Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: vD5+KRor4rouYYoj095NRsvFGHazMoTUV8v9SlBAKFg=
Subject key identifier: 64:7B:1F:60:B9:EE:94:76:F7:F1:11:33:C2:74:09:86:38:A4:1B:6F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 10239391A6418F54A744DB4F574B9215BC1F14F7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219447.roa
Signing time: Tue 04 Aug 2026 06:11:02 +0000
ROA not before: Tue 04 Aug 2026 06:06:02 +0000
ROA not after: Tue 03 Aug 2027 06:11:02 +0000
asID: 219447
IP address blocks: 51.146.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:23:93:91:a6:41:8f:54:a7:44:db:4f:57:4b:92:15:bc:1f:14:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 4 06:06:02 2026 GMT
Not After : Aug 3 06:11:02 2027 GMT
Subject: CN=647B1F60B9EE9476F7F11133C274098638A41B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:9c:47:ff:39:1c:b4:8d:1b:99:32:16:20:
4c:f3:14:97:76:8c:77:ef:6d:26:a9:bd:17:21:8b:
e7:50:4b:8e:b3:4e:52:aa:6e:e4:37:c8:d7:c8:10:
86:20:ce:12:a9:02:1f:60:f9:04:e4:95:7a:2c:f0:
e2:85:63:bb:c4:11:c0:6f:20:8a:71:8a:70:5e:73:
84:80:bb:b2:a8:d6:04:f7:cb:9e:a4:98:55:8c:c9:
7e:e1:4b:83:40:e5:32:28:9e:2c:df:da:4a:18:3f:
45:23:0d:66:d9:f5:48:28:94:5c:2d:cc:9b:0e:73:
90:42:ed:01:7c:53:c2:0d:45:ad:27:3f:2c:a4:36:
ff:c1:25:e8:0c:89:0f:08:28:b6:85:d0:57:f3:fd:
32:9c:75:1e:8f:2f:0d:d4:f7:cc:89:55:e5:f4:f8:
3c:86:74:e9:67:d2:0a:dd:f4:ad:c0:a3:ed:27:af:
88:73:1e:5b:49:13:2c:8a:42:fd:4a:99:44:12:98:
d6:b7:14:bc:a9:00:da:42:59:38:9a:87:c4:e1:e5:
fd:54:a9:2d:15:5a:31:4b:63:a8:e7:f4:9e:07:ff:
06:9a:fd:f1:c1:a9:d8:73:bd:04:43:09:b0:6b:98:
2f:3b:8b:0e:b5:69:d5:99:67:48:bc:0d:aa:33:80:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:1F:60:B9:EE:94:76:F7:F1:11:33:C2:74:09:86:38:A4:1B:6F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
55:04:d3:e0:12:bf:b4:55:73:11:ab:1b:58:a0:0b:ec:68:10:
29:b6:1a:c0:83:5a:22:1a:51:f7:1f:c5:f5:ea:cb:f9:b9:80:
9f:3a:cf:55:d1:c2:97:09:b1:0d:8b:4a:a1:b8:e7:b8:56:87:
8e:ec:a0:9d:b6:ed:11:09:4f:be:fa:2a:18:d2:54:af:70:a5:
fe:c2:33:40:a6:da:1d:80:b8:83:d3:0c:77:b1:35:c1:b2:aa:
d2:31:cd:d3:34:3d:4a:cc:a5:0e:cf:89:64:d2:db:b4:7b:45:
3e:1d:a2:83:29:b3:f2:1f:86:bd:24:7d:49:8f:c7:95:43:94:
8d:4d:c7:8b:84:8a:00:36:5c:55:13:cd:2b:de:80:d4:30:72:
bf:63:d5:e4:51:04:bd:62:f7:a2:21:4c:c0:41:1c:0f:bd:f9:
b6:d9:65:6e:ed:df:6e:30:10:99:16:21:30:ce:89:53:fe:17:
75:75:7a:c4:9f:aa:80:5a:fa:07:dd:1a:62:5e:a3:b4:38:dc:
2a:23:09:76:a0:47:e9:2b:d0:08:bd:8f:b8:c0:b7:6c:24:cb:
eb:2b:70:ae:5a:6f:5e:a2:2b:e7:86:90:ea:10:0b:54:58:05:
f9:4c:2e:ec:62:3b:04:e0:49:d4:cd:5c:41:2e:ae:0f:1e:e7:
82:e0:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:44 2026 by rpki-client