Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219183.roa
File: AS219183.roa (raw, json)
Hash identifier: 7d9SZHgLY0dNG2XcNrsRNkqBmpff8/QPn96Sm60tkWs=
Subject key identifier: CF:30:36:7D:E8:FB:75:F5:C4:BA:F3:92:39:DF:94:23:73:9B:3E:B8
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 3CFAF22355FCE011C5DAD99B0B8B66B2F98CD398
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219183.roa
Signing time: Fri 28 Aug 2026 16:43:05 +0000
ROA not before: Fri 28 Aug 2026 16:38:05 +0000
ROA not after: Fri 27 Aug 2027 16:43:05 +0000
asID: 219183
IP address blocks: 177.28.7.0/24 maxlen: 24
177.29.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fa:f2:23:55:fc:e0:11:c5:da:d9:9b:0b:8b:66:b2:f9:8c:d3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Aug 28 16:38:05 2026 GMT
Not After : Aug 27 16:43:05 2027 GMT
Subject: CN=CF30367DE8FB75F5C4BAF39239DF9423739B3EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e2:c5:3a:d3:ae:d3:da:60:b7:8b:37:a1:b1:
bb:2d:5f:3e:04:ec:56:70:3e:62:aa:21:5c:f1:5b:
9f:1a:17:3f:b6:93:a5:22:3c:a6:8c:c8:3a:50:16:
3d:2c:40:f7:d4:a3:a5:78:ea:14:51:2e:ff:f0:7c:
4b:d3:37:51:3d:0d:23:ab:02:d4:ff:21:2b:55:c0:
ae:b8:74:a4:5d:e7:07:85:0f:f0:a1:ad:ba:6e:29:
52:8e:c2:74:3e:7d:cc:4a:93:b5:ec:f6:2c:67:e5:
33:72:69:e9:39:d5:36:d7:d8:25:ef:ab:9a:34:4d:
c3:4c:53:7b:84:b4:bd:67:fa:f2:77:53:af:91:e0:
fc:e2:45:e6:82:99:75:e7:1c:9e:9b:ee:f6:e7:8c:
1d:56:e6:c1:cc:90:34:37:93:75:14:21:b6:7e:82:
67:b9:19:82:03:68:4a:b8:90:65:d4:c8:68:da:e9:
5f:7d:41:b8:cd:4c:4b:17:fd:9b:65:91:be:5f:42:
56:48:46:04:18:86:9d:a4:a2:b1:2a:b0:15:3d:ef:
71:71:15:d6:c4:18:fc:33:10:06:a0:3c:ba:da:f0:
b0:fd:34:6f:ae:ce:9e:c1:17:97:06:68:d3:c6:3d:
d7:35:df:ae:a2:60:7f:de:cc:19:52:37:dc:77:cf:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:36:7D:E8:FB:75:F5:C4:BA:F3:92:39:DF:94:23:73:9B:3E:B8
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.7.0/24
177.29.247.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d8:40:33:c2:31:5c:14:a8:a6:69:d2:f4:dc:f1:74:3a:ff:
40:bb:9d:50:c4:4f:dd:a0:3e:a9:b7:ea:f5:0d:46:e0:f3:2a:
78:a1:59:25:b4:de:ff:e2:a0:fa:b7:22:ae:a8:c8:1a:4c:46:
2f:36:0f:32:7d:81:5b:ac:60:7f:e3:44:19:18:ad:ad:be:74:
b4:57:70:8f:4e:cd:91:b8:c5:d3:98:c3:e1:ca:4d:72:80:f7:
ed:4c:f1:b4:a5:0b:11:62:5e:73:94:d4:aa:1b:82:2d:20:de:
93:80:af:08:2a:72:8c:93:34:00:5f:8a:ca:f8:19:e1:da:42:
5a:94:2b:51:29:30:cd:e5:90:eb:17:17:62:10:13:c0:f6:a4:
47:1d:f2:b9:38:c8:d2:15:da:dc:9c:93:4a:95:63:4c:68:ec:
9e:dd:35:76:c2:d4:16:5d:5e:c9:15:fe:02:3e:8e:ab:0f:4f:
34:2d:21:66:df:f9:2d:f1:1c:0e:28:a2:98:80:69:fe:49:24:
63:bc:7a:b2:85:8e:47:d5:41:19:7c:a7:d7:89:1f:7c:4a:f5:
52:91:e6:fc:aa:0a:48:5f:3f:15:02:f3:8d:be:9e:b6:0d:49:
ab:22:62:b7:01:49:fe:4a:80:36:ac:f3:39:fa:cd:71:d9:3d:
fc:4c:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:33 2026 by rpki-client