Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
File: AS219053.roa (raw, json)
Hash identifier: K6n/jkdlrRShYY5WD2EEXoGSp67dqOTbjFmHbJMfdwI=
Subject key identifier: 02:64:5B:53:18:8F:CD:3E:85:9E:2F:6C:3F:C9:C9:C7:8D:75:97:35
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4F6E3BCDF3A25C9B77F12FA044EBECE18740F828
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
Signing time: Thu 15 Oct 2026 10:16:55 +0000
ROA not before: Thu 15 Oct 2026 10:11:55 +0000
ROA not after: Thu 14 Oct 2027 10:16:55 +0000
asID: 219053
IP address blocks: 91.124.20.0/24 maxlen: 24
92.113.58.0/24 maxlen: 24
178.93.169.0/24 maxlen: 24
178.94.54.0/24 maxlen: 24
178.94.68.0/24 maxlen: 24
178.94.116.0/24 maxlen: 24
178.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6e:3b:cd:f3:a2:5c:9b:77:f1:2f:a0:44:eb:ec:e1:87:40:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 15 10:11:55 2026 GMT
Not After : Oct 14 10:16:55 2027 GMT
Subject: CN=02645B53188FCD3E859E2F6C3FC9C9C78D759735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:1b:30:a4:53:c5:a2:74:85:ab:f7:24:54:
16:f9:ac:7a:fc:ce:fd:00:1f:4e:de:f7:c0:47:8b:
34:34:38:27:65:f7:33:6b:93:24:e7:81:cf:63:a6:
20:ad:3a:04:c5:c8:9d:db:24:d7:c9:9a:c8:22:98:
84:6c:8f:c4:b3:a6:13:74:b2:1c:0f:c5:0e:39:98:
39:1a:b2:e8:22:e0:dd:bb:d5:ea:f7:15:4d:a9:ab:
3a:2f:23:47:99:3e:fe:f7:e0:20:1b:2e:4e:91:ff:
84:4b:4a:8c:0f:bb:b8:1e:c4:2d:c1:92:89:50:4d:
70:e3:11:5e:58:a0:02:5e:cc:6b:eb:f4:de:69:12:
9e:de:ea:e0:9b:4a:0b:b3:62:c6:84:49:39:bf:db:
f0:8f:c1:d5:3b:04:2c:a9:b3:61:db:05:c7:33:44:
d4:87:48:61:62:c8:0c:19:8e:61:51:e0:32:5e:ea:
e1:1a:44:f1:01:86:fa:07:54:c6:b4:a6:6b:d3:c2:
06:41:19:c5:9b:e2:37:b7:96:82:ee:12:ca:a9:01:
88:31:5b:4f:bf:c2:1d:2b:6a:80:3d:a9:9d:d2:c3:
f8:c9:06:b4:ac:68:66:be:a5:bc:fc:4f:f6:c7:1c:
ba:7b:71:0d:23:16:8c:e3:47:0d:cc:f1:3e:0e:aa:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:5B:53:18:8F:CD:3E:85:9E:2F:6C:3F:C9:C9:C7:8D:75:97:35
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.20.0/24
92.113.58.0/24
178.93.169.0/24
178.94.54.0/24
178.94.68.0/24
178.94.116.0/24
178.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2d:d4:17:9f:38:5c:df:bf:80:d5:bf:5a:66:7b:b4:15:50:
2d:7b:39:e2:51:47:f7:b8:3e:08:78:ca:87:6b:46:9e:2e:a1:
9c:03:75:d5:b2:49:be:6c:55:28:9d:38:43:1a:41:38:2f:24:
60:2a:3d:bf:b4:0b:81:ea:11:23:9c:3f:e5:b9:43:57:73:f4:
87:ae:7c:fa:ff:7d:a1:ea:06:e0:5d:2b:ea:aa:59:41:6d:bf:
85:25:f5:73:0f:9d:cf:a9:d6:bd:84:4d:bb:a7:97:4f:93:a0:
e1:6a:7a:2c:06:f3:33:a9:c3:b6:a0:3e:1c:de:87:bb:96:95:
0f:75:3e:1a:b6:3b:34:24:fd:8d:6b:0d:4b:9a:a4:32:2c:33:
f3:f4:12:2b:fc:67:68:37:15:b2:70:34:52:6f:12:67:b4:c4:
1d:e1:15:1c:ce:82:3b:68:a7:6e:8a:99:29:d9:b4:50:c9:ed:
a3:1f:44:a6:ae:e5:c8:99:3e:68:45:38:4d:b0:dd:72:d2:56:
94:79:43:e3:59:e5:52:2a:24:22:a0:ba:ba:20:ae:a7:7f:ab:
e8:fe:39:61:19:0a:70:a1:e4:7c:58:3b:1b:a0:97:73:26:5b:
5c:40:eb:04:06:63:2c:97:39:7e:83:41:d4:22:d8:ee:47:50:
07:84:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:45 2026 by rpki-client