Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219005.roa
File: AS219005.roa (raw, json)
Hash identifier: yoOIjd1WuZQ1UKvMmvDxzqOQ9C+ndvSRRPaMT8hpsMI=
Subject key identifier: B8:25:4A:BA:7D:8C:E2:29:AB:A5:54:57:7C:15:CA:F5:8E:46:44:20
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2ADBA8D5BF34D941472EF05B6D970B39DEA274BC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219005.roa
Signing time: Thu 27 Aug 2026 15:14:00 +0000
ROA not before: Thu 27 Aug 2026 15:09:00 +0000
ROA not after: Thu 26 Aug 2027 15:14:00 +0000
asID: 219005
IP address blocks: 178.93.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:db:a8:d5:bf:34:d9:41:47:2e:f0:5b:6d:97:0b:39:de:a2:74:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 27 15:09:00 2026 GMT
Not After : Aug 26 15:14:00 2027 GMT
Subject: CN=B8254ABA7D8CE229ABA554577C15CAF58E464420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:98:66:99:5a:b2:79:b6:2a:54:87:6d:bb:
55:84:7e:a5:45:49:c2:04:3e:58:3f:b7:de:db:fc:
a4:22:07:13:43:74:60:70:51:46:ee:c9:ea:ac:8f:
57:3e:35:4b:07:f6:0e:63:8e:f4:8b:dd:1d:e7:7c:
f5:20:95:74:0c:ce:7b:cb:02:d9:3b:f4:50:0f:31:
a9:aa:5f:fa:6e:59:45:54:f4:65:b4:2f:ba:e2:71:
ad:3a:fc:06:ed:ca:39:a0:d1:6f:91:cd:f9:8d:ed:
69:2e:30:0b:b8:1f:f5:59:2a:d4:41:3c:79:4f:55:
04:63:3c:dd:b1:c3:43:8f:d9:bb:0b:7f:20:c5:95:
fd:58:ef:b8:51:80:7e:bb:f2:71:e8:2c:a8:d6:e0:
6d:61:99:03:bd:30:11:6c:df:9e:20:37:57:29:7c:
8b:73:4b:9e:6c:80:71:9e:d9:5b:57:16:60:29:58:
41:b2:4d:ac:69:61:79:48:b1:8a:35:67:04:03:d6:
0c:f3:61:35:1b:cd:28:bf:ef:1a:f6:76:d2:5e:48:
7c:ad:f3:74:ad:6d:3c:4d:f9:66:75:ca:f0:8a:42:
45:47:75:f6:b3:97:11:89:63:af:03:a8:2a:05:e7:
91:92:ea:ba:63:76:5e:1d:98:37:7f:bc:2f:a4:8f:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:4A:BA:7D:8C:E2:29:AB:A5:54:57:7C:15:CA:F5:8E:46:44:20
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.17.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fe:ea:56:94:23:54:bf:97:f5:d1:83:f7:43:36:0d:cd:c8:
04:0d:3a:d5:1f:1f:12:f4:82:0d:0f:b1:24:93:b0:64:67:dd:
92:b8:51:80:8c:3f:7e:30:44:fa:3f:ee:7a:ff:94:01:90:a5:
35:be:a9:21:94:d1:fc:36:55:dd:19:7f:26:f9:46:55:ca:32:
70:76:58:c2:ee:fa:00:0c:b2:2a:b6:7f:bd:c5:80:3b:ef:39:
90:67:1f:4b:ef:b5:5f:0a:b6:51:54:86:e9:d9:c7:76:cc:53:
04:dd:14:53:f2:f4:75:7b:b0:91:d5:d4:a9:fe:f9:5b:a4:04:
b6:df:a6:fb:c2:e6:4a:d8:bd:a1:46:b2:e1:78:a1:86:cd:06:
7f:d7:74:01:32:d3:72:6a:24:d7:4d:1a:59:47:65:13:e7:57:
09:44:f4:d1:3b:a7:bb:66:98:a7:ea:fc:95:de:92:f5:99:f1:
ce:5e:6d:6c:8b:a8:b3:5e:80:f3:3b:00:aa:8e:56:1b:6d:3c:
8a:73:35:86:48:6a:90:e6:b1:d5:65:c8:4f:13:f5:27:45:f4:
d1:f0:b0:64:25:e9:02:d6:98:23:a1:54:22:95:88:1a:63:3b:
cd:79:8a:6d:5b:28:b2:33:18:ab:80:7f:e4:b7:86:0b:37:a7:
a6:d4:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:23:34 2026 by rpki-client