Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219182.roa
File: AS219182.roa (raw, json)
Hash identifier: odaceVF2NCtQ3DB8cc5xDYBUcW93Hl4+UmWzLNY1V6U=
Subject key identifier: F1:51:BF:EC:BC:DC:CE:94:FE:70:F9:33:71:7E:F6:40:E0:A5:3D:A8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 19FD4DA6D075AFC43CB9BA9FDA6A800FE66E4811
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219182.roa
Signing time: Tue 01 Sep 2026 04:04:31 +0000
ROA not before: Tue 01 Sep 2026 03:59:31 +0000
ROA not after: Tue 31 Aug 2027 04:04:31 +0000
asID: 219182
IP address blocks: 185.139.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fd:4d:a6:d0:75:af:c4:3c:b9:ba:9f:da:6a:80:0f:e6:6e:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 1 03:59:31 2026 GMT
Not After : Aug 31 04:04:31 2027 GMT
Subject: CN=F151BFECBCDCCE94FE70F933717EF640E0A53DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:1f:1a:97:54:9e:61:c9:87:3f:e8:1a:16:
ae:c4:d2:a1:5b:7b:c4:ef:77:f2:a5:3e:22:d7:e4:
55:83:f5:a8:c8:01:9b:3b:00:29:8b:18:e7:40:da:
d0:46:50:03:75:bd:19:ba:30:8a:2b:92:a3:82:86:
f0:37:91:c3:55:c1:e5:0a:61:ed:73:69:64:0f:81:
5d:49:27:78:e1:12:91:84:b0:db:44:b7:f5:7e:e1:
56:08:1b:97:7a:60:23:6c:51:b0:86:18:ef:e6:b5:
c1:ec:d8:c5:18:d2:9c:42:8c:fd:b6:08:e8:14:2f:
8a:b2:a4:5a:e3:f3:dd:d8:d1:60:e0:2e:44:57:3f:
bf:d9:85:5e:47:b1:27:a4:12:ed:b3:20:3d:d4:30:
92:20:18:b0:2c:d5:ed:16:2d:4e:44:c0:ba:61:93:
92:a1:32:b8:6a:a2:b5:d7:76:6a:32:72:27:ec:28:
96:1f:d6:d5:63:ba:8a:40:de:f6:e7:ae:1c:62:38:
55:8d:5c:6e:25:6b:99:4a:a7:ba:d3:58:8d:a5:11:
c2:44:a0:1a:34:2e:6b:5d:d2:c9:72:9e:52:a2:48:
c7:34:8d:a9:95:d7:25:b1:cd:05:41:99:2a:52:70:
af:0d:f6:af:c5:1a:bb:70:e3:6f:3f:06:67:bf:29:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:BF:EC:BC:DC:CE:94:FE:70:F9:33:71:7E:F6:40:E0:A5:3D:A8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS219182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e5:7d:2f:59:1d:13:1c:94:f2:07:08:b5:13:d1:06:aa:df:
6d:ba:8f:e0:cf:1e:19:25:f1:f7:b5:96:af:49:91:55:ba:2e:
c0:b6:87:c8:55:42:36:e7:99:d8:eb:d9:07:9d:08:7f:45:76:
41:00:92:5d:d5:8c:71:e1:50:99:d0:18:12:db:4d:79:f0:36:
c3:9b:45:04:7d:38:1d:6d:8c:2b:5d:af:fb:00:33:fc:81:53:
26:96:38:17:d6:0d:22:5d:92:6d:19:bb:44:e0:b6:9e:91:a9:
cc:19:ee:8b:35:63:79:44:84:e7:44:f9:bd:86:bc:a9:5b:c4:
25:d4:aa:8e:f7:15:13:fa:af:3c:a0:68:bc:b3:c7:fe:59:e8:
62:13:79:d7:4f:02:77:c4:44:dc:b5:67:45:d3:69:23:4a:01:
54:ad:a3:a8:0e:bc:52:fa:37:6b:3b:18:c8:5b:a2:9b:45:6c:
26:d1:e6:37:62:28:15:33:9e:21:9b:08:59:81:cb:dd:93:6b:
f8:dd:71:f0:37:76:7e:52:60:f4:64:4c:b3:f6:8b:d4:b0:4a:
cc:49:d9:60:62:e8:57:99:32:2e:0c:29:3d:22:2f:48:2e:56:
3e:5b:07:4b:5a:48:66:cf:30:7a:2d:91:2d:e2:cc:4c:eb:59:
4c:cf:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:02:57 2026 by rpki-client