
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: HbnBIDthZG26z5QJv59xMT+4p3VYBTIuOPXbiP8Wr2Y=
Subject key identifier: BD:3C:C7:6D:29:0C:32:F1:79:D5:CE:1C:49:C4:25:1A:1E:21:F5:9C
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 35A154C565867564FDDC7ADBC5888AC948AB1D2E
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219047.roa
Signing time: Thu 15 Oct 2026 10:16:51 +0000
ROA not before: Thu 15 Oct 2026 10:11:51 +0000
ROA not after: Thu 14 Oct 2027 10:16:51 +0000
asID: 219047
IP address blocks: 79.180.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a1:54:c5:65:86:75:64:fd:dc:7a:db:c5:88:8a:c9:48:ab:1d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 15 10:11:51 2026 GMT
Not After : Oct 14 10:16:51 2027 GMT
Subject: CN=BD3CC76D290C32F179D5CE1C49C4251A1E21F59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:43:ed:ef:67:7c:8d:ef:a1:ea:9e:68:52:
46:b9:b9:8f:ef:bc:e5:82:c5:60:76:4c:fd:e6:90:
fa:0d:d0:38:5d:58:7b:14:1c:dd:d8:c6:4a:b0:b1:
76:b6:41:ae:80:d6:ca:7f:0c:e8:a9:50:76:41:f9:
8d:69:c5:f8:38:28:d4:48:a7:c6:61:a0:2d:55:5e:
d1:12:6f:fc:d4:18:92:31:00:63:dd:66:16:2f:82:
4b:2b:c7:e3:f8:de:88:87:f3:0c:7c:83:5e:70:39:
a2:05:fd:03:ef:f4:0a:3c:a2:55:4e:61:6d:22:e3:
b3:c4:e7:87:2d:af:6e:1f:9f:5d:2a:b5:54:28:fd:
aa:76:a0:e3:57:e9:05:1f:7c:f5:0c:c6:57:b5:e8:
d6:33:d3:e7:93:22:76:55:dc:00:0c:b5:dd:f5:d6:
69:32:c3:e9:c9:83:fe:2f:fd:96:53:ee:c4:c2:22:
8e:cb:3c:42:b7:35:ad:73:eb:f6:51:3d:94:aa:13:
be:59:d6:1f:ab:54:d7:5c:aa:e1:56:95:ca:76:a3:
0c:fc:71:d5:14:d1:72:84:f1:69:7b:02:6e:ec:f0:
a5:e5:21:8d:d3:7c:a3:b1:2d:35:96:de:24:d3:23:
ff:39:da:59:8e:86:43:2d:47:84:c6:63:97:c7:81:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:C7:6D:29:0C:32:F1:79:D5:CE:1C:49:C4:25:1A:1E:21:F5:9C
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
74:22:dc:eb:fe:31:07:a5:62:66:4a:80:36:df:2c:9e:d8:54:
50:c3:f2:5c:8a:8a:47:df:21:cc:cb:ae:9e:18:ad:15:c0:81:
2c:43:1f:c4:cd:53:0a:b1:77:44:67:bf:1f:75:14:4b:8e:10:
07:c7:ba:a8:4d:25:ff:71:23:f4:13:cb:06:9d:42:c3:21:04:
e7:f5:99:30:39:2e:6c:fb:6f:6d:60:6e:1d:ea:2b:12:5f:4f:
cf:bc:01:a4:e4:12:70:c5:03:76:4f:a3:01:4d:e0:2b:b2:7b:
4e:ab:44:eb:d4:c2:0b:12:c7:d0:48:06:98:07:7c:6c:98:86:
0f:ea:a5:76:82:65:52:d2:72:8e:5b:eb:a8:b2:dc:43:03:79:
a3:7b:77:98:6e:ad:09:6d:5b:bc:bd:fb:8b:93:e8:bd:2b:22:
f9:7f:97:d9:b0:93:6c:88:4a:28:fd:dd:b4:02:08:78:07:e2:
57:62:d9:b3:76:96:ca:39:3c:5a:e1:0d:f7:4d:5b:87:97:27:
6f:df:e6:b4:80:47:7a:05:56:69:98:27:b0:c7:d9:5b:3e:c1:
d5:3f:75:66:47:04:c2:57:0a:32:df:5a:94:ea:a9:58:35:77:
ad:f3:d5:11:8d:55:9d:53:26:ed:2b:64:60:4a:20:78:43:05:
87:90:3d:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 22 23:13:33 2026 by rpki-client