Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: YYtFR2JFgcJZF3RriDCUWkqANCo4kOn3urESKMm0A5c=
Subject key identifier: 41:35:4F:59:34:61:FD:20:9D:8B:8C:39:00:AE:BC:4D:76:DE:5A:0A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 263C0398EBEB1BE228CE20AB2C7C5D51DA0D7B82
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219105.roa
Signing time: Fri 11 Sep 2026 17:45:00 +0000
ROA not before: Fri 11 Sep 2026 17:40:00 +0000
ROA not after: Fri 10 Sep 2027 17:45:00 +0000
asID: 219105
IP address blocks: 91.124.81.0/24 maxlen: 24
178.94.182.0/24 maxlen: 24
178.94.208.0/24 maxlen: 24
178.95.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3c:03:98:eb:eb:1b:e2:28:ce:20:ab:2c:7c:5d:51:da:0d:7b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 11 17:40:00 2026 GMT
Not After : Sep 10 17:45:00 2027 GMT
Subject: CN=41354F593461FD209D8B8C3900AEBC4D76DE5A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:6b:cf:af:1d:e9:bc:ee:e2:79:87:06:67:
e3:96:9b:d9:c7:07:b8:a4:47:f4:5a:97:f5:ee:e9:
3d:1c:a9:02:e0:ce:53:f1:3a:37:53:6b:6b:ad:92:
46:b1:9a:99:37:e8:bb:d2:f5:3c:cc:fc:17:23:ff:
0e:22:c2:87:a3:dd:d9:1a:f0:99:ed:11:a0:76:8b:
73:9f:da:c4:7e:0a:cb:80:29:bc:dc:8a:6d:fe:8d:
75:0f:4c:12:be:96:8e:16:e5:36:b8:24:ea:0b:f6:
73:ff:e5:77:83:b2:c8:1d:5a:2f:a9:63:63:ec:2e:
1e:63:27:19:9d:ba:8a:08:18:81:ea:61:d6:07:e2:
e7:c5:6f:69:b3:a3:b9:06:2e:e5:29:55:a9:7a:7d:
45:31:55:76:66:09:e2:94:db:58:de:b3:6d:34:1c:
3d:4f:b1:64:5d:e0:2e:6a:cb:de:c8:38:47:2c:65:
39:e0:8d:9d:69:d4:a7:fc:58:50:b0:2d:1e:ba:d7:
e8:56:54:24:06:e0:37:06:66:90:af:32:52:c5:e8:
61:f9:b2:3e:03:37:28:d1:24:83:9f:33:dd:6a:49:
45:60:0c:d9:4c:ff:7c:5d:66:33:68:95:f4:65:a5:
06:28:7d:2d:f3:15:42:78:47:28:05:27:c7:2e:c7:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:4F:59:34:61:FD:20:9D:8B:8C:39:00:AE:BC:4D:76:DE:5A:0A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.81.0/24
178.94.182.0/24
178.94.208.0/24
178.95.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2a:6f:e4:77:60:71:a3:2d:62:c5:63:c6:48:04:c9:42:8c:
1a:64:db:cb:2f:e1:5e:11:10:39:98:6b:1e:14:0d:29:51:e5:
59:47:ac:e4:ce:75:7e:8d:58:14:4a:4d:09:69:24:b5:47:c5:
ab:65:47:73:99:35:84:c1:11:b8:28:85:72:e7:39:0e:25:d5:
b5:c8:02:b6:9d:f6:be:71:99:a8:fc:16:8e:84:1d:e8:a4:18:
4e:1f:77:18:ca:91:9d:35:b3:db:aa:07:65:60:22:57:ac:d7:
c9:97:df:a5:0d:7c:95:19:75:80:d2:94:51:93:14:18:1b:d6:
e3:1e:09:25:d6:28:8e:5a:0b:33:9c:af:82:5a:c1:2b:be:21:
b7:35:93:33:02:ee:24:fb:97:ae:fe:52:f1:02:39:5a:65:af:
2c:e2:93:ca:e1:c2:28:80:13:d9:49:66:7e:cd:90:6b:67:47:
6f:5f:f3:41:3d:75:aa:39:dd:ec:b7:60:b7:c4:9d:5e:41:69:
f0:bf:ec:e9:e7:90:cf:26:6d:8e:26:0f:d0:ca:80:65:a9:c5:
0f:79:bd:58:e6:65:d1:7a:e6:bb:cc:71:54:26:02:b0:a3:4f:
bf:5c:57:da:77:73:1e:4b:84:a5:f0:11:c0:94:6b:51:5e:16:
41:66:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:55:09 2026 by rpki-client