Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219020.roa
File: AS219020.roa (raw, json)
Hash identifier: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=
Subject key identifier: CC:1A:F8:BA:5D:97:DE:B0:69:85:51:3F:EE:98:D3:E7:1A:50:82:8B
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 6F5472FD7463E65D470891EDD47EF19A8ABDC40A
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219020.roa
Signing time: Mon 10 Aug 2026 11:54:53 +0000
ROA not before: Mon 10 Aug 2026 11:49:53 +0000
ROA not after: Mon 09 Aug 2027 11:54:53 +0000
asID: 219020
IP address blocks: 177.28.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:54:72:fd:74:63:e6:5d:47:08:91:ed:d4:7e:f1:9a:8a:bd:c4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Aug 10 11:49:53 2026 GMT
Not After : Aug 9 11:54:53 2027 GMT
Subject: CN=CC1AF8BA5D97DEB06985513FEE98D3E71A50828B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:ce:0d:b3:80:61:4f:05:f8:15:45:9f:28:
09:87:9e:25:1f:9f:e0:9f:35:19:cb:32:dc:24:7f:
e7:80:f3:51:82:bc:9a:8b:50:c4:6b:ab:cc:a9:54:
0f:f5:1c:2d:ef:db:07:92:e2:f9:2a:bc:e3:bc:7a:
45:ff:a5:f9:3a:59:16:d5:05:72:af:8d:92:1e:36:
b9:0f:50:f7:25:b8:98:b7:49:a4:f6:a1:8c:f8:06:
96:fd:6e:2a:d2:c2:b2:79:19:ab:93:a3:05:64:33:
1b:fd:63:5d:de:f8:e3:6f:bd:83:64:c2:fa:f9:83:
3e:4e:e4:1c:fa:21:20:c4:8e:cc:f2:85:cd:01:a5:
85:e5:47:a4:5a:22:df:99:3b:1c:c4:18:85:03:2c:
b8:ae:0b:a9:10:5d:f1:5d:a9:62:12:70:e2:93:c7:
0a:78:20:fd:21:f7:26:98:39:d0:56:f2:6f:00:15:
d3:ee:da:4a:09:85:af:28:ac:cc:37:46:98:f4:86:
06:8f:f8:38:c8:82:a9:44:0d:0e:60:91:8d:ee:a1:
60:6e:e1:dc:19:ed:df:fe:9d:b1:c1:d3:b4:7d:9d:
3c:0a:09:ad:51:4f:84:80:ac:39:9a:32:d2:70:cb:
8d:73:83:b5:59:b8:fc:ea:31:6b:0e:3e:e3:57:2f:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:F8:BA:5D:97:DE:B0:69:85:51:3F:EE:98:D3:E7:1A:50:82:8B
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
19:73:bc:2c:37:d1:23:95:a8:31:46:17:dc:a3:2f:95:e6:ca:
0f:2c:c2:67:97:44:e2:2e:3e:b4:39:af:95:b3:9f:95:97:9e:
41:2d:dd:27:bf:27:d7:c7:ba:13:b2:5c:56:43:e5:62:8a:6e:
07:3d:e0:1f:a1:c2:8a:32:e0:11:4a:24:97:44:9d:08:40:ab:
82:d1:48:a8:37:86:e9:f0:7f:a6:fe:75:bb:67:1a:72:ae:fd:
b5:6e:18:52:96:ce:65:59:66:b8:7f:b0:be:f0:bf:c2:c9:5c:
33:3e:6c:00:ed:bf:0e:72:84:f1:94:51:f7:e5:07:4f:9d:0c:
e7:71:08:81:a9:f8:c1:96:97:75:91:77:aa:41:62:f8:4c:16:
1c:02:a7:b3:9d:77:25:9d:d8:1e:41:44:c3:d0:19:12:8b:2b:
62:6a:d7:97:00:1b:b6:5b:74:13:3a:94:9b:41:98:94:f9:59:
f2:cc:d9:77:73:2a:28:7c:f8:c8:91:f7:fc:85:1b:5d:33:b3:
53:ed:af:fe:8f:59:8f:fb:61:a0:07:92:2e:af:3f:ad:27:b2:
ae:5c:c4:60:1d:31:25:b4:89:f5:5e:64:cc:cd:d6:68:a8:fb:
92:7f:c4:d7:da:63:7e:4c:e3:c4:39:9f:43:15:d3:b0:98:e6:
86:f0:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:33 2026 by rpki-client