Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219485.roa
File: AS219485.roa (raw, json)
Hash identifier: PpHrUxSPwawLegxoDBWkDnp6dN6L+NAfzU8cXanNOqk=
Subject key identifier: 04:E6:2B:E9:52:3D:BF:0B:C3:58:E1:58:7C:0D:8A:3F:EF:EE:81:2C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6022DAD76CD448EEF18D346CE5FC3CD67CCB44A3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219485.roa
Signing time: Sat 20 Jun 2026 10:31:19 +0000
ROA not before: Sat 20 Jun 2026 10:26:19 +0000
ROA not after: Sat 19 Jun 2027 10:31:19 +0000
asID: 219485
IP address blocks: 188.220.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:22:da:d7:6c:d4:48:ee:f1:8d:34:6c:e5:fc:3c:d6:7c:cb:44:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 20 10:26:19 2026 GMT
Not After : Jun 19 10:31:19 2027 GMT
Subject: CN=04E62BE9523DBF0BC358E1587C0D8A3FEFEE812C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:10:af:4f:49:24:5e:0a:a7:89:7a:76:76:
2a:79:a3:44:29:0a:34:6f:f6:c0:c4:b2:6d:ca:48:
c9:b3:9e:68:b2:45:f5:f5:6b:ec:d9:f0:c9:a4:03:
0f:d3:a0:be:81:71:00:8c:45:1e:bb:3b:9f:22:9f:
ae:15:83:5c:ac:dd:db:e3:71:43:dd:73:e9:bf:03:
be:20:2b:27:d0:ad:fd:5e:3f:c8:7a:d9:2e:31:86:
38:d0:0b:ea:00:b0:81:78:e5:d7:10:7c:7b:52:26:
20:64:01:25:31:1d:10:be:6d:2e:ad:97:82:13:c2:
3e:e3:b6:f8:6d:7f:e3:21:6b:6b:99:e5:dd:f2:f2:
5e:4a:e6:ca:6c:90:f2:94:a7:60:88:f0:67:06:c0:
f4:69:b0:9a:65:7d:d2:31:ff:6e:5f:8d:3b:d4:9d:
0e:0b:ee:0a:db:7d:e0:7f:e6:7f:e9:86:79:32:ca:
fe:11:a8:74:b3:ad:76:70:91:68:29:36:d8:1d:40:
17:79:cc:1f:41:f3:f5:a0:63:8f:a7:cb:4c:1c:ce:
fa:41:34:c0:2e:d9:a8:a4:4b:c1:17:c3:d7:a6:c5:
80:c3:04:73:61:ea:8a:70:8b:5b:29:c6:83:d3:12:
df:2d:37:b2:36:d7:fa:47:27:7d:8f:51:37:11:96:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:2B:E9:52:3D:BF:0B:C3:58:E1:58:7C:0D:8A:3F:EF:EE:81:2C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.123.0/24
Signature Algorithm: sha256WithRSAEncryption
33:60:ae:ac:43:31:23:90:c5:01:6f:f5:b5:68:06:30:d9:ee:
fa:8f:cb:fe:10:52:92:8f:96:79:4a:ae:8d:ac:72:d4:e4:50:
c1:4c:23:eb:64:e7:5c:a4:d8:8c:c1:61:00:cc:87:91:7b:53:
54:5a:1b:28:0b:4c:a5:b9:8b:b9:ef:ae:74:46:da:95:c3:7d:
ef:f3:8e:e6:0c:f6:42:5a:f9:e1:59:dc:89:f3:b2:9a:1c:87:
bb:c0:75:65:75:05:62:ba:0b:31:d4:d2:42:b3:51:e0:46:da:
99:54:73:fb:16:56:d4:b2:89:9f:b0:e6:8d:1d:a5:c9:5a:92:
45:f8:bd:ae:b8:80:f3:91:e7:a3:91:57:1f:fb:1a:16:e4:1c:
ef:0a:98:e9:f2:5d:1d:b0:4f:cc:49:6d:7f:32:75:b1:e1:6d:
bb:ad:f0:94:32:0f:d5:44:94:33:b3:d4:56:fe:84:e4:97:22:
84:79:5e:36:6b:33:df:9c:37:fa:c0:9d:77:d8:df:59:c4:7a:
07:3b:c2:d8:92:9e:da:90:02:5c:12:77:3c:69:ed:cf:4b:3d:
90:16:b3:99:fe:8e:41:4b:3f:ff:53:b5:87:94:cc:81:0e:8e:
14:a3:7c:38:b7:14:51:0a:4c:1e:0c:eb:a2:82:79:2c:ac:a5:
0c:8c:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:22 2026 by rpki-client