Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219233.roa
File: AS219233.roa (raw, json)
Hash identifier: 3/Z5Edk1Lp24pai2QL6YU2VrjfeoxdcDV2520vId+oc=
Subject key identifier: D5:DF:8C:AD:89:DD:D1:7D:F6:AD:48:99:71:3D:64:31:6C:76:13:8A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1B0AE944EEF23924737D87ADA65CF8BCB1FF023A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219233.roa
Signing time: Mon 24 Aug 2026 07:07:18 +0000
ROA not before: Mon 24 Aug 2026 07:02:18 +0000
ROA not after: Mon 23 Aug 2027 07:07:18 +0000
asID: 219233
IP address blocks: 188.220.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0a:e9:44:ee:f2:39:24:73:7d:87:ad:a6:5c:f8:bc:b1:ff:02:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 07:02:18 2026 GMT
Not After : Aug 23 07:07:18 2027 GMT
Subject: CN=D5DF8CAD89DDD17DF6AD4899713D64316C76138A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:f9:7c:fb:74:ff:cb:d9:68:c6:e4:95:a1:
5a:79:0a:cc:66:77:0d:c1:85:9a:1e:a1:6f:e9:fb:
43:ca:d9:f3:ea:16:fb:0a:e1:78:c9:0c:79:cf:0a:
fc:d4:83:8c:8d:c0:64:5d:51:ec:5b:f5:c7:df:9b:
22:a3:9d:43:13:f1:4f:d6:7b:3e:9b:2e:68:4d:97:
a5:d0:82:1e:9e:28:a7:c8:ac:26:de:d7:ff:0e:29:
75:b4:d8:2d:52:8d:97:00:0b:7b:48:6a:e4:7a:dc:
72:cc:c5:22:ed:1b:5c:f6:3c:38:6a:0b:09:1f:a4:
47:1f:68:0d:ab:c3:48:23:72:d7:49:30:b2:0c:ff:
2b:41:ef:89:5b:f8:d2:8f:14:e8:68:d7:36:85:14:
2e:c5:b9:eb:d9:9a:5d:03:ed:46:b0:9f:99:be:80:
4b:d4:09:0b:e3:9c:c9:94:2e:08:30:24:30:2f:06:
59:36:ab:6b:15:d4:74:52:5d:e4:ba:d2:e8:b8:45:
32:2b:c6:18:c5:58:6e:10:b1:ec:39:c9:7a:a4:15:
4e:c6:f5:f8:26:a1:15:8f:24:e0:4d:ce:57:b6:14:
2e:86:05:e2:a1:88:bd:7f:18:64:df:d5:21:1d:f4:
dd:ae:70:e5:0b:bb:b5:05:71:ec:d5:15:d6:22:93:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:8C:AD:89:DD:D1:7D:F6:AD:48:99:71:3D:64:31:6C:76:13:8A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.24.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6c:6e:de:1b:20:6a:7e:53:05:74:3a:e9:4f:62:4f:19:86:
29:8b:f1:a3:bf:ff:29:c3:4d:4c:9c:35:4b:dd:6c:dc:9b:dd:
53:5c:0b:de:3c:7d:23:04:fd:24:37:9e:73:f7:25:22:74:25:
a6:c3:e2:44:a3:94:41:97:f1:b1:e0:aa:2c:b6:76:6b:3d:96:
ec:fe:ce:cc:4d:d4:3f:16:0c:81:0e:60:8d:d0:c7:37:50:80:
8a:2b:21:98:11:12:fd:4c:06:98:29:94:3c:94:54:34:ec:fc:
06:5b:a4:ac:29:30:76:1b:6c:d4:a5:2c:e4:86:e1:59:18:20:
74:39:53:7b:f7:01:c5:c6:ab:59:43:fc:14:1f:3e:ec:a1:16:
c1:4b:26:1a:f3:de:19:f4:fd:37:42:2a:38:05:11:c6:33:df:
fc:6d:4b:2d:4b:3e:34:33:8d:01:06:2b:f2:23:1f:13:9c:d4:
04:a9:b8:08:c2:af:ad:4e:49:d2:d2:b3:12:aa:d0:d7:3c:3e:
34:71:c3:53:eb:af:b5:e9:57:e3:b7:1f:de:39:4b:e7:c9:53:
00:c5:8d:13:c4:82:5a:1b:81:92:8c:0d:9c:ba:17:fe:2e:23:
28:ff:f3:e7:1f:4c:c6:a6:26:83:1b:56:54:a6:2b:02:ca:f7:
38:52:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:42 2026 by rpki-client