Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
File: AS219053.roa (raw, json)
Hash identifier: iSL0/L4UQ/KmknqzQoGA6NVHNdCAIQdsHU7qoAzF+Jo=
Subject key identifier: 67:2A:AD:76:2F:6F:8F:2C:55:B5:36:31:7D:BD:FA:D0:74:C2:EA:08
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 141D93ED8C72D0BDE5A2D48B1ECB07C55B38096C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
Signing time: Wed 02 Sep 2026 09:00:19 +0000
ROA not before: Wed 02 Sep 2026 08:55:19 +0000
ROA not after: Wed 01 Sep 2027 09:00:19 +0000
asID: 219053
IP address blocks: 178.92.49.0/24 maxlen: 24
178.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1d:93:ed:8c:72:d0:bd:e5:a2:d4:8b:1e:cb:07:c5:5b:38:09:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 2 08:55:19 2026 GMT
Not After : Sep 1 09:00:19 2027 GMT
Subject: CN=672AAD762F6F8F2C55B536317DBDFAD074C2EA08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:b1:9a:c8:d9:60:20:8f:af:ce:7b:96:db:
91:e2:5c:c6:71:66:e0:a4:93:9c:ba:66:6a:c8:96:
01:4b:71:c9:81:e6:fb:a8:00:63:50:fe:21:af:1a:
67:96:1d:7d:bd:65:31:c5:d8:e5:a5:cd:71:25:c4:
bd:c5:b2:db:3e:6a:79:e7:de:f9:7b:1f:50:37:a2:
7d:7b:5a:c8:24:77:62:d6:52:ca:8b:b9:a6:dd:6c:
bf:d5:52:30:46:81:77:3c:73:04:06:49:ca:36:34:
ef:6e:74:95:80:b1:84:93:f1:14:e7:de:0d:59:8e:
59:48:db:9a:15:3a:92:3f:9a:26:ee:1b:3a:44:dd:
b0:54:2e:84:31:8e:38:ee:91:be:06:3b:7f:ac:d8:
59:b9:83:f3:ac:cf:68:31:ab:17:d2:c8:37:d0:37:
41:f2:01:2f:1b:dd:1a:0b:b3:bd:c1:8d:54:76:06:
91:e0:f4:64:6e:69:ea:27:5d:e6:09:36:89:2f:e6:
d8:cb:30:7d:47:a3:03:48:02:29:6a:83:d1:5d:7a:
47:29:70:2b:06:35:15:cc:9a:b4:4f:e0:5a:54:8d:
c0:f9:11:5a:0b:30:67:79:1e:da:bd:a7:78:0b:30:
cb:c9:7b:55:1a:29:d6:ff:53:30:85:a5:01:48:98:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:AD:76:2F:6F:8F:2C:55:B5:36:31:7D:BD:FA:D0:74:C2:EA:08
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.49.0/24
178.92.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:81:59:bd:c5:b6:60:98:18:bb:f0:fe:7f:e0:d2:cd:87:fa:
64:30:34:6f:28:a3:d2:ce:1c:0e:3f:4b:4d:e9:8d:c1:12:81:
11:f3:cd:0f:01:52:28:fd:92:19:21:51:35:a3:af:08:8d:82:
17:9f:6c:13:79:23:08:b9:48:65:33:00:21:56:b2:5e:ef:a3:
b2:03:26:19:ba:24:01:4b:dc:7c:83:5e:c7:48:14:ed:99:53:
0d:bf:0f:06:e0:18:51:4f:b0:d9:d9:30:dc:e3:6e:50:21:c8:
6b:89:5c:cb:1e:88:73:d3:72:91:87:32:be:4e:a5:ab:79:d6:
fb:e8:e3:b7:04:e6:83:61:db:d8:68:43:79:72:de:c8:f0:94:
30:af:44:2b:f4:2b:f6:6b:f5:74:40:ac:4f:82:81:75:8e:6c:
f1:d8:5a:aa:59:fc:16:88:fd:85:98:23:cd:3b:07:e6:97:59:
de:3b:d0:a3:91:40:51:50:2a:64:d0:41:98:b0:0d:d9:32:87:
12:3e:a5:08:6d:23:63:ca:33:73:2c:60:3a:56:56:53:0b:96:
5f:0a:fe:01:23:64:92:3e:34:25:cf:34:58:3f:44:4d:18:7a:
26:05:3c:7c:03:f8:4e:82:52:71:2d:92:90:ec:d1:90:30:b5:
49:e1:f7:76
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUFB2T7Yxy0L3lotSLHssHxVs4CWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MDIwODU1MTlaFw0yNzA5MDEwOTAwMTlaMDMxMTAvBgNV
BAMTKDY3MkFBRDc2MkY2RjhGMkM1NUI1MzYzMTdEQkRGQUQwNzRDMkVBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC07GayNlgII+vznuW25HiXMZx
ZuCkk5y6ZmrIlgFLccmB5vuoAGNQ/iGvGmeWHX29ZTHF2OWlzXElxL3Fsts+annn
3vl7H1A3on17Wsgkd2LWUsqLuabdbL/VUjBGgXc8cwQGSco2NO9udJWAsYST8RTn
3g1ZjllI25oVOpI/mibuGzpE3bBULoQxjjjukb4GO3+s2Fm5g/Osz2gxqxfSyDfQ
N0HyAS8b3RoLs73BjVR2BpHg9GRuaeonXeYJNokv5tjLMH1HowNIAilqg9Fdekcp
cCsGNRXMmrRP4FpUjcD5EVoLMGd5Htq9p3gLMMvJe1UaKdb/UzCFpQFImN0LAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUZyqtdi9vjyxVtTYxfb360HTC6ggwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE5MDUzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAslwx
AwQAslzWMA0GCSqGSIb3DQEBCwUAA4IBAQCigVm9xbZgmBi78P5/4NLNh/pkMDRv
KKPSzhwOP0tN6Y3BEoER880PAVIo/ZIZIVE1o68IjYIXn2wTeSMIuUhlMwAhVrJe
76OyAyYZuiQBS9x8g17HSBTtmVMNvw8G4BhRT7DZ2TDc425QIchriVzLHohz03KR
hzK+TqWredb76OO3BOaDYdvYaEN5ct7I8JQwr0Qr9Cv2a/V0QKxPgoF1jmzx2Fqq
WfwWiP2FmCPNOwfml1neO9CjkUBRUCpk0EGYsA3ZMocSPqUIbSNjyjNzLGA6VlZT
C5ZfCv4BI2SSPjQlzzRYP0RNGHomBTx8A/hOglJxLZKQ7NGQMLVJ4fd2
-----END CERTIFICATE-----
Generated at Wed Sep 2 20:33:19 2026 by rpki-client