Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS19949.roa
File: AS19949.roa (raw, json)
Hash identifier: 1oSobvdPT7N9ttCzaW7IA1fM4go42OCI8rWtRrso5bo=
Subject key identifier: 2E:66:8C:88:E5:A9:FE:BF:4C:44:65:A9:1D:A8:D1:EB:D4:1D:2A:E9
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 63F9556576281834834C1250B1014DCBDD132101
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS19949.roa
Signing time: Sat 18 Jul 2026 12:09:13 +0000
ROA not before: Sat 18 Jul 2026 12:04:13 +0000
ROA not after: Sat 17 Jul 2027 12:09:13 +0000
asID: 19949
IP address blocks: 45.153.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f9:55:65:76:28:18:34:83:4c:12:50:b1:01:4d:cb:dd:13:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 18 12:04:13 2026 GMT
Not After : Jul 17 12:09:13 2027 GMT
Subject: CN=2E668C88E5A9FEBF4C4465A91DA8D1EBD41D2AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:de:fd:ad:70:64:f6:de:14:02:26:ca:3a:
87:06:c6:1f:5d:4f:8b:19:91:60:d1:64:d1:74:83:
fa:c2:2a:17:92:e7:d9:5a:7b:bb:31:54:ba:ef:27:
aa:f8:74:fa:52:31:96:d5:4d:b0:0e:d6:27:6a:71:
3b:04:ab:25:44:74:83:0f:68:19:39:10:43:68:2c:
75:22:c0:2a:ba:86:7f:40:7b:79:5e:3f:64:ac:72:
f5:2c:8f:a2:fe:79:ff:df:49:71:b2:e8:cc:a0:b3:
a8:e2:2d:44:1d:b3:22:15:61:40:e9:a4:47:9f:f6:
e6:ba:f6:07:c2:89:3f:fd:6a:0f:6c:2a:5a:ce:b6:
d1:4e:cf:b9:6e:fc:5e:f1:0b:b2:97:0b:d5:ba:0b:
53:e7:68:d0:a1:4a:e6:ba:85:00:cd:73:04:9d:db:
0a:02:83:9e:0d:3b:80:f6:61:03:0e:82:77:ff:7f:
86:53:15:b3:ef:e3:1a:68:72:da:2d:ec:11:b7:69:
5e:7b:95:a9:7b:11:50:9c:8b:c3:1b:e3:d7:2c:21:
c6:de:96:92:4f:77:07:9d:db:cf:fe:f0:97:6e:dc:
2c:15:d9:15:0a:f9:e1:17:80:af:ac:bd:e3:40:6f:
1a:40:5d:d4:8b:fb:54:4e:e2:ef:6d:0f:c8:1e:a8:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:8C:88:E5:A9:FE:BF:4C:44:65:A9:1D:A8:D1:EB:D4:1D:2A:E9
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS19949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.7.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5a:33:0e:ba:1b:24:2b:24:e7:cf:49:91:08:64:fa:98:00:
90:d3:9b:0c:48:e5:ca:e4:13:95:5c:0b:86:59:4a:86:c5:79:
41:4d:14:66:c3:51:4f:c9:d6:78:8d:5a:89:ac:de:b3:c8:96:
fb:1a:41:cd:81:3b:c8:62:0e:ea:69:0b:c2:51:fe:88:56:69:
4e:4b:7e:37:5e:bd:84:59:60:ac:6b:d3:c8:bc:9f:19:91:cf:
87:e5:95:71:a8:0a:d5:68:1c:bf:d2:b0:1d:79:f7:5a:10:92:
ec:07:33:98:9a:f5:01:2a:9a:5f:73:83:2b:4e:46:d2:51:15:
51:91:2f:c9:e8:ed:36:bd:cc:52:6d:b1:1b:d8:01:de:11:41:
13:f8:42:c2:bc:20:82:a0:a9:ea:b9:65:4c:b0:ad:77:93:b8:
6f:c8:c3:ee:e2:8c:5c:2f:5a:83:84:31:c6:fb:d3:9f:4a:3f:
fa:a7:f6:b8:18:8d:96:fa:e9:aa:01:90:3f:b4:88:46:cb:7a:
8f:09:b1:f2:d7:c9:75:ef:57:2b:55:86:22:8e:cd:60:38:71:
5f:ee:a1:00:71:d9:ea:35:11:d2:4b:77:6c:4b:85:e8:8c:f4:
9b:f7:c9:b5:6c:41:c2:37:7e:61:ed:00:7e:98:a9:c1:e5:0f:
d6:14:dc:38
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUY/lVZXYoGDSDTBJQsQFNy90TIQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA3MTgxMjA0MTNaFw0yNzA3MTcxMjA5MTNaMDMxMTAvBgNV
BAMTKDJFNjY4Qzg4RTVBOUZFQkY0QzQ0NjVBOTFEQThEMUVCRDQxRDJBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOt79rXBk9t4UAibKOocGxh9d
T4sZkWDRZNF0g/rCKheS59lae7sxVLrvJ6r4dPpSMZbVTbAO1idqcTsEqyVEdIMP
aBk5EENoLHUiwCq6hn9Ae3leP2SscvUsj6L+ef/fSXGy6Mygs6jiLUQdsyIVYUDp
pEef9ua69gfCiT/9ag9sKlrOttFOz7lu/F7xC7KXC9W6C1PnaNChSua6hQDNcwSd
2woCg54NO4D2YQMOgnf/f4ZTFbPv4xpoctot7BG3aV57lal7EVCci8Mb49csIcbe
lpJPdwed28/+8Jdu3CwV2RUK+eEXgK+sveNAbxpAXdSL+1RO4u9tD8geqF4PAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQULmaMiOWp/r9MRGWpHajR69QdKukwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTk5NDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtmQcw
DQYJKoZIhvcNAQELBQADggEBAABaMw66GyQrJOfPSZEIZPqYAJDTmwxI5crkE5Vc
C4ZZSobFeUFNFGbDUU/J1niNWoms3rPIlvsaQc2BO8hiDuppC8JR/ohWaU5Lfjde
vYRZYKxr08i8nxmRz4fllXGoCtVoHL/SsB1591oQkuwHM5ia9QEqml9zgytORtJR
FVGRL8no7Ta9zFJtsRvYAd4RQRP4QsK8IIKgqeq5ZUywrXeTuG/Iw+7ijFwvWoOE
Mcb7059KP/qn9rgYjZb66aoBkD+0iEbLeo8JsfLXyXXvVytVhiKOzWA4cV/uoQBx
2eo1EdJLd2xLheiM9Jv3ybVsQcI3fmHtAH6YqcHlD9YU3Dg=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:40:02 2026 by rpki-client