Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: 9AVnqkCpkieGvfUSbDjDYL0cnEl6nHmaE+euFmT30vM=
Subject key identifier: 7F:FA:EE:20:DD:CD:76:7D:A9:6B:8C:4B:DD:59:E0:0A:50:7C:37:C6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 038BAE9B996E486AED82DF358F542E043823EAA8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
Signing time: Fri 11 Sep 2026 17:45:04 +0000
ROA not before: Fri 11 Sep 2026 17:40:04 +0000
ROA not after: Fri 10 Sep 2027 17:45:04 +0000
asID: 219105
IP address blocks: 51.194.229.0/24 maxlen: 24
51.194.240.0/24 maxlen: 24
188.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8b:ae:9b:99:6e:48:6a:ed:82:df:35:8f:54:2e:04:38:23:ea:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 11 17:40:04 2026 GMT
Not After : Sep 10 17:45:04 2027 GMT
Subject: CN=7FFAEE20DDCD767DA96B8C4BDD59E00A507C37C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:03:8a:28:b5:2c:a9:df:f8:99:51:b0:ab:
71:8f:f5:98:55:e2:dc:aa:6b:3c:8a:cb:04:7a:f9:
ae:8b:e0:a8:fc:66:d3:d2:8e:10:57:53:b8:df:3c:
06:b4:c6:8c:d2:b2:66:ce:6f:78:82:31:63:e2:24:
02:94:05:4a:08:f3:3a:df:d3:2f:64:85:ec:43:ad:
75:b6:8a:96:f4:43:04:1a:72:b6:24:ac:28:5b:43:
a1:03:1e:53:70:be:03:38:c9:73:7b:7d:53:a4:3a:
4a:9c:bb:de:6e:21:91:54:2d:51:b0:b4:c8:3a:e9:
cf:9b:67:0e:4d:6f:2d:28:e4:ed:33:9a:24:2d:0b:
97:a2:d2:ce:d0:61:46:d7:d8:a1:c0:37:b1:db:57:
1a:84:aa:47:39:81:17:cb:13:a5:67:6c:3a:1c:16:
b2:ec:a9:07:c6:20:c5:6e:f2:48:11:81:0e:5a:2b:
86:c4:fe:18:94:77:83:6e:b9:85:33:b3:d5:b2:46:
a0:b0:d1:14:ec:64:0c:b1:ee:d1:00:5a:98:72:85:
3f:a8:1b:68:9a:36:9f:b2:98:57:65:b3:99:96:e9:
ba:5a:49:c4:9c:93:27:0d:f7:f4:6e:fc:98:fc:47:
bf:72:97:38:71:a8:36:b4:2f:45:77:30:bd:57:69:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:EE:20:DD:CD:76:7D:A9:6B:8C:4B:DD:59:E0:0A:50:7C:37:C6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.229.0/24
51.194.240.0/24
188.220.139.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0e:52:72:e1:dd:ca:eb:65:ab:0a:1e:76:4c:67:b4:56:4a:
65:1f:b3:4c:dd:b1:79:4f:c1:de:c9:40:e1:ae:8f:58:0e:bc:
1a:c3:c4:ad:08:57:4b:8a:f6:39:b8:83:f2:0d:95:be:41:89:
28:77:00:be:d2:11:bc:ec:bb:c6:a9:36:7a:fb:99:3c:77:3b:
8b:93:33:22:43:a8:fa:3e:ca:0d:c7:2d:bf:e1:af:bd:d6:8d:
ce:cc:9b:6b:4d:8a:53:b5:71:73:c3:e3:da:7c:dc:74:3c:3b:
6b:65:0e:c9:54:1b:aa:cb:2c:a0:83:80:80:46:a9:8e:0f:15:
49:e5:9f:e9:86:ba:b3:78:aa:a1:8f:9d:01:c6:79:84:bc:72:
e6:f7:80:db:37:e1:c3:23:47:5f:a8:c4:0c:fb:66:be:cf:fa:
71:f2:70:e6:74:8b:cb:da:93:c5:4d:11:1f:da:14:3f:f8:5f:
49:ee:1b:7a:6b:3e:17:51:ca:36:6a:97:a9:d4:88:5e:86:53:
c1:6a:92:40:d0:51:74:95:35:80:22:15:a9:95:a8:df:8d:99:
c5:43:0a:c1:d6:c9:9d:9f:72:f8:07:ab:fb:31:08:95:4e:fb:
75:28:8f:30:ce:4d:b4:d6:47:88:62:4b:d8:a2:93:8a:e4:1c:
93:75:52:14
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUA4uum5luSGrtgt81j1QuBDgj6qgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTExNzQwMDRaFw0yNzA5MTAxNzQ1MDRaMDMxMTAvBgNV
BAMTKDdGRkFFRTIwRERDRDc2N0RBOTZCOEM0QkRENTlFMDBBNTA3QzM3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4QOKKLUsqd/4mVGwq3GP9ZhV
4tyqazyKywR6+a6L4Kj8ZtPSjhBXU7jfPAa0xozSsmbOb3iCMWPiJAKUBUoI8zrf
0y9khexDrXW2ipb0QwQacrYkrChbQ6EDHlNwvgM4yXN7fVOkOkqcu95uIZFULVGw
tMg66c+bZw5Nby0o5O0zmiQtC5ei0s7QYUbX2KHAN7HbVxqEqkc5gRfLE6VnbDoc
FrLsqQfGIMVu8kgRgQ5aK4bE/hiUd4NuuYUzs9WyRqCw0RTsZAyx7tEAWphyhT+o
G2iaNp+ymFdls5mW6bpaScSckycN9/Ru/Jj8R79ylzhxqDa0L0V3ML1XaSaRAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUf/ruIN3Ndn2pa4xL3VngClB8N8YwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE5MTA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAM8Ll
AwQAM8LwAwQAvNyLMA0GCSqGSIb3DQEBCwUAA4IBAQBhDlJy4d3K62WrCh52TGe0
VkplH7NM3bF5T8HeyUDhro9YDrwaw8StCFdLivY5uIPyDZW+QYkodwC+0hG87LvG
qTZ6+5k8dzuLkzMiQ6j6PsoNxy2/4a+91o3OzJtrTYpTtXFzw+PafNx0PDtrZQ7J
VBuqyyygg4CARqmODxVJ5Z/phrqzeKqhj50BxnmEvHLm94DbN+HDI0dfqMQM+2a+
z/px8nDmdIvL2pPFTREf2hQ/+F9J7ht6az4XUco2apep1IhehlPBapJA0FF0lTWA
IhWplajfjZnFQwrB1smdn3L4B6v7MQiVTvt1KI8wzk201keIYkvYopOK5ByTdVIU
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:23:52 2026 by rpki-client