Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219217.roa
File: AS219217.roa (raw, json)
Hash identifier: HA0n7vJYUQ1ZXpqaL5ldeFFg7ve3IYtvpxz/xTsbNI4=
Subject key identifier: 1C:CC:F0:74:40:E5:8A:5B:C6:2F:B6:99:3B:35:B3:54:2D:05:2A:A7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 313E3D75660DF62AB2E12F7014EF99DCE965E857
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219217.roa
Signing time: Sun 19 Jul 2026 14:20:14 +0000
ROA not before: Sun 19 Jul 2026 14:15:14 +0000
ROA not after: Sun 18 Jul 2027 14:20:14 +0000
asID: 219217
IP address blocks: 152.89.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3e:3d:75:66:0d:f6:2a:b2:e1:2f:70:14:ef:99:dc:e9:65:e8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 19 14:15:14 2026 GMT
Not After : Jul 18 14:20:14 2027 GMT
Subject: CN=1CCCF07440E58A5BC62FB6993B35B3542D052AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:01:81:a5:5e:a1:6a:ff:68:f7:72:4d:8e:
0f:9d:06:62:b4:32:0e:1f:86:0b:15:40:bc:7c:ff:
41:38:54:d5:4a:88:cc:c9:2d:65:1b:f9:88:33:71:
de:db:3c:d6:a9:6a:e7:20:c7:87:26:fc:cd:9f:d2:
84:c8:71:87:0b:a8:90:ad:8c:80:3d:51:59:ec:95:
3d:3a:b7:2e:89:de:8d:b2:fd:63:99:fc:99:42:13:
c7:9d:58:46:94:fb:dd:d1:55:f9:4f:34:39:0b:f2:
b7:fe:2c:37:8c:83:d0:d0:8c:75:e1:57:86:9c:7c:
3e:2d:06:07:a4:d7:ca:a4:bc:13:2f:81:ad:cf:06:
dc:33:41:f6:d5:3b:45:81:a1:c1:f1:80:69:d8:15:
be:c0:57:69:6e:ff:ff:f8:85:7a:d9:ff:71:19:2c:
11:d6:3c:ea:76:fd:c5:a3:7a:70:e8:9c:14:9f:98:
49:ab:11:07:c7:7b:f9:0c:3e:16:a4:6f:30:eb:a5:
ad:63:15:3c:70:44:0d:22:50:e4:db:cb:9c:91:fc:
7a:a5:6f:9c:15:b0:e2:23:93:bb:d6:d8:4e:db:5b:
01:cb:d7:0f:80:a3:9e:dd:9a:c2:16:91:e3:19:29:
26:e4:72:a2:52:69:21:9b:fa:d2:73:79:f0:5e:e1:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:F0:74:40:E5:8A:5B:C6:2F:B6:99:3B:35:B3:54:2D:05:2A:A7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:53:4e:c5:9a:24:91:2d:15:37:6e:c2:85:cd:ce:09:a9:5c:
14:f1:1f:55:ca:5a:7d:9b:15:cd:6d:7f:85:e9:a7:62:18:96:
25:15:2c:46:62:c2:d7:8d:8a:c0:94:28:71:e6:e1:ea:4d:06:
db:64:91:e3:25:ae:a2:b1:a4:63:65:21:9f:97:46:7c:b1:96:
85:49:8e:c9:be:37:be:fc:dc:05:e0:b6:b3:23:4a:a5:2e:84:
d7:86:77:95:3d:7e:3e:dc:f5:5e:2d:a0:85:90:76:ae:f3:ee:
3d:79:2e:4c:0c:38:af:26:d1:77:01:9a:ae:05:6e:bd:46:52:
e8:c1:7e:73:23:e5:9b:ce:ba:d0:cc:28:16:eb:4a:a0:00:6e:
fe:16:04:62:5f:09:3b:1e:63:dc:74:c4:29:b6:48:c2:30:ec:
8f:b6:5d:6e:2f:38:4e:78:d7:10:bf:78:eb:5c:c1:93:60:90:
51:cc:13:5e:ff:a9:c7:03:a0:24:7a:41:2a:57:6d:1d:e8:ca:
71:e1:8a:e0:65:7d:8a:fb:dd:30:07:ce:f0:71:85:6b:71:30:
f7:db:1a:a2:30:46:24:30:c3:0e:2c:3a:d2:9f:80:0e:83:da:
86:fe:56:4e:dc:ff:9e:1f:cc:44:5f:85:dd:d3:07:d2:d4:4a:
22:df:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:40:02 2026 by rpki-client