Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19148.roa
File: AS19148.roa (raw, json)
Hash identifier: xZ4dTBTgF3sTn/ZnNqQjaQDmfjeQ+Sjau0bGPkhwtg4=
Subject key identifier: F9:73:CC:1F:17:2A:47:C8:EA:27:C9:9B:47:5D:AC:60:73:73:D2:B7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 26BD164B09424E9D09FFD683C158788971CEA712
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19148.roa
Signing time: Mon 10 Aug 2026 10:49:21 +0000
ROA not before: Mon 10 Aug 2026 10:44:21 +0000
ROA not after: Mon 09 Aug 2027 10:49:21 +0000
asID: 19148
IP address blocks: 191.101.26.0/24 maxlen: 24
191.101.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bd:16:4b:09:42:4e:9d:09:ff:d6:83:c1:58:78:89:71:ce:a7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 10:44:21 2026 GMT
Not After : Aug 9 10:49:21 2027 GMT
Subject: CN=F973CC1F172A47C8EA27C99B475DAC607373D2B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:43:a0:1d:cc:d3:9c:56:d2:7e:10:7c:52:
b2:79:b0:9e:b2:13:65:23:39:c1:36:9a:54:68:ad:
16:49:52:6e:1b:e8:4e:fa:bf:bd:62:fe:d1:59:38:
30:ba:82:23:ca:f2:0d:3b:4b:b1:ee:15:a9:1d:54:
cc:92:a6:6f:60:a9:0a:dc:12:29:fe:c2:9e:3c:33:
46:62:25:7c:4e:be:80:58:3e:21:5d:9e:0c:bb:35:
48:ce:5f:90:e6:5b:da:9e:8c:0d:3f:1a:a9:42:86:
db:42:c6:d9:d3:bc:27:be:82:95:6a:a4:ef:bb:75:
5e:50:54:ea:f9:e9:c2:b5:99:32:a1:e7:4c:7e:61:
c2:b6:87:74:1d:fd:0a:fd:5f:60:51:ca:17:5b:1e:
87:84:3a:6d:35:da:ed:c6:55:a3:a7:5d:ae:a5:5a:
56:d2:46:eb:5c:5d:9f:6b:ff:25:91:2b:11:2b:30:
ee:96:a4:b4:12:d2:e4:8f:2b:b2:35:3f:c9:c7:97:
7e:81:58:dc:4d:93:c6:00:3c:09:59:ce:7d:4b:b9:
34:a5:32:23:a0:a1:f8:0d:6d:05:1b:bc:11:57:76:
ad:db:80:f1:1c:2e:9c:54:72:3e:6e:c1:59:4f:2c:
21:17:91:5a:88:0f:27:16:71:9b:90:7a:7d:2e:91:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:CC:1F:17:2A:47:C8:EA:27:C9:9B:47:5D:AC:60:73:73:D2:B7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.26.0/24
191.101.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:03:bd:c5:de:3b:e4:d1:c3:4e:fe:5e:ac:ac:7b:bc:62:2f:
f1:2a:c8:a8:9c:09:b8:d2:6a:42:b4:cd:99:7d:e0:dd:0d:4d:
e0:b4:27:ca:7c:7e:58:bd:f1:f1:3c:1a:81:b8:6c:86:ad:c2:
00:de:ad:c1:79:b7:c9:7f:7c:ed:e4:35:d9:f7:65:40:43:36:
de:a9:ca:3c:64:3c:8b:62:f1:c9:8d:86:b6:04:b6:c0:aa:ea:
9b:e2:58:81:9a:ff:9e:ef:4b:7f:bc:fc:8e:15:dc:1a:c6:2b:
62:79:f5:c0:bc:71:a3:a9:88:4b:90:5d:f2:0c:1c:41:5e:8d:
5c:a1:f3:e0:47:cf:c3:0e:05:7b:f3:b5:0c:36:81:62:76:40:
01:15:43:77:a1:39:1d:2d:c7:8d:a5:a0:da:85:a5:99:81:a6:
64:92:63:0d:cd:db:3f:19:d7:5f:cf:6c:8a:89:f5:13:64:61:
f3:34:8a:3b:0e:d9:db:57:6a:3e:3b:ab:5e:6f:45:fe:fb:27:
6b:ab:6c:0c:74:69:5a:69:18:e9:a1:aa:5b:66:5a:31:3d:55:
15:64:9c:78:80:fc:2b:54:7b:34:fb:05:cc:67:74:d1:e3:f9:
d7:73:4b:19:67:b9:a1:3f:3e:19:3a:07:b2:94:56:e1:70:e6:
9b:a7:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:35:43 2026 by rpki-client