Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219005.roa
File: AS219005.roa (raw, json)
Hash identifier: Au44apxY7ZsOIJvjhPuVhh/hNYSC5nC/LyTgN3nqKxA=
Subject key identifier: E5:07:BE:71:28:90:0D:98:33:95:BA:9B:59:14:7C:90:A5:69:26:C3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7048161309F939D24C4C218130CF3701AC139768
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219005.roa
Signing time: Wed 26 Aug 2026 14:19:18 +0000
ROA not before: Wed 26 Aug 2026 14:14:18 +0000
ROA not after: Wed 25 Aug 2027 14:19:18 +0000
asID: 219005
IP address blocks: 188.220.132.0/24 maxlen: 24
188.220.250.0/24 maxlen: 24
188.220.251.0/24 maxlen: 24
188.221.131.0/24 maxlen: 24
188.221.145.0/24 maxlen: 24
188.221.178.0/24 maxlen: 24
188.221.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:48:16:13:09:f9:39:d2:4c:4c:21:81:30:cf:37:01:ac:13:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 26 14:14:18 2026 GMT
Not After : Aug 25 14:19:18 2027 GMT
Subject: CN=E507BE7128900D983395BA9B59147C90A56926C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:e2:39:70:54:4b:56:af:04:1e:42:de:39:
e6:e3:30:87:7c:af:28:91:1b:34:fe:20:20:60:a7:
a2:89:4b:f1:5f:27:86:1d:5c:af:04:cb:7f:4c:90:
ba:ec:f1:5c:03:ed:b5:28:f4:ff:ca:e2:7e:36:0c:
28:73:e2:05:cf:ad:9f:a4:93:64:5e:06:3c:42:cf:
3b:20:e8:44:96:40:06:fe:51:c3:3a:7d:31:2a:cd:
90:f2:48:d3:ed:2f:99:f2:a3:37:e7:b6:fe:1e:12:
e0:69:e6:b5:60:9f:ff:16:e7:98:c6:5e:9f:f3:94:
93:8c:ed:4c:6a:51:d0:4a:be:4b:2b:12:49:3d:2b:
91:cf:04:74:02:af:07:cb:06:db:42:4a:b6:4b:8e:
a3:80:4e:de:35:e1:ba:35:63:35:54:15:90:62:45:
c5:81:74:24:8b:c7:a1:cf:c5:c5:09:f8:5c:a9:fb:
05:fb:5b:48:12:ca:3f:96:c2:98:82:6e:65:dc:b5:
73:0f:38:92:42:b6:b7:21:a3:58:5e:83:9b:f9:03:
60:21:ae:00:07:c1:6d:ee:66:98:e4:c6:8c:e4:2a:
5c:be:8f:f3:c4:d1:17:7a:23:96:1c:de:9d:c2:26:
68:bd:9b:82:36:e3:2e:87:01:0e:8a:2f:8c:31:e2:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:07:BE:71:28:90:0D:98:33:95:BA:9B:59:14:7C:90:A5:69:26:C3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.132.0/24
188.220.250.0/23
188.221.131.0/24
188.221.145.0/24
188.221.178.0/24
188.221.191.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0a:f9:68:dc:b7:75:67:84:42:4d:6f:25:d0:92:0a:c3:9c:
47:96:da:66:db:d4:ef:cc:37:b7:f7:46:cb:c8:0b:e3:da:e6:
6b:7c:03:88:c2:61:2f:35:4d:2e:40:11:fe:87:6c:da:57:6d:
1b:35:12:aa:b3:bc:c0:82:6e:0d:4f:56:bf:9c:b4:e0:25:e5:
9e:3f:98:7a:19:15:d8:ad:2d:34:63:5c:5b:e4:0d:51:3a:68:
a6:2a:3b:8e:70:7b:17:03:54:f0:b1:23:86:98:0d:31:33:4e:
e0:dc:07:53:bb:6b:9f:12:4f:7b:63:2f:7b:0b:8c:b5:ba:eb:
f0:a6:ce:79:52:18:34:a9:83:b8:de:02:37:46:c4:8e:68:32:
94:7c:6a:a1:30:9f:03:16:1b:b6:1f:e7:26:27:d1:e1:aa:cf:
27:e5:8b:d4:e5:46:6d:5f:cc:f8:50:6b:10:76:80:ad:2e:65:
17:78:b0:d5:54:1a:9b:c5:e6:4f:33:16:1a:a3:3a:d7:7a:2f:
5a:c7:e7:6d:f2:3b:7b:1f:49:a9:57:97:3c:4f:4e:a5:aa:81:
85:a1:5b:6c:38:47:b0:cd:00:ff:03:ad:82:b3:0d:45:d0:55:
7c:2d:15:4c:a5:83:30:be:ba:13:ed:1f:b0:f0:a3:1c:83:3b:
fc:2d:d7:4d
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUcEgWEwn5OdJMTCGBMM83AawTl2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjYxNDE0MThaFw0yNzA4MjUxNDE5MThaMDMxMTAvBgNV
BAMTKEU1MDdCRTcxMjg5MDBEOTgzMzk1QkE5QjU5MTQ3QzkwQTU2OTI2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7OI5cFRLVq8EHkLeOebjMId8
ryiRGzT+ICBgp6KJS/FfJ4YdXK8Ey39MkLrs8VwD7bUo9P/K4n42DChz4gXPrZ+k
k2ReBjxCzzsg6ESWQAb+UcM6fTEqzZDySNPtL5nyozfntv4eEuBp5rVgn/8W55jG
Xp/zlJOM7UxqUdBKvksrEkk9K5HPBHQCrwfLBttCSrZLjqOATt414bo1YzVUFZBi
RcWBdCSLx6HPxcUJ+Fyp+wX7W0gSyj+WwpiCbmXctXMPOJJCtrcho1heg5v5A2Ah
rgAHwW3uZpjkxozkKly+j/PE0Rd6I5Yc3p3CJmi9m4I24y6HAQ6KL4wx4sv1AgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQU5Qe+cSiQDZgzlbqbWRR8kKVpJsMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE5MDA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAvNyE
AwQBvNz6AwQAvN2DAwQAvN2RAwQAvN2yAwQAvN2/MA0GCSqGSIb3DQEBCwUAA4IB
AQAxCvlo3Ld1Z4RCTW8l0JIKw5xHltpm29TvzDe390bLyAvj2uZrfAOIwmEvNU0u
QBH+h2zaV20bNRKqs7zAgm4NT1a/nLTgJeWeP5h6GRXYrS00Y1xb5A1ROmimKjuO
cHsXA1TwsSOGmA0xM07g3AdTu2ufEk97Yy97C4y1uuvwps55Uhg0qYO43gI3RsSO
aDKUfGqhMJ8DFhu2H+cmJ9Hhqs8n5YvU5UZtX8z4UGsQdoCtLmUXeLDVVBqbxeZP
MxYaozrXei9ax+dt8jt7H0mpV5c8T06lqoGFoVtsOEewzQD/A62Csw1F0FV8LRVM
pYMwvroT7R+w8KMcgzv8LddN
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:07 2026 by rpki-client