Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: Z+JplXSzqyGgLMv54sFlg4llJqMWRpZE8ZhxVFx780M=
Subject key identifier: 13:D0:49:0D:58:F4:CF:72:9A:95:F8:54:49:4E:75:1A:07:F9:AC:AB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0288B53A50115983E92D05C0E9194BE921D62F07
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219427.roa
Signing time: Mon 24 Aug 2026 12:04:07 +0000
ROA not before: Mon 24 Aug 2026 11:59:07 +0000
ROA not after: Mon 23 Aug 2027 12:04:07 +0000
asID: 219427
IP address blocks: 2a03:f100::/29 maxlen: 48
2a05:b600::/29 maxlen: 48
2a09:40::/29 maxlen: 48
2a09:c0::/29 maxlen: 48
2a09:1c0::/29 maxlen: 48
2a09:fe80::/29 maxlen: 48
2a0c:1c00::/29 maxlen: 48
2a10:e180::/29 maxlen: 29
2a10:e280::/29 maxlen: 48
2a10:ec80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 04:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:88:b5:3a:50:11:59:83:e9:2d:05:c0:e9:19:4b:e9:21:d6:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 24 11:59:07 2026 GMT
Not After : Aug 23 12:04:07 2027 GMT
Subject: CN=13D0490D58F4CF729A95F854494E751A07F9ACAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:49:ef:24:c6:0e:38:ad:84:1b:ae:5f:57:
d9:b6:5e:a5:43:52:9b:73:0f:35:39:7f:cb:38:04:
3d:11:e0:fa:e9:3f:00:c7:7e:a3:07:4b:a8:24:9c:
06:cb:8f:1c:c7:5b:88:8a:45:16:3e:e6:20:44:76:
ea:5d:56:03:e0:8b:03:3a:2b:f4:32:2d:2d:f5:6c:
5a:98:13:8c:2c:59:bc:8c:46:d1:98:93:f4:ce:05:
92:87:4b:71:b9:f0:12:a9:28:37:f2:86:9a:d5:ab:
da:0d:19:f6:bd:6f:92:8a:da:3e:59:a4:d4:62:95:
17:5f:f5:cf:b1:73:19:c8:00:f7:f9:30:a1:c8:cd:
b4:b1:88:d1:2b:3c:13:20:92:f2:7c:5b:65:aa:bf:
6f:f1:c8:36:e7:38:27:f2:17:39:ac:ec:37:05:94:
17:0c:98:73:39:70:07:c3:0c:35:49:cd:e5:45:69:
2e:97:13:28:0a:60:45:9d:a1:78:7b:ff:4a:70:d7:
f2:a6:0e:19:ef:cd:87:f2:3f:15:51:4c:d4:ec:52:
6e:8f:ee:d5:fc:6e:eb:4a:27:3e:bb:30:9f:49:cf:
db:3f:e3:8b:d7:71:9b:30:25:17:b8:4e:60:36:aa:
01:29:09:84:cc:cf:41:65:3c:ec:83:c1:96:e0:f9:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:49:0D:58:F4:CF:72:9A:95:F8:54:49:4E:75:1A:07:F9:AC:AB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f100::/29
2a05:b600::/29
2a09:40::/29
2a09:c0::/29
2a09:1c0::/29
2a09:fe80::/29
2a0c:1c00::/29
2a10:e180::/29
2a10:e280::/29
2a10:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:83:5c:3f:cf:a4:53:cd:4f:85:07:06:4e:96:09:53:65:fd:
34:13:cd:da:af:91:9d:b5:d2:49:24:c7:36:f6:6b:51:16:d7:
fc:2d:76:5b:7f:28:19:13:31:85:34:03:75:4b:d5:c6:89:7f:
20:1d:1d:d5:f9:ab:19:80:ce:5f:9c:e6:90:aa:fb:a3:d0:a2:
6d:62:62:42:ec:53:63:51:f3:25:c5:9c:d6:f1:87:5e:42:17:
7e:c0:01:86:07:8c:1a:86:85:a9:03:10:16:47:dd:d8:ee:0d:
b0:96:42:29:ec:c4:7c:ff:8b:c6:40:cb:86:aa:ec:43:64:33:
f9:e9:98:dd:9c:04:e2:6d:cd:16:97:8e:ce:2a:a9:1b:ba:56:
b0:5e:aa:82:c9:ba:09:0d:52:b0:b5:d3:3c:5a:27:00:79:b0:
79:78:5a:72:77:4d:34:04:f2:8b:0d:06:34:ea:f8:3b:b9:18:
d3:09:74:22:4b:d7:4e:09:16:80:2f:f7:a2:f1:fe:2b:d2:79:
b3:d9:29:df:b1:b0:e9:00:b0:b0:e9:29:98:80:b1:d9:06:4d:
98:d1:cf:06:35:a7:60:2d:ff:67:55:af:5b:bb:0a:40:8e:f8:
de:18:88:a5:a7:fb:77:5b:76:5a:2c:e6:4a:1e:e2:fb:b2:0f:
5b:c6:7e:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUAoi1OlARWYPpLQXA6RlL6SHWLwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA4MjQxMTU5MDdaFw0yNzA4MjMxMjA0MDdaMDMxMTAvBgNV
BAMTKDEzRDA0OTBENThGNENGNzI5QTk1Rjg1NDQ5NEU3NTFBMDdGOUFDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gknvJMYOOK2EG65fV9m2XqVD
UptzDzU5f8s4BD0R4PrpPwDHfqMHS6gknAbLjxzHW4iKRRY+5iBEdupdVgPgiwM6
K/QyLS31bFqYE4wsWbyMRtGYk/TOBZKHS3G58BKpKDfyhprVq9oNGfa9b5KK2j5Z
pNRilRdf9c+xcxnIAPf5MKHIzbSxiNErPBMgkvJ8W2Wqv2/xyDbnOCfyFzms7DcF
lBcMmHM5cAfDDDVJzeVFaS6XEygKYEWdoXh7/0pw1/KmDhnvzYfyPxVRTNTsUm6P
7tX8butKJz67MJ9Jz9s/44vXcZswJRe4TmA2qgEpCYTMz0FlPOyDwZbg+cTfAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUE9BJDVj0z3KalfhUSU51Ggf5rKswHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE5NDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKgPx
AAMFAyoFtgADBQMqCQBAAwUDKgkAwAMFAyoJAcADBQMqCf6AAwUDKgwcAAMFAyoQ
4YADBQMqEOKAAwUDKhDsgDANBgkqhkiG9w0BAQsFAAOCAQEAb4NcP8+kU81PhQcG
TpYJU2X9NBPN2q+RnbXSSSTHNvZrURbX/C12W38oGRMxhTQDdUvVxol/IB0d1fmr
GYDOX5zmkKr7o9CibWJiQuxTY1HzJcWc1vGHXkIXfsABhgeMGoaFqQMQFkfd2O4N
sJZCKezEfP+LxkDLhqrsQ2Qz+emY3ZwE4m3NFpeOziqpG7pWsF6qgsm6CQ1SsLXT
PFonAHmweXhacndNNATyiw0GNOr4O7kY0wl0IkvXTgkWgC/3ovH+K9J5s9kp37Gw
6QCwsOkpmICx2QZNmNHPBjWnYC3/Z1WvW7sKQI743hiIpaf7d1t2WizmSh7i+7IP
W8Z+3g==
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:16 2026 by rpki-client