Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: Fb5p/EcGJW8FWzZ6vXjqvHDRX64OIXcn35LTqD1A8Yc=
Subject key identifier: 87:5F:DB:B0:81:75:26:82:E1:D0:E0:C9:D9:54:5B:18:62:31:91:DE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7F86A7C53749441F118B81041AA44AA2AD7B035C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219075.roa
Signing time: Sat 10 Oct 2026 09:43:53 +0000
ROA not before: Sat 10 Oct 2026 09:38:53 +0000
ROA not after: Sat 09 Oct 2027 09:43:53 +0000
asID: 219075
IP address blocks: 94.118.7.0/24 maxlen: 24
94.118.21.0/24 maxlen: 24
94.118.23.0/24 maxlen: 24
94.118.51.0/24 maxlen: 24
94.118.83.0/24 maxlen: 24
94.118.85.0/24 maxlen: 24
94.118.89.0/24 maxlen: 24
94.118.91.0/24 maxlen: 24
94.118.93.0/24 maxlen: 24
94.118.94.0/24 maxlen: 24
94.118.98.0/24 maxlen: 24
94.118.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:86:a7:c5:37:49:44:1f:11:8b:81:04:1a:a4:4a:a2:ad:7b:03:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 10 09:38:53 2026 GMT
Not After : Oct 9 09:43:53 2027 GMT
Subject: CN=875FDBB081752682E1D0E0C9D9545B18623191DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:c1:3a:a9:c1:63:13:6a:17:53:f4:eb:83:
a9:a6:d4:ca:47:dc:9c:60:49:f0:0b:16:f1:c5:ab:
5c:35:a7:40:0a:9c:16:82:ff:25:cd:74:be:31:64:
8d:b9:92:17:51:70:46:6e:f6:b9:28:ca:0b:1f:18:
e0:b9:d8:f2:5f:11:12:43:9f:14:99:4f:f6:f0:67:
8e:8d:37:cb:b2:2e:2c:63:c8:7e:b4:1c:a5:4c:b2:
94:a1:e8:0c:b5:79:f5:ee:f4:61:a2:43:67:95:7c:
da:f8:01:c8:5f:68:4c:4e:8e:fd:e0:58:bc:46:52:
21:12:1b:5d:34:86:c6:97:1a:dc:e4:21:f1:22:8f:
79:08:c0:83:f5:f8:62:b6:29:54:d4:9f:ab:f8:88:
35:b5:ea:25:35:e6:45:07:77:81:b4:7e:38:97:07:
ee:22:96:d5:16:bc:9c:2c:b6:4a:05:e2:e5:56:98:
fa:91:d4:fb:ec:c3:b4:01:e9:2d:00:7f:7c:69:06:
c9:ad:62:45:f4:e2:f3:99:85:b6:13:47:43:f1:0b:
5f:ec:2d:96:21:a3:ec:92:de:f8:90:8f:24:19:b8:
15:3a:de:67:c8:ad:cc:b4:e8:20:59:a7:07:d7:33:
00:e8:5f:80:43:6a:86:53:e6:7a:6a:3c:68:d0:eb:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5F:DB:B0:81:75:26:82:E1:D0:E0:C9:D9:54:5B:18:62:31:91:DE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.7.0/24
94.118.21.0/24
94.118.23.0/24
94.118.51.0/24
94.118.83.0/24
94.118.85.0/24
94.118.89.0/24
94.118.91.0/24
94.118.93.0-94.118.94.255
94.118.98.0/24
94.118.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:71:75:c5:1a:21:75:d0:be:e1:a1:2b:c9:a0:3f:12:81:2f:
6a:5b:4f:4c:cc:55:b0:68:63:84:d2:e4:83:39:37:f5:36:c1:
fa:db:0a:80:1d:0d:db:00:8f:72:9e:89:96:e9:50:ca:e4:57:
54:74:94:2c:57:54:07:50:ff:ef:fc:2a:bb:34:f0:aa:33:84:
f5:8f:6e:c8:78:f1:26:86:77:8c:8f:71:50:d1:46:b2:be:91:
d9:4a:dd:05:ae:c8:d6:9c:0c:cd:df:c4:ac:60:c9:0e:58:5b:
86:11:ef:07:a4:38:01:3b:b8:cb:69:a2:34:24:54:d4:3c:82:
26:87:b4:00:0c:ca:d8:b5:27:bb:a5:ea:e5:9b:4c:80:d7:a1:
c6:c7:72:a8:23:89:01:bf:63:2a:77:86:7d:57:b7:96:75:f9:
22:2e:9a:d4:00:6e:d3:f6:a5:37:20:a9:0a:e1:92:57:71:2f:
c4:d3:35:25:0a:3c:9d:3f:15:45:4a:da:ad:65:4f:77:24:94:
94:b0:d9:5a:fc:09:a9:2c:9c:83:58:ed:0d:1f:a3:bc:2c:b4:
14:5f:34:07:1a:bd:45:18:6a:f0:b7:13:82:32:38:5e:7b:8a:
25:8b:95:9b:20:c7:e6:b1:98:79:04:fd:5b:5c:74:7a:58:b9:
7e:b7:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:32 2026 by rpki-client