Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219068.roa
File: AS219068.roa (raw, json)
Hash identifier: 8TOB+PDuhdZb4X2qUK+MY+VKkgV67i/JW8EX9nXVQzQ=
Subject key identifier: 09:B1:EF:FF:8A:81:F8:C2:96:A4:E6:C6:63:37:2A:42:62:6C:B7:17
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4C04BB5FE0252547D4579906E894E1683B50BD3D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219068.roa
Signing time: Thu 20 Aug 2026 04:11:24 +0000
ROA not before: Thu 20 Aug 2026 04:06:24 +0000
ROA not after: Thu 19 Aug 2027 04:11:24 +0000
asID: 219068
IP address blocks: 191.101.97.0/24 maxlen: 24
191.101.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 03:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:04:bb:5f:e0:25:25:47:d4:57:99:06:e8:94:e1:68:3b:50:bd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 20 04:06:24 2026 GMT
Not After : Aug 19 04:11:24 2027 GMT
Subject: CN=09B1EFFF8A81F8C296A4E6C663372A42626CB717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:62:34:2d:ff:f6:df:9f:7d:76:5d:a3:45:
64:e2:51:4c:ab:7e:ee:a2:28:b7:6a:ea:14:bb:b8:
35:4c:fe:f8:ad:e0:4f:7d:1c:82:80:ee:b0:39:85:
99:5a:c1:ad:40:e2:a9:3b:73:74:bf:f1:9b:e1:57:
fd:29:9c:59:1d:f2:2b:39:6d:f9:54:e3:29:47:fc:
91:2e:12:bd:6c:01:69:82:ec:20:b9:96:83:ba:68:
47:09:6a:ef:3d:ec:bd:cf:a8:64:4c:06:ce:f1:3b:
ad:cf:4a:17:a9:a5:f9:62:a8:6a:7c:de:4e:f7:e5:
73:d1:16:24:a2:18:1b:58:4c:cb:98:0f:4a:26:b3:
a6:cc:70:b0:68:4c:5f:75:b5:78:f6:97:86:84:1a:
29:22:15:e4:c4:79:cb:a9:fe:a5:f2:db:6b:84:5f:
99:1e:7a:cb:79:f6:c4:28:0c:c1:83:84:34:78:c5:
f0:46:0e:c3:4a:dc:44:9b:a8:3b:8c:89:b0:40:38:
7f:8a:06:78:88:53:71:3a:e0:53:33:0a:ca:f8:2a:
c4:61:fa:8f:49:e8:d0:bb:3d:ea:c8:c7:2f:7b:6b:
5b:48:28:89:e4:c8:60:dd:cc:9f:dd:38:be:7b:92:
5c:51:50:c2:c8:bc:92:1b:0a:f3:26:b4:34:83:2e:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:EF:FF:8A:81:F8:C2:96:A4:E6:C6:63:37:2A:42:62:6C:B7:17
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.97.0/24
191.101.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d1:f4:a1:c7:f0:fe:ef:90:e3:3a:8e:dd:6c:16:e5:14:19:
a3:eb:65:c6:12:94:3a:2b:41:01:39:3c:ba:a3:bd:d4:1c:a3:
1a:d1:29:4c:ef:6d:53:d4:5f:d8:0e:08:c1:3b:ca:3a:f6:83:
5d:14:7c:1c:79:9f:42:a9:d5:00:af:77:a2:5a:47:87:fb:bb:
b2:66:20:c6:98:80:9c:52:0e:32:98:5f:ad:a3:f7:b2:35:5c:
06:4c:ad:8a:d4:92:9f:d8:42:24:09:18:33:5a:d8:f7:c9:a8:
97:69:94:1d:b6:2a:b1:c1:1d:9f:e3:77:f6:ce:fb:bb:38:e1:
b0:d3:1f:b3:db:c5:ab:e2:8d:a7:a8:00:76:7a:1e:35:e2:a3:
92:2b:2c:d3:4e:1b:78:06:cd:79:37:8b:b5:00:ef:75:86:a9:
2a:04:12:85:a8:9c:08:5e:df:3d:65:ad:72:27:7f:e5:f1:d5:
01:2a:e8:69:90:45:18:0b:84:63:0c:b8:ab:d3:b3:29:ed:3f:
92:a9:0b:15:23:ae:4a:9f:5c:ef:2f:92:8f:1d:4a:b7:08:b5:
9c:5d:91:b5:78:4f:97:a8:72:54:1a:9f:89:cf:b5:09:90:f2:
29:04:e1:f5:61:ca:c9:c0:42:63:fa:db:3c:04:8a:3b:d2:4e:
9e:ef:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 10:35:38 2026 by rpki-client