Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219076.roa
File: AS219076.roa (raw, json)
Hash identifier: xDT8ZSW4DkmpFDbuWetRttTP3PBBr7i6IbtNhmXuFSc=
Subject key identifier: B3:E9:47:E0:71:B4:0A:73:49:5B:0F:E2:92:E9:6C:B4:65:0D:0E:83
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 163C4D5B2BEDBCD71F1281D99583DB8BCC53632E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219076.roa
Signing time: Mon 24 Aug 2026 07:25:57 +0000
ROA not before: Mon 24 Aug 2026 07:20:57 +0000
ROA not after: Mon 23 Aug 2027 07:25:57 +0000
asID: 219076
IP address blocks: 188.220.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3c:4d:5b:2b:ed:bc:d7:1f:12:81:d9:95:83:db:8b:cc:53:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 07:20:57 2026 GMT
Not After : Aug 23 07:25:57 2027 GMT
Subject: CN=B3E947E071B40A73495B0FE292E96CB4650D0E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:8d:a7:a8:65:35:6d:ee:72:ce:43:49:b5:
4d:d8:73:af:d9:f2:e4:a1:7b:88:6c:e9:66:e4:de:
ed:25:b9:6d:b0:0b:5b:26:ab:86:f6:c3:7a:cd:2b:
54:4c:c0:f0:7c:db:76:92:83:33:1f:38:32:49:a8:
c1:bd:b5:9c:05:17:52:13:27:0c:5c:93:ca:e5:9e:
47:c7:bc:b1:8a:87:6c:b8:fa:75:bb:12:3a:3b:62:
c3:3f:28:44:1d:83:11:c3:06:a5:8d:b6:ae:88:85:
eb:fd:15:76:55:c8:f4:c7:ca:f7:95:c6:a5:17:93:
93:13:8e:0c:e9:ae:ae:55:a7:d8:21:e8:fe:06:3c:
0d:f4:2c:bb:0f:f1:b5:54:96:ea:19:00:fd:58:5e:
bb:77:9f:34:cc:bf:55:78:b1:1b:42:d7:91:47:94:
0c:57:2f:02:c0:4d:8c:c7:2a:f9:b6:9e:50:1c:ad:
47:56:90:ac:9e:49:ac:f1:f6:82:05:17:e4:11:72:
52:95:3f:5d:b3:ea:8a:0f:a4:32:73:46:2e:33:90:
5d:d4:5d:86:fc:fc:fc:68:c0:71:42:a2:94:03:93:
b2:dd:ef:16:51:48:58:53:ce:13:84:e7:51:39:0c:
e2:a7:f7:3b:ef:1a:69:99:e6:e3:a0:c2:2e:f3:35:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:47:E0:71:B4:0A:73:49:5B:0F:E2:92:E9:6C:B4:65:0D:0E:83
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:46:9a:a3:70:03:0d:94:f6:eb:f2:fe:1a:9c:a9:6e:cc:6c:
42:5d:d7:ce:91:9c:9b:8b:6a:83:a7:87:c9:3c:37:e4:27:fa:
a9:af:3b:b3:fd:1b:28:fb:f8:54:85:7e:e0:a4:ee:84:30:36:
7a:df:1a:2a:56:73:e5:c7:30:7b:72:da:84:e3:d1:5e:2d:0a:
ac:f7:31:8f:8f:02:bd:3c:93:01:af:15:b4:41:a9:0b:4f:3c:
0a:9d:a8:a9:3f:92:91:34:35:ec:62:b5:77:e9:34:e0:62:9a:
61:1d:13:de:bc:40:8b:7a:05:4b:55:cd:06:02:c7:d0:36:d4:
7f:c1:20:ae:17:29:93:bb:bf:b9:86:4e:c3:18:87:94:6d:ae:
1c:61:5d:1a:b6:b8:21:aa:28:04:25:b9:54:f8:df:4f:fb:02:
7c:35:df:9d:af:1f:b7:79:33:aa:f8:69:19:48:a3:19:83:5c:
28:00:54:02:2a:38:38:b5:15:0f:4c:1a:82:0d:9e:fb:33:0e:
e9:36:b2:50:18:3b:a1:33:b6:46:66:06:6b:39:38:16:6f:9b:
75:5f:d5:ea:1a:7d:7a:fe:2a:08:cc:72:49:d5:a1:47:70:12:
e3:85:a2:70:80:9f:45:b8:75:33:16:bb:e1:38:79:28:c1:a4:
5b:e4:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:44 2026 by rpki-client