Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: fEGFnCVR6mJafWmH8bioFbRtgi1XRf7LpHDsOBCSCv4=
Subject key identifier: B6:79:5F:4B:9A:6D:55:2D:2F:CB:F0:E2:D4:92:4E:56:38:A3:2B:1A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5BE746DD1D0C98A2AB2038021673B7BF4BEF027F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219105.roa
Signing time: Sun 11 Oct 2026 19:35:04 +0000
ROA not before: Sun 11 Oct 2026 19:30:04 +0000
ROA not after: Sun 10 Oct 2027 19:35:04 +0000
asID: 219105
IP address blocks: 179.61.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e7:46:dd:1d:0c:98:a2:ab:20:38:02:16:73:b7:bf:4b:ef:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 11 19:30:04 2026 GMT
Not After : Oct 10 19:35:04 2027 GMT
Subject: CN=B6795F4B9A6D552D2FCBF0E2D4924E5638A32B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:ee:a5:e1:80:b5:be:c0:9c:46:77:cd:db:
4d:68:2e:3e:d8:57:1a:1b:52:69:f4:c8:e2:1d:e1:
97:59:d4:6b:7e:f8:ef:42:86:5f:78:75:aa:27:e3:
68:fd:7a:c1:e8:d4:cc:ce:30:f2:3a:65:c9:92:b9:
62:d2:ea:a4:c4:32:ec:5e:38:d5:2a:f8:86:9a:c7:
d6:30:17:ac:3a:53:0d:29:72:75:4c:ed:29:5d:aa:
23:65:3c:94:94:37:e1:4d:0d:a2:05:75:35:b5:a3:
07:a2:a7:d9:8f:97:cd:b0:7d:33:60:74:9a:08:2a:
b9:2e:7c:a3:71:69:10:20:d4:d9:6b:23:9d:af:53:
74:d6:3a:f3:56:12:c5:e4:73:2a:e6:cf:57:21:43:
4e:b4:4d:7a:2d:9c:bc:bc:44:99:90:48:08:7a:50:
e1:ff:09:56:01:cc:94:b3:0e:e1:7f:65:36:63:82:
8a:ec:57:fb:e5:70:70:d8:38:f0:13:5d:b5:81:42:
4c:a4:7d:58:64:21:70:bc:6d:fe:a1:4b:31:c0:76:
63:14:79:5c:31:e2:e1:1b:b8:30:1a:07:9d:71:00:
af:b6:07:d1:69:4d:39:e9:14:61:e2:0d:b2:b8:ec:
92:f2:3f:48:9f:26:a2:c0:47:b9:1d:ff:22:e5:09:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:79:5F:4B:9A:6D:55:2D:2F:CB:F0:E2:D4:92:4E:56:38:A3:2B:1A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.204.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0d:fc:29:78:2e:bf:ec:f7:6d:e5:08:ef:f7:bd:d2:05:0c:
f2:08:d6:fa:18:89:78:4d:1c:0c:cb:50:1d:67:39:92:0d:8f:
07:71:38:9a:6e:14:9a:3a:7f:35:85:c3:02:fc:d2:d2:43:77:
8d:83:b4:6c:d9:85:88:7c:dc:9d:f3:8d:48:5f:51:13:63:e6:
6d:cb:64:ea:fc:50:51:da:72:72:07:27:e7:78:0f:7c:e0:36:
96:20:d9:f6:94:0c:be:37:4b:b1:88:0a:40:f7:aa:cc:5f:8d:
5f:ca:6a:c1:38:a9:1d:2d:ac:c7:62:9f:fa:1b:05:45:b0:f2:
c8:6e:1f:7f:3a:cb:82:73:15:8a:e8:a7:fc:07:6f:57:77:d8:
0b:73:31:e7:71:96:7d:c7:d3:5a:7a:72:a3:43:bc:1d:c7:77:
df:39:9e:43:28:0d:ee:bd:03:23:b0:2d:61:a1:07:68:2f:e7:
ec:df:25:90:45:37:b5:d1:84:c3:45:8a:40:07:d0:ba:68:96:
ed:86:d7:df:70:c1:20:fb:da:6e:56:73:24:9a:a4:b4:fc:5b:
19:83:d3:e9:c8:d6:20:51:70:d1:b2:ab:6a:33:ef:88:c0:58:
21:4d:15:33:09:cf:13:a3:d2:bf:44:97:f4:69:9b:17:10:de:
40:ba:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:30:52 2026 by rpki-client