46:9b:12:f8:8f:3a:a5:55:d1:da:38:9d:d0:
d1:e8:1c:fc:e3:d7:6b:7a:b9:39:89:99:a6:d4:0b:
79:81:75:8b:37:83:d5:24:a5:c6:23:a1:fa:c6:31:
49:d7:e6:21:fc:03:36:a9:2b:01:10:dc:c8:f5:a5:
6c:a0:12:34:ca:45:4c:5b:3c:d6:d4:37:66:60:60:
80:19:8c:1b:36:c3:31:f5:ae:d2:a4:20:6c:55:0d:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:E6:B9:C2:B4:F0:EB:38:BC:6C:09:51:12:04:9F:23:B3:75:27
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.227.0/24
Signature Algorithm: sha256WithRSAEncryption
94:94:fc:07:a0:4c:ca:70:95:2d:4e:3c:1a:19:e9:0c:55:ae:
3b:d7:74:d9:10:8b:19:68:45:17:44:1b:b2:d5:23:a9:ab:f8:
b8:de:f2:05:e1:f6:1a:dc:90:84:76:1b:02:d2:7a:50:69:d2:
4d:d1:4a:5f:6b:73:cf:52:5c:e6:65:58:4e:59:a0:69:ef:06:
cb:a6:56:56:ca:50:d4:c4:6d:e0:36:04:02:ee:e8:09:db:63:
53:68:0c:8f:c2:84:de:4d:c8:77:83:d6:fe:24:42:27:a6:c9:
a8:c7:c7:7b:17:72:b2:c4:6f:5b:87:89:58:7a:c7:41:da:67:
62:71:9d:80:1e:40:61:73:fb:cc:f9:05:f3:0d:64:fa:2b:38:
15:30:04:e1:38:3a:a8:26:fe:9e:df:00:37:1e:b5:07:d8:fc:
bb:a3:94:b5:c5:9c:65:4c:66:20:fa:2c:d7:9d:cc:e1:e2:cf:
fb:ae:ec:51:f5:77:50:7a:2b:e3:61:ee:52:6c:5f:07:9d:4b:
44:55:65:51:ee:50:d9:43:83:25:59:5d:c8:db:34:c6:7b:84:
9f:1f:3d:18:f4:95:c1:f4:7b:48:ff:48:5b:42:9d:2a:be:d8:
97:e9:f0:e5:a6:fc:c0:5e:9b:84:9c:2b:fe:d6:06:43:f8:41:
5e:e5:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:32 2026 by rpki-client