Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219409.roa
File: AS219409.roa (raw, json)
Hash identifier: MmTkfnCe/IjfEJubNVHo1gGFztQ8rPpkVUimSZz2Qi0=
Subject key identifier: 82:13:91:D0:92:C8:0A:75:42:36:EF:4C:AA:B1:29:16:4C:BE:1B:67
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3660449F8C15F16B2D17322D5311DE2D55DDE0B8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219409.roa
Signing time: Mon 29 Jun 2026 13:56:34 +0000
ROA not before: Mon 29 Jun 2026 13:51:34 +0000
ROA not after: Mon 28 Jun 2027 13:56:34 +0000
asID: 219409
IP address blocks: 78.105.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:60:44:9f:8c:15:f1:6b:2d:17:32:2d:53:11:de:2d:55:dd:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 29 13:51:34 2026 GMT
Not After : Jun 28 13:56:34 2027 GMT
Subject: CN=821391D092C80A754236EF4CAAB129164CBE1B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:bf:d9:58:72:27:02:94:93:9a:46:58:4d:
a1:c3:4b:bf:81:c1:44:7d:9d:e0:59:b2:51:e9:d1:
4d:2d:b7:d4:79:ca:c5:ac:80:7c:b7:32:2d:48:4e:
f6:c3:97:99:47:e0:35:5e:17:01:36:e3:6d:cb:1a:
f2:55:22:0d:20:8a:54:50:b2:93:6f:05:79:50:09:
1d:5e:f1:98:1d:b2:5c:cd:1f:f4:bf:32:89:60:28:
51:0a:9b:11:38:4d:a7:15:e4:27:19:6f:1b:f9:6f:
80:02:05:df:d7:68:d1:ba:e1:28:d6:ca:c3:71:dc:
13:af:79:0a:ad:c2:38:ec:4e:a1:1b:c6:22:45:d8:
a9:5e:01:17:2c:05:eb:de:d6:c2:db:cd:de:6a:78:
47:2c:a8:42:cd:71:4a:01:68:a9:4c:32:f5:bb:92:
e8:05:27:1d:92:73:c2:45:29:c7:00:d3:40:b6:c8:
a2:46:d0:d1:4c:b2:8d:fb:90:ff:da:39:f1:2e:5a:
6a:82:57:2c:8e:49:c0:4a:4c:81:dd:f9:bc:8a:25:
bd:07:a0:fc:4d:88:20:8e:ec:e6:39:38:ad:c9:26:
91:d2:50:eb:b7:78:63:df:94:dc:43:5a:0f:40:41:
e8:ba:41:21:a6:ba:db:96:08:61:82:aa:47:9f:04:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:91:D0:92:C8:0A:75:42:36:EF:4C:AA:B1:29:16:4C:BE:1B:67
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.170.0/24
Signature Algorithm: sha256WithRSAEncryption
32:26:69:56:13:8d:64:87:23:5c:e8:e8:33:62:32:3f:15:14:
3e:f3:45:ad:6e:ef:a1:10:84:25:55:f9:6c:24:6d:56:67:e8:
8a:53:eb:cd:45:5b:cf:c8:c5:b7:4e:8d:af:67:1a:22:9e:b5:
ca:5c:2b:e3:be:96:52:6a:5f:e8:18:b5:3c:c0:00:ca:50:6e:
02:2b:08:c3:01:fb:24:d9:02:0a:bb:2a:03:33:bc:8c:47:d9:
23:ab:4f:3e:54:8c:4d:29:cc:7c:bb:82:0b:da:0b:14:f5:43:
47:cc:20:1e:8c:df:fd:4a:6f:bd:f6:a8:25:06:5a:89:5e:a0:
39:1f:ab:05:cc:89:cc:ef:58:85:55:85:9a:aa:6f:ac:9e:9f:
40:fa:46:07:d7:f9:e9:9b:be:35:10:8c:c1:64:af:1c:72:98:
b4:af:53:07:61:a0:f7:80:07:04:d3:56:96:ce:57:61:b1:b7:
11:6f:aa:bd:85:eb:49:1d:8a:e5:86:0f:88:3a:b8:28:28:2d:
09:d1:c4:36:b9:1c:33:94:29:32:b4:69:08:2f:ca:c7:b0:40:
42:73:2c:19:18:f5:cc:51:25:ce:1a:0d:53:e8:a2:32:76:cd:
c5:62:65:41:1b:09:fe:c8:88:f1:85:42:96:c4:2f:78:f0:69:
4b:d6:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:17 2026 by rpki-client