Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: MTC/KoQMq1vl1WtZbUAKkK27xvcSePusUsbNaj8VY4Y=
Subject key identifier: B6:BA:41:52:F8:5A:33:0E:92:88:F3:57:B2:A4:3D:F3:9A:8D:31:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04A1B41C73AA18E3D2A634E8158F0598D745FD85
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
Signing time: Tue 20 Oct 2026 03:16:45 +0000
ROA not before: Tue 20 Oct 2026 03:11:45 +0000
ROA not after: Tue 19 Oct 2027 03:16:45 +0000
asID: 219047
IP address blocks: 91.124.20.0/24 maxlen: 24
91.124.105.0/24 maxlen: 24
92.113.58.0/24 maxlen: 24
178.93.169.0/24 maxlen: 24
178.94.54.0/24 maxlen: 24
178.94.68.0/24 maxlen: 24
178.94.116.0/24 maxlen: 24
178.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a1:b4:1c:73:aa:18:e3:d2:a6:34:e8:15:8f:05:98:d7:45:fd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 20 03:11:45 2026 GMT
Not After : Oct 19 03:16:45 2027 GMT
Subject: CN=B6BA4152F85A330E9288F357B2A43DF39A8D316F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:dc:d0:6b:f7:5e:f0:9e:c3:59:64:dc:aa:
49:3f:af:ad:69:d8:49:35:d6:76:64:4d:3d:cf:d9:
70:79:5b:0c:83:a9:eb:5a:7d:d2:e6:2e:4e:2a:1d:
e1:50:33:d7:3c:ce:8b:f4:21:22:25:4e:7d:23:a1:
1e:4c:cb:06:3a:11:c3:ef:27:18:13:5e:ef:d2:fb:
c7:74:29:45:ee:ce:eb:55:84:17:db:24:9a:f3:6f:
50:0e:f5:b9:72:9f:6d:8b:fb:45:47:e1:0b:07:fd:
1c:22:24:9a:e8:34:9e:9c:c3:fe:fd:42:4a:9b:89:
ab:45:31:8e:f3:81:2c:71:4e:6b:6d:36:c4:70:7d:
f7:57:89:d0:90:c0:f2:35:f9:97:30:cd:1c:72:51:
ed:69:70:a6:e4:a4:95:2f:da:f3:66:e5:1e:4e:3f:
65:4f:59:75:ff:e5:47:3c:41:bb:a1:4c:46:79:63:
0b:25:f1:86:03:83:34:24:4b:2e:3c:4c:84:08:3d:
a4:3b:4b:f8:38:dc:3b:0d:fd:22:25:aa:e8:d8:f5:
84:5e:a2:04:5e:b9:aa:d8:94:ae:c6:88:67:f5:ed:
72:30:37:1e:cd:cb:43:e2:75:a0:aa:42:06:2b:f7:
6a:7c:94:dc:35:eb:21:0b:9e:62:66:09:b4:3a:69:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:41:52:F8:5A:33:0E:92:88:F3:57:B2:A4:3D:F3:9A:8D:31:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.20.0/24
91.124.105.0/24
92.113.58.0/24
178.93.169.0/24
178.94.54.0/24
178.94.68.0/24
178.94.116.0/24
178.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d4:3c:84:5c:a3:6c:33:5e:40:82:98:f9:b2:f0:2f:bf:7d:
30:39:f7:05:cd:23:8a:e6:d1:4f:33:42:dc:36:a3:52:28:5f:
5d:39:82:1a:ea:c4:6c:4d:88:a2:42:2c:5d:cc:c6:61:04:c1:
98:c0:24:c3:25:d8:c3:5a:10:57:3a:1d:ad:a8:25:35:66:0a:
76:d7:d9:c0:2b:7f:e8:d3:ed:b4:3d:cd:11:9f:91:b0:2a:62:
75:2e:4a:10:80:f0:a5:44:3c:1a:0c:33:f6:69:47:21:51:2f:
26:6e:52:57:2f:6e:64:4e:bd:68:83:8a:bb:1a:e3:39:20:83:
6d:4c:58:65:40:cc:ee:52:35:c4:b5:c4:35:8a:3f:4d:d4:e2:
aa:e0:3f:fa:c2:11:ff:c4:5d:e4:8e:5a:c5:1e:b0:37:37:bd:
2a:b4:8c:71:ac:6e:78:1f:18:2e:1f:9a:b4:65:c3:06:1a:12:
87:66:75:b7:7e:fb:8e:29:d3:e7:02:fb:4b:4d:70:32:8e:02:
1a:26:c3:09:45:43:b4:74:89:03:f1:f9:67:b1:85:0f:65:cf:
db:71:28:ff:ff:57:fc:32:73:9b:86:58:7f:af:ad:89:09:22:
2f:93:6c:29:35:e3:66:6b:c1:38:75:49:2e:65:c3:72:d2:76:
f0:4b:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:28:36 2026 by rpki-client