Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219253.roa
File: AS219253.roa (raw, json)
Hash identifier: YFX387Mm6vJkSydWhcYileqMo7Nut+eav7Q/3IzVasw=
Subject key identifier: 61:D5:47:6A:E4:ED:18:DF:AB:21:4B:38:2B:DF:2A:FA:13:4F:EA:82
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 490F6DDF24403138246A4F249BFA44C45FC9B0E3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219253.roa
Signing time: Mon 13 Jul 2026 07:24:29 +0000
ROA not before: Mon 13 Jul 2026 07:19:29 +0000
ROA not after: Mon 12 Jul 2027 07:24:29 +0000
asID: 219253
IP address blocks: 188.220.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0f:6d:df:24:40:31:38:24:6a:4f:24:9b:fa:44:c4:5f:c9:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 13 07:19:29 2026 GMT
Not After : Jul 12 07:24:29 2027 GMT
Subject: CN=61D5476AE4ED18DFAB214B382BDF2AFA134FEA82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:08:09:d2:59:b5:14:0a:69:43:97:c5:ce:
21:e7:c5:cb:4f:ba:ce:0a:9d:a3:6a:fe:cd:5f:44:
62:5e:1b:32:63:7f:66:ba:f3:47:bd:d8:c1:85:c2:
8f:dc:62:2b:fd:fd:21:3d:f6:67:73:ba:59:f3:63:
9c:0c:fc:1d:0c:d7:9f:ba:3f:10:90:9f:c2:f4:16:
93:7a:93:12:cc:52:86:5a:f4:58:15:a2:8a:e9:89:
cc:fc:3d:d5:6e:70:6c:4b:c4:11:cc:ad:84:06:60:
26:2c:b7:02:0f:0c:70:9e:db:7e:01:b0:88:33:2a:
3d:98:06:3f:9e:78:6e:68:ab:76:70:14:c2:b0:78:
1f:9b:ab:35:1c:9c:2e:b3:8f:c8:30:d6:90:98:45:
62:67:0a:41:b2:70:5a:6e:d6:65:1c:53:a9:a5:4c:
ca:ba:6e:26:c7:b9:6f:87:0c:4c:17:9e:04:1e:83:
73:5e:61:2a:04:95:60:5e:8c:f2:bd:e7:05:7a:5c:
e4:e8:94:0f:5f:b4:22:a9:ab:91:36:97:36:ba:d5:
10:35:39:98:6e:18:b1:65:36:41:70:27:8c:5a:59:
94:8c:65:22:0b:22:13:d4:02:8c:c6:4f:dd:7f:f6:
a7:a5:67:ef:50:60:e4:58:28:f0:04:56:be:56:39:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:47:6A:E4:ED:18:DF:AB:21:4B:38:2B:DF:2A:FA:13:4F:EA:82
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.124.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8f:65:6f:8e:70:c0:ed:16:27:bb:f4:ee:5c:65:cb:cb:80:
51:95:da:48:be:03:f9:e8:cb:82:89:59:83:ea:eb:ea:b5:c1:
4e:03:8d:ec:fb:1d:ac:4c:de:60:be:5d:e9:99:1b:75:6c:f2:
f1:02:86:99:c2:e2:4b:ec:8c:4a:09:b4:54:72:03:6c:6a:4f:
f9:e9:43:ca:51:5b:e8:59:75:a9:8e:19:d8:6d:24:c9:82:7c:
44:47:59:ca:b4:2c:bc:92:87:bc:ca:1b:3a:ff:8b:06:9e:aa:
8e:ad:69:61:b1:88:36:66:2a:94:e4:7a:41:44:81:ec:e6:69:
51:76:ca:30:a9:37:e6:eb:30:e8:19:3c:27:d9:2e:6e:23:f9:
e7:9d:c2:bb:ea:1a:f9:f7:ab:a3:e3:b8:6f:9a:28:bb:85:86:
34:06:ab:02:0b:c8:c0:ed:e4:e5:75:19:9a:26:a7:dd:ad:dd:
be:37:aa:35:90:b5:34:4c:80:ea:75:47:2f:b1:46:39:a7:0e:
c9:80:2f:fa:ee:6b:78:31:9d:fe:26:74:9d:16:79:49:75:bd:
ad:b3:4e:05:aa:47:55:ad:50:b5:f3:9a:7d:67:8d:db:7d:9d:
cd:c9:a8:94:10:a4:0c:b6:a0:fe:27:2a:c3:01:72:e5:b1:6c:
aa:fc:a8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:40 2026 by rpki-client