Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: d5rnIEZz4niDouzmVF55MmZaMR9pnS0ff+r9uOpVzB8=
Subject key identifier: F6:72:02:E1:08:09:B1:A0:64:77:30:1F:65:81:D1:B2:8E:96:46:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 42659E4F27209B424EFA5A209E3C1F4022295247
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
Signing time: Tue 20 Oct 2026 08:42:44 +0000
ROA not before: Tue 20 Oct 2026 08:37:44 +0000
ROA not after: Tue 19 Oct 2027 08:42:44 +0000
asID: 219105
IP address blocks: 188.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:65:9e:4f:27:20:9b:42:4e:fa:5a:20:9e:3c:1f:40:22:29:52:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 20 08:37:44 2026 GMT
Not After : Oct 19 08:42:44 2027 GMT
Subject: CN=F67202E10809B1A06477301F6581D1B28E964654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:08:10:86:86:af:b6:77:54:3a:01:e4:f4:
dd:e1:df:6a:a1:4e:59:81:d8:37:ce:ce:a7:ec:e0:
81:ff:e5:22:4f:1e:31:eb:f5:46:19:54:a4:03:b4:
38:0a:de:4f:9d:58:1d:66:33:6d:9b:65:70:44:c8:
8c:91:2c:17:6d:6d:a8:d0:83:51:72:9b:f6:a9:36:
88:17:83:e3:2d:f6:a8:c1:91:45:23:7d:74:d2:72:
c4:22:b8:f5:e2:e9:30:64:ac:c1:97:e7:8f:4c:19:
52:83:f5:d4:e3:04:c5:7c:e1:37:63:9c:dc:10:6c:
7a:48:d4:b1:c9:d1:ed:ac:4b:69:52:57:8d:42:a9:
08:41:93:0a:47:9a:46:3e:70:2f:eb:54:00:3a:51:
91:ac:56:58:8f:7a:4a:3b:ca:67:cd:b2:66:9e:e8:
a1:24:5e:7a:40:ad:72:eb:f5:af:4a:11:c7:92:19:
5d:07:e6:92:9e:c7:22:dc:1e:8a:ab:1b:b8:94:8c:
34:c7:4a:9d:c7:c7:08:14:14:5c:32:18:a6:1d:82:
b6:7e:e8:a8:af:31:39:86:b9:a0:bf:28:f6:36:de:
99:e6:b3:3f:45:02:fc:2e:fc:6d:ed:ab:36:15:04:
42:b2:80:62:a7:ea:0c:e9:c0:6e:6b:f9:3e:80:d1:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:02:E1:08:09:B1:A0:64:77:30:1F:65:81:D1:B2:8E:96:46:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4e:8a:26:d0:fc:e5:8e:88:8c:e1:0f:1e:81:73:18:1e:48:
81:b5:4a:02:67:43:d6:b4:e1:62:42:f2:52:bd:cf:18:2d:20:
f4:37:8a:e8:99:72:08:e3:96:d4:2b:58:d0:dd:49:5f:8f:8e:
24:cb:d6:94:5f:fe:b0:05:28:21:b0:23:8f:a7:2e:05:37:4a:
e4:8b:b2:44:52:27:f5:98:8f:f9:d7:42:f0:d0:4f:1c:6a:31:
fa:ea:59:58:85:91:ca:3c:30:d0:d2:f5:49:79:0e:db:66:c6:
7a:63:da:0b:ad:1c:a5:54:4a:ad:db:4d:b5:5d:db:af:d3:d9:
3e:90:cf:32:b4:ca:b7:c2:fc:3d:40:b4:74:db:43:b4:75:a2:
57:96:42:8b:40:cf:92:69:dd:64:6b:98:6e:6d:57:48:1a:4b:
de:3a:07:50:c2:50:08:f8:ad:a8:cc:e3:e3:97:92:0a:e4:ce:
d4:f8:50:02:60:d8:04:10:e4:b0:a1:c4:98:04:0b:0b:87:45:
33:37:06:1e:ef:c8:be:82:a8:a2:a0:cb:e7:86:95:1f:6b:8d:
54:9a:ef:a5:a2:e8:09:4b:1a:55:61:e8:1b:5a:8c:da:85:a5:
8a:57:c6:7d:0a:92:d5:76:72:01:5c:c5:70:98:da:4c:32:c8:
59:05:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:43:53 2026 by rpki-client