Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219057.roa
File: AS219057.roa (raw, json)
Hash identifier: WuuDYSqhBEIiX6LWmEm5+3NdpDtbiuZWxOoWhHUmNNU=
Subject key identifier: 3E:8A:E3:0E:DF:D7:A9:35:E9:7D:3D:B0:F1:E6:9D:CA:D8:64:7C:4C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0D9CC44F6A0341218EE37DEFED0666F5057AB27E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219057.roa
Signing time: Mon 31 Aug 2026 10:35:39 +0000
ROA not before: Mon 31 Aug 2026 10:30:39 +0000
ROA not after: Mon 30 Aug 2027 10:35:39 +0000
asID: 219057
IP address blocks: 188.221.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9c:c4:4f:6a:03:41:21:8e:e3:7d:ef:ed:06:66:f5:05:7a:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 31 10:30:39 2026 GMT
Not After : Aug 30 10:35:39 2027 GMT
Subject: CN=3E8AE30EDFD7A935E97D3DB0F1E69DCAD8647C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:a1:8a:8b:ca:28:d8:a9:d3:f6:4e:37:75:
8a:7f:d5:a5:0a:f0:b5:e3:18:32:74:8f:b4:a1:47:
d6:39:b9:15:10:c0:54:1f:c7:7d:e7:d3:79:36:1f:
67:c5:3e:f1:92:38:5a:39:3b:db:3d:fd:0a:8b:e6:
bc:ee:2d:d3:3b:3c:1a:16:6e:63:a3:f0:68:88:4b:
ae:bd:92:21:2b:fe:11:17:02:e0:04:7e:b5:3c:0e:
7d:32:28:da:be:08:b5:f0:ba:f6:52:a6:4f:d4:e8:
4a:ad:c2:b9:87:45:9c:a3:18:fb:f9:b0:1d:62:79:
86:80:85:df:90:ba:1e:af:ac:7c:7f:40:b3:74:ce:
d1:71:d6:9e:73:0d:27:89:b2:dc:1b:dd:da:17:aa:
12:fb:4e:2f:4d:4c:70:6c:09:2e:27:b4:9b:69:6b:
17:e4:45:d0:04:9c:b7:de:c0:c7:08:a1:bd:f8:cd:
e9:f6:4b:31:8f:39:16:4b:03:4c:ec:9e:c7:6e:8a:
54:b8:10:a1:22:76:42:dc:08:55:d4:12:dc:c0:fd:
f8:c3:a3:ea:b8:1a:4a:f8:7a:23:b2:60:de:10:1a:
80:2a:91:95:e3:c9:28:a9:89:c0:47:7a:55:0d:96:
20:19:86:e3:a9:78:4b:7a:40:bd:29:78:1f:b2:b0:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8A:E3:0E:DF:D7:A9:35:E9:7D:3D:B0:F1:E6:9D:CA:D8:64:7C:4C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5e:57:8f:2d:b6:e6:9b:ac:5d:8e:4c:e2:bd:7b:01:6e:be:
c4:05:76:30:13:c2:cc:33:b3:e5:22:db:e8:01:4b:eb:ca:6c:
06:e5:ef:a5:75:8b:ab:09:0d:81:34:3b:5e:67:b3:e2:95:0c:
ef:0d:ef:fe:34:b3:7a:05:52:a5:b2:25:3a:6a:3a:ed:2c:f3:
5a:d6:9b:29:18:c9:90:8e:bb:b4:e6:99:d0:7d:91:95:58:48:
39:7d:94:77:aa:3e:13:88:51:23:e9:4e:22:3e:c7:c6:27:51:
db:c5:fb:b7:a2:42:c7:7d:35:a9:ae:c2:d4:21:fb:c7:e4:27:
ed:94:b8:02:54:74:a2:17:de:5e:df:ed:86:05:34:33:9c:4b:
59:12:9e:e1:c4:90:a9:bd:91:73:f6:41:52:b8:57:c5:52:68:
f1:7e:cb:a0:03:37:b3:b0:9b:64:36:b9:a1:76:a0:d4:20:ec:
eb:f2:0c:5b:dd:8c:e3:90:e7:81:ca:59:25:43:36:0a:99:78:
52:d6:40:68:4a:18:f7:2f:c0:77:99:bf:c8:b7:87:a7:2b:e9:
c8:cc:8a:16:45:a4:e6:e3:05:b1:b4:cd:82:dd:4d:83:2e:0e:
79:4e:1f:7a:d6:b6:39:fd:97:12:1e:47:d4:4e:e3:f7:9c:87:
a7:ec:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:13:10 2026 by rpki-client