Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: ZV2hHOEdPxE/SSWkKABP/jjJhyzssxHCxs9AHMlyKP8=
Subject key identifier: 60:D9:3F:17:38:5A:0F:53:5A:BB:E6:68:7C:86:35:0B:60:18:99:23
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 50AD3A3B72402D3FDA9DE8339878DFC8CC8B086B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219393.roa
Signing time: Thu 25 Jun 2026 07:01:18 +0000
ROA not before: Thu 25 Jun 2026 06:56:18 +0000
ROA not after: Thu 24 Jun 2027 07:01:18 +0000
asID: 219393
IP address blocks: 188.220.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ad:3a:3b:72:40:2d:3f:da:9d:e8:33:98:78:df:c8:cc:8b:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 25 06:56:18 2026 GMT
Not After : Jun 24 07:01:18 2027 GMT
Subject: CN=60D93F17385A0F535ABBE6687C86350B60189923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:5c:79:2d:12:1d:0b:ac:5f:62:b3:78:b8:
59:7d:fc:7e:fc:c1:f0:d2:4b:b6:a0:ca:bc:01:7e:
79:bd:f4:aa:4c:83:cc:c7:e9:a2:ed:3d:cc:39:50:
88:35:ce:cb:5a:c7:9b:db:ce:8a:c9:d1:d7:93:88:
cc:b0:82:79:9c:69:dc:59:ab:ee:3b:e9:75:9f:cc:
5d:d1:ef:9e:77:e4:95:1b:ae:78:b3:20:33:c4:bf:
46:63:57:a0:3d:5e:ee:e3:55:8a:86:e2:f2:7b:96:
64:02:18:93:d8:69:45:0d:c2:ce:00:fb:06:9d:3f:
cf:34:9a:00:e7:6c:27:a9:76:e5:ac:02:dc:ba:11:
06:d5:df:63:2f:3f:5b:24:c5:3a:06:ee:66:bb:1a:
98:b2:d0:fd:19:56:12:27:d1:e9:ea:b0:af:9c:1f:
5b:ba:70:c4:b8:90:be:bf:07:75:3f:0a:89:c9:5f:
63:2b:51:39:a3:f0:e7:db:6d:89:fb:56:2f:df:cb:
20:f0:a5:49:33:0a:85:c1:4c:11:06:82:7c:50:f3:
2c:98:20:51:d0:22:fc:31:65:7d:5e:68:f2:dd:89:
0f:e5:e5:c2:49:7f:a2:b9:5f:55:e7:2b:2b:ac:49:
73:4c:8e:19:65:1b:f3:81:bf:80:28:de:41:74:a5:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:3F:17:38:5A:0F:53:5A:BB:E6:68:7C:86:35:0B:60:18:99:23
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:90:ca:f7:84:a6:55:cd:4f:b6:c9:15:b0:5c:e9:a8:80:8a:
9f:11:49:49:cb:01:5c:14:96:09:60:a9:b6:32:98:b4:d9:c6:
2c:52:9b:73:b2:e2:4e:19:d9:01:47:fd:da:d1:2c:68:2a:be:
13:01:0d:f9:cc:c9:57:20:c8:02:b9:8b:0b:bc:bc:4a:9c:7e:
fd:91:c7:54:e0:ee:d8:88:44:af:0e:ab:5f:0a:13:25:fd:70:
89:16:f4:3c:56:ba:2b:c7:67:db:7a:2f:1f:6f:1e:d8:c1:0a:
66:e2:66:43:4d:99:11:79:c2:67:f9:5d:0c:3e:e7:22:33:ce:
b3:73:8a:5c:4a:ae:db:a3:8d:8a:49:83:82:af:1f:52:3f:c5:
b1:70:32:db:1c:68:30:f2:bb:82:59:cb:06:e8:0b:6b:bb:d0:
df:aa:4e:82:15:5f:92:dd:34:dd:c5:31:20:d6:8e:1f:7c:80:
ab:f6:b1:18:1a:5a:00:d6:09:bc:c4:d9:0f:e2:56:46:fc:2e:
c3:01:8c:40:af:02:4c:bd:93:92:e8:1e:80:7b:9c:a7:e3:74:
e0:a3:91:a0:6f:75:5b:b8:3c:b0:72:6b:d8:43:0b:7b:c9:da:
b2:e7:3e:b6:25:d7:07:d7:3d:2b:4f:16:26:a9:e7:2b:ec:0a:
f1:4d:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:55:16 2026 by rpki-client