Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: sW8198eyA7SK1Z1i4XB/V5OF8ke1nD7Om+niXmwyG2s=
Subject key identifier: D1:2A:1C:EA:37:FB:A9:83:4B:C6:AD:5D:FD:72:78:48:1A:F3:2B:B7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1744A3524AFA8224199F1F29DE52D4840AD63649
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
Signing time: Tue 29 Sep 2026 19:01:59 +0000
ROA not before: Tue 29 Sep 2026 18:56:59 +0000
ROA not after: Tue 28 Sep 2027 19:01:59 +0000
asID: 219427
IP address blocks: 51.146.244.0/24 maxlen: 24
188.220.64.0/24 maxlen: 24
188.220.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:44:a3:52:4a:fa:82:24:19:9f:1f:29:de:52:d4:84:0a:d6:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 29 18:56:59 2026 GMT
Not After : Sep 28 19:01:59 2027 GMT
Subject: CN=D12A1CEA37FBA9834BC6AD5DFD7278481AF32BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:f5:71:71:3e:9f:41:59:12:9a:0e:a7:eb:
6b:8f:0a:4b:56:be:a9:a1:92:26:09:ad:31:fa:cb:
51:82:ef:f0:05:1d:cd:79:64:77:50:23:60:4a:fc:
4f:9f:a7:54:5e:5f:b5:cd:41:df:c5:25:73:0a:6b:
ec:c5:1d:f3:87:e4:04:de:68:b9:c6:e1:74:a3:51:
8b:fc:7d:39:09:40:e3:b7:f2:f6:0e:12:a9:13:0f:
12:d3:88:88:8c:93:7c:91:b6:1e:31:09:a8:20:a3:
52:e2:c5:f5:70:07:ba:66:92:8c:83:62:c9:1a:73:
e0:5d:1e:97:f1:61:c0:d4:72:e2:e9:68:e0:a0:42:
fb:4e:af:b1:91:e3:5a:25:26:26:08:42:72:0c:b8:
06:58:fe:f2:d8:dc:46:37:01:30:d3:44:82:7c:5f:
8f:fc:78:2d:3a:3d:a4:92:38:9b:f8:43:96:fc:f5:
00:8d:08:93:1d:87:1f:51:65:f9:3e:43:50:44:ef:
d0:ee:c7:67:25:93:bd:ec:fc:97:c3:b6:e0:40:84:
32:7d:31:5a:36:23:91:c5:bd:3c:ef:5c:49:30:99:
24:40:f8:8e:84:62:5b:95:4a:cc:78:22:e4:8e:c3:
ad:83:df:e1:fd:90:82:a3:b2:19:fa:be:a5:2d:94:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:1C:EA:37:FB:A9:83:4B:C6:AD:5D:FD:72:78:48:1A:F3:2B:B7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.244.0/24
188.220.64.0/24
188.220.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f1:25:30:51:19:99:b4:d6:4c:89:e6:b2:a8:ff:36:f0:23:
47:81:5a:ac:d7:cf:ce:ef:a8:fb:8c:6a:55:f5:86:31:94:f7:
96:c2:f2:f1:c5:16:e3:d1:25:7e:a3:79:2f:94:33:7e:55:52:
07:87:74:b3:ff:95:f0:92:e8:57:35:ad:c9:fb:30:0d:0b:1b:
41:7e:cb:ca:0a:4b:05:b4:23:08:60:0e:3a:14:72:08:ad:19:
11:5d:f6:d0:ca:6a:61:4d:07:38:cc:c6:18:43:ec:ca:68:ea:
18:61:d5:31:2d:06:2a:99:ae:27:6a:69:6d:12:b6:a7:ec:76:
6e:f3:6c:d5:cf:73:e7:0b:d6:a2:69:20:ff:94:1e:e4:dd:a0:
d4:46:cc:f3:3d:a6:17:a0:d4:89:0b:7f:21:b5:60:7e:85:d8:
f5:08:e3:eb:48:2b:d4:ce:fb:fd:24:44:88:17:6c:ed:ee:9c:
d5:8e:60:d7:74:4d:e2:7c:0a:f7:b0:1d:ab:b3:a9:4c:9a:4b:
c6:33:2b:34:cd:df:58:62:9f:52:11:25:c6:90:e8:ce:ea:ac:
7b:b0:52:76:e7:63:cb:cc:4f:10:f6:0e:46:75:d7:b5:5b:44:
3e:be:55:d2:4e:da:cf:a0:e8:73:68:b4:92:93:7b:8e:ac:64:
d3:16:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:46:04 2026 by rpki-client