Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: /lvfAQKCgb0Y6dTIPe/Cobp796KFEXuD9gLULdcimz0=
Subject key identifier: B8:8F:B8:A4:47:D2:61:90:E1:73:DB:89:46:F2:BB:2B:B6:8C:1E:C6
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7D5CEE48E738D62D710AFF7F987270A0C59C4581
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS219427.roa
Signing time: Wed 29 Jul 2026 16:01:52 +0000
ROA not before: Wed 29 Jul 2026 15:56:52 +0000
ROA not after: Wed 28 Jul 2027 16:01:52 +0000
asID: 219427
IP address blocks: 201.4.17.0/24 maxlen: 24
201.4.20.0/24 maxlen: 24
201.4.23.0/24 maxlen: 24
201.4.24.0/24 maxlen: 24
201.4.26.0/24 maxlen: 24
201.4.28.0/24 maxlen: 24
201.50.16.0/24 maxlen: 24
201.50.19.0/24 maxlen: 24
201.50.21.0/24 maxlen: 24
201.50.23.0/24 maxlen: 24
201.50.25.0/24 maxlen: 24
201.50.27.0/24 maxlen: 24
201.50.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5c:ee:48:e7:38:d6:2d:71:0a:ff:7f:98:72:70:a0:c5:9c:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:56:52 2026 GMT
Not After : Jul 28 16:01:52 2027 GMT
Subject: CN=B88FB8A447D26190E173DB8946F2BB2BB68C1EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:ad:9f:82:57:21:fe:0c:7c:1b:a4:3e:e7:
f3:ae:2a:64:96:72:47:b6:a6:39:bc:58:6c:c7:df:
2f:14:48:11:8a:fd:0e:8d:c5:96:a2:6f:ea:b9:07:
7a:9c:e6:e6:0c:34:bc:58:b6:a1:46:01:8e:80:f4:
13:9b:a5:29:90:94:97:44:6f:68:eb:f5:ae:09:8f:
0e:ea:e7:e9:e2:cb:9c:51:b4:a8:ab:ec:74:fa:d3:
34:21:12:ab:aa:2d:d3:df:41:ed:e8:e3:49:2d:de:
99:38:7f:dc:ab:1f:54:39:b8:da:7a:fe:e5:a2:c5:
d7:3a:84:5d:5c:ba:39:46:40:36:42:59:92:44:cb:
e8:25:f3:e4:47:2b:83:a9:07:4d:7b:68:ab:ab:97:
f1:8d:40:6f:69:da:09:ea:23:b0:02:08:0f:7d:e1:
79:f9:78:64:ac:6f:bf:2c:5a:21:d4:d4:d1:66:38:
a9:ea:aa:0e:2f:1c:33:9d:df:d8:be:f1:32:f7:cb:
79:e6:58:fc:b8:59:c2:0f:a3:24:b9:c1:57:32:00:
ae:d5:b9:7c:c6:cb:58:be:0b:a0:20:04:57:c6:af:
f9:85:9c:73:7a:0b:f9:6e:c8:84:aa:5a:39:c1:5a:
a0:3e:91:07:e7:3e:7e:7b:fc:ef:dd:fe:65:cd:f4:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:B8:A4:47:D2:61:90:E1:73:DB:89:46:F2:BB:2B:B6:8C:1E:C6
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.17.0/24
201.4.20.0/24
201.4.23.0-201.4.24.255
201.4.26.0/24
201.4.28.0/24
201.50.16.0/24
201.50.19.0/24
201.50.21.0/24
201.50.23.0/24
201.50.25.0/24
201.50.27.0/24
201.50.29.0/24
Signature Algorithm: sha256WithRSAEncryption
24:12:cc:35:73:21:94:05:ef:f0:d4:52:64:a2:e2:4c:73:17:
40:06:ef:9e:d3:3a:14:f3:80:7d:ed:9f:e6:a4:ab:f9:31:47:
75:11:e3:17:24:ed:f4:37:95:a0:99:75:e2:c9:c4:79:66:60:
80:2c:74:d5:87:a2:2b:14:dc:22:51:8d:34:a1:aa:bd:ca:04:
fb:c5:39:0f:36:82:d1:92:9d:b9:d0:4d:fe:ff:0b:cc:7b:0a:
db:1b:c4:ab:f3:fc:c8:93:c6:0d:f9:ed:cc:60:fc:7a:6f:da:
b7:8a:23:da:c1:42:6a:08:d4:9e:5c:d1:e8:fb:fa:47:8c:a7:
c6:24:20:40:f7:7b:42:dd:65:b8:b0:fc:4f:89:eb:98:86:0a:
40:09:15:1e:28:05:60:c0:08:32:49:fd:b9:24:5b:7e:94:49:
8b:8b:c9:2c:21:7b:4c:ce:a2:2c:41:70:0e:4b:3f:56:06:36:
51:2d:0e:70:d7:c3:88:67:82:10:73:6b:0b:97:d6:ca:7e:20:
3e:d7:f0:e3:3d:33:8f:a1:7a:bf:d7:6a:5d:6f:13:96:6a:78:
04:8b:37:23:93:ba:cc:79:1c:6a:94:a5:c5:35:61:d1:c4:e2:
d3:4f:17:cf:78:a0:05:32:8e:b5:22:26:74:32:c4:e7:60:e5:
2c:0b:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:19 2026 by rpki-client