Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: 7enF6iMebEvZCD1CyytYLvHaWnKf7OFAiI5tp++qNWA=
Subject key identifier: 85:D4:2A:4E:80:35:68:9B:38:46:F0:A0:86:3D:74:09:92:02:23:2D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 07E8AB88B77A6601F9E0245A711AA11F15B7EA58
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219393.roa
Signing time: Sun 30 Aug 2026 15:44:30 +0000
ROA not before: Sun 30 Aug 2026 15:39:30 +0000
ROA not after: Sun 29 Aug 2027 15:44:30 +0000
asID: 219393
IP address blocks: 51.194.223.0/24 maxlen: 24
51.194.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e8:ab:88:b7:7a:66:01:f9:e0:24:5a:71:1a:a1:1f:15:b7:ea:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 30 15:39:30 2026 GMT
Not After : Aug 29 15:44:30 2027 GMT
Subject: CN=85D42A4E8035689B3846F0A0863D74099202232D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:5f:6f:5a:7e:94:c7:88:ec:d8:a3:92:03:
27:33:37:16:b7:36:6f:19:17:16:53:7e:3e:cb:18:
ea:a7:ff:21:e3:ed:ac:70:42:93:ba:32:4a:8f:b3:
11:d1:a9:f0:20:15:a3:45:c8:af:71:06:ab:c8:cf:
36:b8:4c:7c:b6:3e:fe:ba:1d:07:fe:41:fc:4a:97:
f2:56:cf:95:bd:db:ed:b0:b3:49:33:18:b6:0a:c0:
f6:79:b3:53:b8:e3:b4:65:d8:bd:0e:0c:0c:b9:90:
41:19:dc:28:c4:69:7d:29:95:12:50:5d:74:e7:19:
66:5a:63:ab:fa:82:41:cb:60:cb:ca:47:39:39:e3:
c7:32:5e:ef:80:58:6a:88:b7:5e:b7:64:e1:c2:ff:
ea:1e:d4:81:cf:a0:ca:5f:b6:7c:a1:f9:40:3b:73:
6c:0e:dc:f9:d1:3e:8d:1a:2a:b7:f9:71:74:c5:84:
2f:e3:95:36:69:71:4d:bc:48:69:3f:f4:d3:be:84:
d2:9f:2f:e1:9a:fd:0c:4b:e7:95:30:9d:d8:d6:b5:
59:fd:2c:2f:12:8d:c6:42:01:06:cd:1f:74:29:ef:
34:d2:97:73:f6:10:4f:ad:ae:7a:d4:f3:89:0e:d9:
f4:b2:95:cd:0c:b1:f7:55:92:2b:e9:37:2d:05:61:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D4:2A:4E:80:35:68:9B:38:46:F0:A0:86:3D:74:09:92:02:23:2D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.223.0/24
51.194.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a8:1b:9e:c3:c0:fa:39:7c:65:03:12:08:af:b8:56:88:76:
b4:28:d1:9d:9e:90:8b:f2:be:94:2d:d5:c6:82:ea:ff:1c:42:
85:cd:14:f3:20:94:b5:62:ce:1b:e8:15:23:0d:f5:51:63:b0:
2d:6c:2f:a2:7a:86:fa:ef:2e:c4:2d:94:39:f5:f5:a6:75:f8:
9e:7e:b1:e1:8f:1c:35:30:0b:01:20:7e:f6:91:67:fe:11:8e:
ed:0a:3e:09:25:0b:1e:36:fe:e1:09:92:b0:8f:95:3a:26:cc:
6c:a0:e6:92:75:0f:21:2e:5e:ff:69:14:ac:27:57:75:0e:d2:
00:86:21:28:08:64:9d:06:dd:3a:ad:7f:0d:08:26:26:f1:4a:
79:6e:a4:2f:e5:d6:e0:21:68:12:12:62:aa:4d:21:4f:d9:2b:
a8:4a:f3:8a:db:69:28:e8:15:68:2d:a7:63:1f:be:31:52:48:
5e:49:69:b0:42:99:da:38:29:48:00:80:0d:c1:9d:d4:ed:1e:
f2:7b:b8:5a:b7:59:17:0c:29:6d:1a:bb:95:0c:51:35:a6:b9:
46:e6:74:21:8b:04:36:ac:ff:c6:d3:e7:cc:87:16:a0:af:e1:
16:9b:4b:0c:b1:c5:24:9b:84:55:88:9f:59:3c:aa:e8:14:e7:
26:71:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:12 2026 by rpki-client