Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS219459.roa
File: AS219459.roa (raw, json)
Hash identifier: KrJahjrJLBfavzZtwX8vilGCO2y+KnLFxyQhmSgAGSs=
Subject key identifier: 3B:34:2F:02:58:53:25:F4:86:6B:BF:E4:6F:D6:BC:38:82:17:57:41
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 6C088CFA09A1B386AE340CD391291FE041E33DBF
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS219459.roa
Signing time: Thu 06 Aug 2026 09:59:22 +0000
ROA not before: Thu 06 Aug 2026 09:54:22 +0000
ROA not after: Thu 05 Aug 2027 09:59:22 +0000
asID: 219459
IP address blocks: 193.38.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:08:8c:fa:09:a1:b3:86:ae:34:0c:d3:91:29:1f:e0:41:e3:3d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Aug 6 09:54:22 2026 GMT
Not After : Aug 5 09:59:22 2027 GMT
Subject: CN=3B342F02585325F4866BBFE46FD6BC3882175741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:58:5c:62:ee:d1:83:fa:94:16:4e:c7:51:
ce:2e:23:be:e5:75:c0:03:d3:dc:c1:f1:22:74:57:
f6:67:a7:80:73:56:c5:9e:ab:96:03:54:2c:54:a4:
dc:a5:a5:b3:69:bb:8d:1b:e4:3b:51:cd:94:7c:e8:
a1:42:dc:24:c8:43:96:70:78:3e:7f:df:36:19:4b:
24:33:e5:89:d6:f5:a4:c1:56:58:2d:4a:50:0d:b8:
15:eb:5a:bf:72:9d:ff:11:cd:9d:0f:9b:a5:3d:ff:
14:83:bc:c4:83:da:db:32:db:4b:db:70:3b:2a:39:
82:7e:25:1a:74:9e:b2:05:10:b7:55:de:de:d7:97:
36:57:c5:d6:84:32:e0:00:a6:c9:46:df:fd:4a:be:
ed:0c:95:9e:c3:8c:f9:38:6f:e2:b5:15:1d:6f:a3:
50:79:09:e7:fa:89:cd:ad:6d:72:89:d4:da:e5:55:
98:b2:8a:b2:9f:89:cf:40:ef:e1:45:6a:82:87:af:
09:11:c5:91:e7:98:36:9a:1d:f2:4e:ee:23:56:90:
71:42:bd:34:24:03:ce:f5:95:38:1d:ce:65:aa:5e:
d6:95:35:19:09:40:78:d0:a3:d3:7e:fc:3a:7e:12:
89:0c:11:6b:3b:03:8d:2b:7f:a0:5c:6a:03:ea:7d:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:2F:02:58:53:25:F4:86:6B:BF:E4:6F:D6:BC:38:82:17:57:41
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS219459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.45.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c4:f9:86:c0:87:78:66:08:c3:61:84:2e:20:71:a2:dc:d9:
ae:f1:7c:3b:95:0c:fd:fd:46:1d:e8:8d:a3:77:b6:3c:11:28:
57:9c:c0:d6:8d:20:4e:ee:ec:05:75:41:55:eb:c4:a4:c5:a2:
42:d8:92:07:16:77:62:f9:2e:3b:aa:2c:61:5d:ae:21:9f:c7:
a8:95:32:c2:0f:b0:1a:56:74:f0:41:24:19:21:04:7f:cf:cc:
db:19:b6:62:95:a9:ff:91:ab:ad:30:f5:e6:da:bc:e7:83:a0:
dd:c7:12:f5:c1:d5:8b:5c:38:d0:ba:99:dc:85:01:d3:0a:dd:
84:f6:57:00:4c:ac:81:ae:b2:a2:ec:82:a6:97:1f:aa:c9:aa:
2d:de:4e:1a:09:0e:c1:a6:90:a8:10:2f:47:3c:14:a1:3c:f4:
ac:a8:60:63:f8:89:6c:64:cb:8e:b3:f5:53:e1:fc:50:20:9e:
5a:34:62:ef:52:aa:6c:dd:e6:c5:29:8c:02:12:6c:08:a0:09:
f4:2c:cb:bb:8f:36:f3:de:ce:5f:92:9b:24:ea:57:fd:20:4c:
6e:f3:59:e2:4f:6e:67:f8:1a:36:5b:40:95:98:d3:43:81:1f:
f8:99:15:37:c5:fb:fd:ea:05:06:ad:6b:f5:f4:89:85:80:60:
a3:8d:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:26 2026 by rpki-client