Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS219374.roa
File: AS219374.roa (raw, json)
Hash identifier: AETcsigs1hm25tzlhvg+UGIixD5h925RHSqM4cU+6Wg=
Subject key identifier: 11:A3:0D:E8:65:85:FF:E8:90:25:66:63:1B:83:D4:D1:F0:52:BF:AD
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 54E46F79DDB446E9B1D30D9263E5C029B0FD4F66
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS219374.roa
Signing time: Tue 11 Aug 2026 02:39:31 +0000
ROA not before: Tue 11 Aug 2026 02:34:31 +0000
ROA not after: Tue 10 Aug 2027 02:39:31 +0000
asID: 219374
IP address blocks: 201.4.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e4:6f:79:dd:b4:46:e9:b1:d3:0d:92:63:e5:c0:29:b0:fd:4f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 11 02:34:31 2026 GMT
Not After : Aug 10 02:39:31 2027 GMT
Subject: CN=11A30DE86585FFE8902566631B83D4D1F052BFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:1a:5d:9b:5a:83:11:f9:34:98:1a:b9:7d:
89:d7:94:b8:0a:22:a8:de:c4:11:ff:58:d7:02:a4:
da:ae:a3:58:c8:b5:f6:4e:40:48:28:27:a0:08:6f:
85:0b:59:40:b5:d3:8c:32:61:7d:cf:82:d5:fd:88:
bb:74:86:3c:4c:26:a9:d7:de:82:1a:ff:be:78:3d:
bf:be:2e:40:32:c8:82:36:de:80:56:d9:cf:f7:24:
e9:95:38:c2:71:6c:d8:3a:b1:09:59:98:64:4b:ea:
ad:22:3e:47:ac:6c:d1:dd:80:9b:49:db:d6:54:9e:
9e:e6:0e:bc:20:79:90:38:fd:55:0c:28:9a:61:a9:
b3:91:15:9b:f5:e4:b8:13:c5:be:f0:ab:9d:a3:bc:
a6:3d:ba:81:6f:3a:db:29:dd:25:5d:9f:00:92:1b:
6a:af:d2:fa:ef:c6:7d:a7:72:f4:23:ba:77:11:43:
7f:14:52:be:82:22:9c:34:65:24:f9:f1:73:9e:dc:
03:e1:0e:7a:02:ba:29:cd:f5:e6:24:95:60:ba:2a:
b7:a8:14:f5:53:b2:9c:2b:26:6f:ba:08:c6:a5:a5:
57:1d:a2:d1:11:c5:bd:bf:57:bc:d6:22:a2:92:be:
6b:a3:e8:81:3e:45:85:f4:29:c7:ec:f1:d0:82:94:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:0D:E8:65:85:FF:E8:90:25:66:63:1B:83:D4:D1:F0:52:BF:AD
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS219374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.31.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6b:81:03:76:c6:62:49:45:31:4e:79:0e:bd:93:ad:81:d7:
93:8e:a7:7b:8f:51:c7:11:7d:62:7a:4f:10:5d:a6:e6:47:41:
34:a1:6d:95:de:c8:b6:10:aa:fc:ef:b4:9b:7c:75:8c:40:44:
d8:e3:56:ae:50:c6:83:39:11:a7:a3:0c:45:f3:cf:e0:01:8c:
b1:a4:19:52:46:a5:82:5c:7c:32:8a:22:a0:7c:55:12:0d:36:
b7:16:c2:85:17:02:ee:e0:61:b0:cf:bb:98:ca:46:5a:cd:35:
ec:a4:54:ed:2a:68:3c:2c:b0:87:49:83:93:7b:e7:22:a0:77:
c3:34:42:b7:3d:0e:99:69:67:f6:fd:aa:2e:c5:5b:86:c1:35:
de:0c:5d:8c:22:32:5a:ff:b7:53:2b:23:49:8f:e0:67:5d:63:
d5:9c:d2:95:8a:e4:aa:99:96:48:d7:19:bf:40:4a:6c:a0:9e:
b7:48:82:7f:f7:7e:d1:28:eb:c8:6c:22:d7:2b:7e:dd:40:8c:
a7:db:a5:45:73:8a:f4:63:0c:af:08:d5:52:8b:f0:41:26:d7:
74:0c:0d:ea:f7:8c:6f:14:f1:6d:53:62:3f:c8:cd:7a:a1:49:
eb:94:8f:2b:d3:3a:47:10:d0:16:a3:f8:2e:f0:f5:48:84:1c:
ad:52:1d:a8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVORved20Rumx0w2SY+XAKbD9T2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA4MTEwMjM0MzFaFw0yNzA4MTAwMjM5MzFaMDMxMTAvBgNV
BAMTKDExQTMwREU4NjU4NUZGRTg5MDI1NjY2MzFCODNENEQxRjA1MkJGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVhpdm1qDEfk0mBq5fYnXlLgK
IqjexBH/WNcCpNquo1jItfZOQEgoJ6AIb4ULWUC104wyYX3PgtX9iLt0hjxMJqnX
3oIa/754Pb++LkAyyII23oBW2c/3JOmVOMJxbNg6sQlZmGRL6q0iPkesbNHdgJtJ
29ZUnp7mDrwgeZA4/VUMKJphqbORFZv15LgTxb7wq52jvKY9uoFvOtsp3SVdnwCS
G2qv0vrvxn2ncvQjuncRQ38UUr6CIpw0ZST58XOe3APhDnoCuinN9eYklWC6Kreo
FPVTspwrJm+6CMalpVcdotERxb2/V7zWIqKSvmuj6IE+RYX0Kcfs8dCClHqrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUEaMN6GWF/+iQJWZjG4PU0fBSv60wHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTMjE5Mzc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQQf
MA0GCSqGSIb3DQEBCwUAA4IBAQCIa4EDdsZiSUUxTnkOvZOtgdeTjqd7j1HHEX1i
ek8QXabmR0E0oW2V3si2EKr877SbfHWMQETY41auUMaDORGnowxF88/gAYyxpBlS
RqWCXHwyiiKgfFUSDTa3FsKFFwLu4GGwz7uYykZazTXspFTtKmg8LLCHSYOTe+ci
oHfDNEK3PQ6ZaWf2/aouxVuGwTXeDF2MIjJa/7dTKyNJj+BnXWPVnNKViuSqmZZI
1xm/QEpsoJ63SIJ/937RKOvIbCLXK37dQIyn26VFc4r0YwyvCNVSi/BBJtd0DA3q
94xvFPFtU2I/yM16oUnrlI8r0zpHENAWo/gu8PVIhBytUh2o
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:08 2026 by rpki-client