Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219498.roa
File: AS219498.roa (raw, json)
Hash identifier: K+22RNqyOo67JdxbxqEsSOl1/nGpVN8yruyrfaeYRNk=
Subject key identifier: 4E:F2:25:0F:BE:C9:5C:35:87:C7:8E:58:28:84:E1:81:95:AF:28:5C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 69A88F79A2F3C4EBC3DBF5B1B05E01CB78CFBA7B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219498.roa
Signing time: Thu 01 Oct 2026 22:36:07 +0000
ROA not before: Thu 01 Oct 2026 22:31:07 +0000
ROA not after: Thu 30 Sep 2027 22:36:07 +0000
asID: 219498
IP address blocks: 45.158.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a8:8f:79:a2:f3:c4:eb:c3:db:f5:b1:b0:5e:01:cb:78:cf:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 1 22:31:07 2026 GMT
Not After : Sep 30 22:36:07 2027 GMT
Subject: CN=4EF2250FBEC95C3587C78E582884E18195AF285C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:80:3a:b1:15:32:46:57:a1:dc:2e:87:d6:
b0:6e:87:74:ad:fc:a8:6c:3b:1c:01:c1:cc:f7:8f:
3c:b9:3f:c5:e2:69:06:ee:3c:c0:a1:70:05:33:37:
7f:92:cb:75:76:46:7f:24:ac:b2:ac:32:6b:66:14:
02:48:96:a2:0b:a9:c0:82:e9:ae:5e:42:b4:f2:67:
0b:9c:32:b6:19:f0:50:85:41:32:31:14:59:3b:0c:
60:bd:f4:e8:71:09:d9:bc:84:f8:6c:6c:04:81:3c:
3f:46:47:4f:56:4f:16:a5:03:b4:d6:c4:5b:a1:46:
51:18:d8:c5:a2:6b:b0:d5:e6:e6:38:09:83:b3:d0:
89:96:06:aa:31:2a:18:d6:e4:39:ed:fe:0c:a1:26:
b7:7b:05:f1:87:c1:74:1c:52:e0:a3:84:ff:5d:bb:
61:2e:b9:42:28:a5:79:ac:ed:53:2c:28:07:22:b6:
5f:e5:c6:67:2f:62:da:c6:6f:8e:c0:98:71:c8:c3:
ae:85:69:d4:80:3f:78:01:93:82:24:15:e9:50:45:
69:3b:46:94:53:18:98:2d:56:01:dd:c5:39:83:0c:
35:c0:ba:19:40:69:87:c5:44:0e:df:32:19:e4:21:
24:49:08:c8:50:74:d4:e5:19:a4:7e:5b:e8:5c:e2:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:25:0F:BE:C9:5C:35:87:C7:8E:58:28:84:E1:81:95:AF:28:5C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219498.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fc:2e:fe:4d:98:7e:46:98:6c:65:02:99:3d:1f:25:93:85:
ab:fe:1a:02:1c:0c:68:f1:a5:ef:27:dd:92:57:91:32:b4:31:
12:37:2e:e1:ac:a4:51:4a:ac:b4:91:60:0d:1f:ac:f5:9b:c2:
8a:1a:df:b2:c0:f7:b5:93:60:1f:94:11:8b:5e:b1:40:23:4b:
d5:a4:1e:90:6f:b0:41:e0:15:6e:5e:88:b8:00:62:e8:23:0b:
db:07:6b:35:63:e8:ff:dc:b5:b0:c9:ff:49:ad:b7:a6:5b:13:
81:01:19:06:97:5e:5c:65:38:0b:60:f2:8a:7d:1b:6b:81:9b:
31:c8:0d:c1:70:fd:84:df:75:90:11:7c:73:ea:12:ca:af:19:
16:a1:c8:40:e6:19:51:f8:fb:e1:d3:70:fc:e9:99:35:aa:1f:
56:28:f8:1e:88:56:6c:58:c4:53:7a:03:9b:38:1e:b2:aa:0d:
cc:d4:50:9e:4c:21:75:6c:bd:e5:57:f8:ee:37:63:c2:a9:2e:
2a:96:2d:4a:c1:8e:48:e2:0a:9e:00:f3:d0:f2:f3:65:b9:70:
e9:77:28:66:a4:4a:db:7a:76:54:97:36:7e:b9:bc:f1:3f:ad:
72:37:71:ca:1a:4b:6f:fa:b7:42:ac:06:6f:7a:cc:09:2e:98:
5f:ac:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:36:03 2026 by rpki-client