Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: vGxAyRL/XYWt+v1tOUEzfqgf1WFfNvnDCuQ5XF5jn3Q=
Subject key identifier: F0:02:B5:67:5C:DE:13:02:AF:54:00:0A:B7:56:FB:99:73:3A:6F:3A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1D2C70B235772D5894838896E4273C22B91BFD0E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
Signing time: Sat 05 Sep 2026 18:58:06 +0000
ROA not before: Sat 05 Sep 2026 18:53:06 +0000
ROA not after: Sat 04 Sep 2027 18:58:06 +0000
asID: 219047
IP address blocks: 46.202.125.0/24 maxlen: 24
46.202.202.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2c:70:b2:35:77:2d:58:94:83:88:96:e4:27:3c:22:b9:1b:fd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 5 18:53:06 2026 GMT
Not After : Sep 4 18:58:06 2027 GMT
Subject: CN=F002B5675CDE1302AF54000AB756FB99733A6F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:5b:8c:39:86:dc:a8:fb:f2:3f:42:87:14:
cb:d1:13:05:fa:8f:cf:1e:55:22:27:d2:62:13:04:
0f:11:2c:ad:e3:ef:fd:37:38:0b:08:38:4a:35:86:
b6:a5:1b:f9:74:b4:25:e5:5b:4f:b3:e2:28:4e:f6:
06:08:29:7b:53:b4:50:54:bf:34:c4:fc:8e:1e:76:
e6:07:a0:95:0b:dc:d5:a0:65:b0:5e:86:00:65:84:
6b:db:f9:28:dd:b0:ad:58:ce:53:f7:b9:ba:78:59:
99:04:03:03:30:48:26:85:bd:0e:f7:d6:60:e8:fc:
bd:bf:0c:67:02:0b:1a:da:ed:74:68:73:2e:54:a7:
86:1b:3c:40:fe:82:e2:6c:5f:b3:00:3b:c0:31:24:
85:6b:d3:07:14:f5:62:3f:dc:c4:e0:b2:4b:1c:50:
c1:70:72:4e:f4:e5:46:32:3c:48:d8:77:e8:2f:9a:
2f:e0:a9:e9:e8:85:21:dc:2d:b2:3c:d6:d8:20:7b:
08:83:67:44:5a:c8:7d:e5:bc:a8:10:9b:6f:37:0f:
d4:67:e8:91:ea:00:36:13:c9:50:e8:e4:4e:17:da:
d4:92:d0:35:c6:0d:41:b3:00:5f:98:4f:e4:a7:14:
a0:0b:56:e2:9a:9f:7d:60:c0:dc:c7:19:5d:66:51:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:B5:67:5C:DE:13:02:AF:54:00:0A:B7:56:FB:99:73:3A:6F:3A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.125.0/24
46.202.202.0/24
92.112.142.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dd:e3:6e:1e:4a:88:9e:82:f3:1e:fa:64:3f:81:2c:b2:57:
6b:b8:9d:e8:d0:ee:47:62:33:ff:1e:6b:18:de:bf:87:aa:50:
dc:8e:74:8b:53:c3:d0:8c:09:8b:1f:f9:b4:e3:ef:8b:22:5e:
a9:20:c2:a1:71:9a:36:90:77:c6:a4:33:58:28:cf:9e:89:0c:
5d:c5:07:2c:42:64:18:75:f8:f7:27:36:48:56:92:49:ae:53:
5d:25:46:6c:ac:5b:4b:f3:b8:12:92:c2:27:56:5b:dc:a8:8d:
a2:bf:e2:a2:58:71:6e:61:3c:ad:82:9f:f0:a5:8b:da:72:83:
61:02:4e:21:5f:ce:fe:a0:93:59:e2:7f:6b:a1:61:14:0e:60:
ab:0e:7f:9e:42:d8:d1:35:92:b6:26:fb:3c:45:d4:38:94:78:
0c:42:73:80:1d:24:a4:c7:5a:7e:71:97:47:e9:9d:44:b1:cb:
05:56:50:e4:e1:57:13:fe:b9:07:bf:f3:ac:3c:1d:54:bd:8d:
77:dd:45:fb:ec:98:e3:9d:fc:e5:b1:72:7b:9e:81:18:ce:d6:
4d:99:8f:46:45:58:d6:a0:df:3d:f4:f1:87:73:05:e7:43:5e:
10:06:ff:e1:94:0c:66:ce:c0:14:7a:5d:fe:ac:dc:82:0d:fc:
90:84:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 01:35:26 2026 by rpki-client