Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: +qZJd5KiK/HYl/xHYnsx2hlewVb9Bk0LEj7fJ1LH6Dk=
Subject key identifier: 68:A3:4D:FF:D6:F8:5D:B6:FE:7A:2C:4C:24:5F:2C:8A:2F:D0:34:29
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3133A8806BBD726B7BB035175CB0438EB7FE8FE4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
Signing time: Wed 26 Aug 2026 12:51:40 +0000
ROA not before: Wed 26 Aug 2026 12:46:40 +0000
ROA not after: Wed 25 Aug 2027 12:51:40 +0000
asID: 219427
IP address blocks: 51.146.85.0/24 maxlen: 24
51.146.88.0/24 maxlen: 24
51.194.44.0/24 maxlen: 24
51.194.47.0/24 maxlen: 24
51.194.92.0/24 maxlen: 24
51.194.94.0/24 maxlen: 24
51.194.125.0/24 maxlen: 24
51.194.126.0/24 maxlen: 24
51.241.40.0/24 maxlen: 24
51.241.189.0/24 maxlen: 24
51.241.191.0/24 maxlen: 24
51.241.214.0/24 maxlen: 24
51.241.246.0/24 maxlen: 24
78.105.143.0/24 maxlen: 24
78.105.157.0/24 maxlen: 24
78.105.174.0/24 maxlen: 24
78.105.176.0/24 maxlen: 24
188.220.64.0/24 maxlen: 24
188.220.84.0/24 maxlen: 24
188.220.93.0/24 maxlen: 24
188.221.146.0/24 maxlen: 24
188.221.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:33:a8:80:6b:bd:72:6b:7b:b0:35:17:5c:b0:43:8e:b7:fe:8f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 26 12:46:40 2026 GMT
Not After : Aug 25 12:51:40 2027 GMT
Subject: CN=68A34DFFD6F85DB6FE7A2C4C245F2C8A2FD03429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:b5:38:77:29:97:22:eb:99:bd:72:3b:5a:
40:06:14:b2:91:96:01:41:50:23:1d:16:a3:56:3b:
59:07:e7:86:b3:0e:a2:f5:66:1d:2d:c1:ce:f7:12:
84:b9:83:14:fa:14:1e:eb:e4:4e:5b:f2:55:3d:c3:
d9:ff:6f:91:e6:16:35:ce:f1:fd:9d:b9:a9:16:6f:
86:af:6b:2f:e7:dd:49:71:3c:30:c1:d0:81:61:61:
fb:5f:9a:a7:b9:54:d4:1c:55:8f:d2:99:e6:db:e0:
9a:4a:c6:75:2e:22:8a:eb:e0:ab:9b:2c:e7:7e:65:
e1:46:f6:59:a9:d8:de:6d:4a:6c:e8:71:27:e3:bf:
a7:28:74:68:47:71:81:d1:df:5a:60:49:fb:2a:c1:
85:b4:fa:d4:55:4c:f6:bf:0f:6c:8c:34:26:dc:63:
8e:07:f0:73:68:5e:6a:31:e3:83:7a:0c:39:04:f4:
75:68:dd:8e:00:77:40:1b:dc:27:e0:32:db:13:97:
a9:77:68:fd:99:8d:ee:f5:c3:3e:19:03:9a:fa:5d:
ef:05:4b:3f:d0:15:3d:bc:e5:96:d0:86:e4:04:f0:
bc:2b:d5:b9:a1:59:8d:bd:b6:18:a2:4c:55:05:7c:
d0:d6:27:43:6f:7a:3f:0f:56:e7:36:3d:45:57:15:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A3:4D:FF:D6:F8:5D:B6:FE:7A:2C:4C:24:5F:2C:8A:2F:D0:34:29
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.85.0/24
51.146.88.0/24
51.194.44.0/24
51.194.47.0/24
51.194.92.0/24
51.194.94.0/24
51.194.125.0-51.194.126.255
51.241.40.0/24
51.241.189.0/24
51.241.191.0/24
51.241.214.0/24
51.241.246.0/24
78.105.143.0/24
78.105.157.0/24
78.105.174.0/24
78.105.176.0/24
188.220.64.0/24
188.220.84.0/24
188.220.93.0/24
188.221.146.0/24
188.221.190.0/24
Signature Algorithm: sha256WithRSAEncryption
48:47:ed:42:fe:48:2f:f3:15:1d:81:aa:d7:67:43:0c:8d:1f:
e1:fa:09:36:5d:a1:2e:fd:d2:bc:86:24:a0:7e:8f:db:4a:d6:
16:3f:2b:70:70:0b:67:4e:9d:b5:ca:06:be:1c:92:52:76:f0:
ee:ca:c6:0d:fc:a5:39:d8:10:94:8f:d2:fb:e4:88:d2:9e:cb:
3f:56:c7:e8:86:32:4d:37:c4:bc:51:6b:17:1d:c9:d7:5d:97:
e7:29:de:00:62:85:19:c9:56:88:f1:1d:ea:23:bb:15:1e:3a:
8c:4e:fd:be:7d:91:71:4f:73:62:77:50:ec:3d:0f:c4:54:3b:
70:0f:fd:e6:f0:a3:fb:b8:30:74:a4:ca:92:14:ae:59:af:fe:
0b:5d:4a:e7:53:b2:6e:ea:f9:a5:6e:d1:3d:5c:e8:ae:e5:42:
86:d9:b0:72:f2:3e:e2:dc:60:6f:7b:25:bf:06:a4:4a:f9:1f:
45:5b:04:9c:eb:df:89:a1:6f:46:6a:03:bc:94:7b:e3:e5:7c:
9d:8d:be:2c:a0:94:92:53:8e:0a:fe:ef:19:a9:50:42:31:66:
23:30:18:21:76:e3:83:ce:b4:0c:a2:f6:8d:4c:18:a0:34:bd:
38:e3:d5:d4:63:12:e3:fa:1d:78:4c:ef:c4:c9:87:a4:9c:a1:
df:ab:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:17 2026 by rpki-client