Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219023.roa
File: AS219023.roa (raw, json)
Hash identifier: fmf7yCieEIH46X035ViA72DE1FgC1nG4FE0e7BAyVUA=
Subject key identifier: 54:09:B0:91:C5:38:39:C8:06:66:DF:EA:13:A2:0B:A0:4B:04:39:AD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 43D8B23BED8C7E5391E305011A9A392C5E5D798C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219023.roa
Signing time: Mon 24 Aug 2026 07:27:37 +0000
ROA not before: Mon 24 Aug 2026 07:22:37 +0000
ROA not after: Mon 23 Aug 2027 07:27:37 +0000
asID: 219023
IP address blocks: 188.220.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d8:b2:3b:ed:8c:7e:53:91:e3:05:01:1a:9a:39:2c:5e:5d:79:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 07:22:37 2026 GMT
Not After : Aug 23 07:27:37 2027 GMT
Subject: CN=5409B091C53839C80666DFEA13A20BA04B0439AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:c7:b5:1b:fa:2a:b8:c3:92:42:53:9f:d7:
96:32:76:ae:29:67:3e:88:bf:85:b2:e1:38:e3:4f:
43:7c:e3:bf:40:92:bb:d3:8e:1c:4f:41:c3:b0:8c:
7a:38:6f:dc:06:67:02:e9:3c:a9:b1:90:f8:aa:89:
7a:8d:ea:a3:1d:5a:f9:b5:25:bc:04:59:3f:cf:7c:
4f:d1:a4:1f:29:95:18:0d:43:c3:06:1f:bb:d7:b0:
45:13:96:6f:79:8d:c4:66:94:13:df:29:30:b4:fa:
ce:d4:35:9e:f5:07:84:63:85:ba:f0:f8:fb:b5:76:
f7:4e:2d:46:03:4b:f6:af:9a:5d:83:86:52:60:e9:
c7:46:1a:92:d6:f6:e0:b7:5f:c7:34:59:e3:b2:d6:
5a:ea:66:5a:2e:78:b8:85:e1:2c:21:8c:5c:fa:f2:
a6:8f:ed:ec:31:dd:a1:72:84:be:5a:33:24:6c:7e:
02:74:f1:1b:ff:29:ad:d0:74:c4:1e:16:3f:03:2d:
98:d1:01:38:9f:33:27:63:15:b9:93:cf:96:5d:ef:
75:a6:95:fb:9a:26:29:29:74:42:c3:47:24:76:54:
36:5f:bd:ed:bc:81:34:d5:ee:01:55:3c:de:61:02:
49:67:b2:03:47:b2:8f:77:d7:2f:1e:d7:79:29:a9:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:09:B0:91:C5:38:39:C8:06:66:DF:EA:13:A2:0B:A0:4B:04:39:AD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4d:57:89:49:c0:6b:f3:81:ef:c7:f1:f1:6c:7e:63:95:a9:
4f:5b:6c:11:67:8e:77:4e:e1:b5:c2:9a:a5:9d:eb:59:59:c2:
ca:05:bd:fe:e5:99:3c:33:3d:6c:af:d2:37:6d:27:92:a5:6f:
5b:6e:9f:b5:6f:46:81:64:9e:d3:fa:97:4f:ce:53:62:bb:a0:
14:cc:0a:9d:16:46:02:81:7b:f6:9f:e5:2b:62:ab:ba:37:9f:
0f:d5:c8:48:ea:3b:7d:94:cf:d8:32:35:f6:44:2b:db:1d:8a:
42:02:c1:b7:87:1c:d5:8d:03:6d:06:67:5c:b8:5b:77:b8:b8:
e0:21:1a:9b:b9:09:49:21:30:c1:e3:90:35:37:5c:29:19:c4:
4d:ef:85:f4:13:91:70:3e:f3:f0:97:d3:fc:bc:d1:78:e3:a1:
67:e2:38:0c:94:24:11:b9:ce:1b:48:66:1a:e6:1d:c7:67:27:
8e:54:0f:f8:d8:f8:f2:80:f7:20:74:6c:d2:a4:f6:7c:1a:73:
9f:3a:42:e6:93:fa:c1:e8:34:2f:89:22:64:a2:78:18:e6:97:
4a:1e:c8:d6:9e:10:c8:5a:a0:b3:43:e7:80:f8:97:46:df:a8:
fd:ea:d6:9a:2c:e6:53:44:3b:1b:25:56:90:e3:ff:b1:ce:7a:
bd:65:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:37 2026 by rpki-client