Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219005.roa
File: AS219005.roa (raw, json)
Hash identifier: hFvopnp+XGt/n6tvu1TjeONdpFb8WFQzAH/BL7cAMxY=
Subject key identifier: 02:43:84:1B:AE:7D:C7:10:44:A7:3E:0D:59:30:5E:31:21:3D:C0:97
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 327F5F9E2703A188898B0DFAD487DAC31CEEAAC8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219005.roa
Signing time: Thu 24 Sep 2026 06:16:25 +0000
ROA not before: Thu 24 Sep 2026 06:11:25 +0000
ROA not after: Thu 23 Sep 2027 06:16:25 +0000
asID: 219005
IP address blocks: 51.241.203.0/24 maxlen: 24
94.118.82.0/24 maxlen: 24
188.220.132.0/24 maxlen: 24
188.220.250.0/24 maxlen: 24
188.220.251.0/24 maxlen: 24
188.221.131.0/24 maxlen: 24
188.221.145.0/24 maxlen: 24
188.221.178.0/24 maxlen: 24
188.221.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7f:5f:9e:27:03:a1:88:89:8b:0d:fa:d4:87:da:c3:1c:ee:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 06:11:25 2026 GMT
Not After : Sep 23 06:16:25 2027 GMT
Subject: CN=0243841BAE7DC71044A73E0D59305E31213DC097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:da:29:c5:7b:91:2c:78:45:ca:5c:46:98:
12:24:53:2e:4d:e7:a5:c4:88:f9:20:63:79:b0:5c:
6b:dd:f4:64:bd:f0:46:ca:d1:fc:bf:d2:36:b4:67:
15:e3:e7:61:b6:b5:e7:6d:d5:3d:3e:88:53:45:bd:
cf:33:b1:6d:ec:7e:bc:50:83:60:f6:74:0f:bd:c8:
ac:b9:89:5e:96:7f:52:65:f2:b6:8d:0e:6f:ad:f1:
f3:53:ea:5c:35:1c:c5:63:41:60:19:ff:47:f7:cd:
03:c4:10:27:97:a4:a1:cc:56:ca:fc:55:bf:90:2c:
de:49:fa:6c:7d:81:9d:01:3f:ca:8c:8c:d7:6c:2b:
b2:cb:15:13:32:aa:08:17:a2:4d:9a:ba:a9:e0:d1:
77:bc:be:23:1b:55:7d:fb:df:19:bb:43:fe:1c:1c:
ca:72:c7:76:ef:24:9a:9c:0e:db:3d:03:12:a2:b2:
cd:f9:f0:78:61:bc:52:fe:e5:40:4e:15:56:68:d9:
a7:07:41:f1:b9:1d:8f:f0:11:75:67:d2:22:b3:3b:
74:ae:39:1c:47:ab:a5:4c:f1:eb:8d:3e:6f:54:98:
2a:a5:f7:a8:d3:1f:14:33:0e:a9:3d:66:07:f6:33:
bd:c5:64:3c:0e:65:85:e6:a0:5b:fc:c6:70:0e:6d:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:84:1B:AE:7D:C7:10:44:A7:3E:0D:59:30:5E:31:21:3D:C0:97
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.203.0/24
94.118.82.0/24
188.220.132.0/24
188.220.250.0/23
188.221.131.0/24
188.221.145.0/24
188.221.178.0/24
188.221.191.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0b:19:8c:c5:b3:0c:42:9a:b0:26:1a:6b:ee:95:c3:8f:e8:
df:eb:2c:6c:03:8c:8e:4b:46:32:df:00:e9:ff:41:64:95:44:
74:86:d2:fb:c1:c8:a3:f6:c2:63:54:e6:3e:e6:96:95:90:71:
30:e9:13:3f:db:1c:74:bf:86:01:c3:b6:d0:f6:62:91:a6:4a:
66:87:13:a9:21:9f:2a:47:de:dd:20:fb:e9:c7:a6:fb:f1:5f:
7c:72:f7:2d:d0:d1:f8:48:be:7f:43:4d:2b:7d:4d:7c:f5:a0:
9f:9e:12:a3:2c:b3:13:02:34:72:de:a5:a2:c5:e5:1c:53:49:
69:9b:22:f0:95:af:93:56:cd:89:ec:11:03:09:43:f8:52:bb:
29:1c:2b:ab:eb:a7:1c:d1:48:7e:f0:6d:b8:88:e6:66:9f:d1:
44:bd:cd:21:33:d4:cf:0e:58:f8:57:bc:97:16:ca:92:bf:d8:
8a:33:d8:56:50:a3:ec:e0:99:81:90:cb:4c:5b:d4:0c:4d:fd:
24:ac:77:cd:15:16:be:47:23:c1:9f:5e:6b:6c:81:0e:15:be:
df:9e:2e:8e:9a:5a:67:d2:f0:56:d5:17:63:95:df:63:98:28:
62:c8:f2:95:ad:a2:93:e0:09:80:bf:1e:77:72:7e:1c:a4:cb:
e3:94:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:41:37 2026 by rpki-client