Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: +OWfDuzLYYut5nQ7IIWOihW380zkUC/GVw5CCU8O4oc=
Subject key identifier: B9:E6:B2:95:C2:03:18:3B:22:F7:CF:00:F0:8E:4B:41:46:68:6B:4F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 74958DD438086DB25BCF472EE154F376792B0C00
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
Signing time: Wed 29 Jul 2026 11:08:45 +0000
ROA not before: Wed 29 Jul 2026 11:03:45 +0000
ROA not after: Wed 28 Jul 2027 11:08:45 +0000
asID: 219105
IP address blocks: 51.146.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:95:8d:d4:38:08:6d:b2:5b:cf:47:2e:e1:54:f3:76:79:2b:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 29 11:03:45 2026 GMT
Not After : Jul 28 11:08:45 2027 GMT
Subject: CN=B9E6B295C203183B22F7CF00F08E4B4146686B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:63:31:48:1b:69:b8:2c:c7:c7:e9:4c:53:
6d:ad:d4:c5:83:65:20:28:76:c9:34:d5:af:11:0a:
b7:c2:54:b2:1b:f5:58:87:8a:cf:92:98:15:1a:84:
1c:1f:39:04:50:5e:1e:75:6a:31:f7:d9:26:cf:a2:
5c:02:b5:86:2f:1b:a1:68:11:08:f3:7e:53:39:0f:
cd:a8:32:40:f7:7b:92:bd:a1:27:9e:a3:67:5e:ec:
4f:94:75:75:df:f7:3a:32:ca:66:bc:f1:ea:20:5b:
45:3d:05:36:bd:07:53:5d:8a:48:fd:e0:77:78:e4:
33:88:1f:61:44:3a:a4:df:d2:2a:64:f2:49:ce:5b:
ec:90:2a:35:7f:a0:78:e9:eb:83:2a:4b:7f:12:81:
5b:f9:88:9e:02:98:64:03:5c:61:36:37:de:65:e9:
f4:66:d2:bd:74:5d:db:65:a9:01:8b:fa:c5:1c:65:
6a:7d:21:af:73:db:ab:f8:9b:f9:0c:7e:ca:a3:4d:
e4:15:06:ab:d9:80:8e:ae:95:ba:b3:72:e4:8d:af:
cd:f6:30:9b:97:01:22:10:12:db:ed:cb:71:31:31:
ab:ca:c3:56:a2:c7:66:ec:ae:26:5a:5a:28:8d:33:
d3:5a:f1:cb:30:e4:83:1d:83:1c:6a:a7:30:79:5c:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:B2:95:C2:03:18:3B:22:F7:CF:00:F0:8E:4B:41:46:68:6B:4F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.16.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c1:d6:f7:37:52:f3:24:0f:48:5b:d0:c0:49:27:82:e7:aa:
c5:f5:29:00:2c:fb:2e:62:63:95:97:71:77:94:cb:0c:22:e1:
a1:30:12:88:c8:8d:d8:bc:17:49:3a:d2:ba:6c:0e:22:a3:d5:
9f:ec:a7:94:b7:91:45:14:09:f7:53:4c:36:01:7d:26:82:04:
79:96:82:f0:f3:60:d7:8a:2f:eb:4d:52:a3:47:61:40:d1:7d:
26:e5:49:0f:c5:31:1b:ce:8d:73:03:bf:6f:10:88:8f:d6:fe:
5d:39:4a:d3:ab:72:de:22:27:ba:0f:fd:2d:96:f8:41:8e:68:
0f:82:50:89:a6:af:28:85:3b:44:ce:d8:0f:88:a1:52:c0:e5:
3c:7b:b4:5f:8a:ad:1f:a6:f7:92:40:dd:ae:0a:e4:da:4d:d5:
31:05:ba:80:6b:4e:fd:8c:8d:6c:3f:b3:2d:d0:53:f0:95:a0:
cf:db:e7:13:62:b8:e2:a0:09:72:c1:0f:b7:b1:28:f5:dd:39:
da:49:07:25:b0:26:17:aa:55:a7:37:ae:5e:35:8b:83:36:7c:
55:52:89:fb:04:6a:aa:e5:09:85:6e:19:43:3f:5b:de:cd:7e:
e9:da:7e:e2:82:e1:0f:90:66:fe:43:dc:44:ca:93:00:8d:d1:
2f:99:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:41:06 2026 by rpki-client