Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219155.roa
File: AS219155.roa (raw, json)
Hash identifier: nhZzrxl8C0R60PqdHKZYh43NjoXv+2J81So2laPpSH8=
Subject key identifier: C4:91:34:4F:22:44:E3:82:D8:3C:29:5B:A0:AC:16:FE:5B:E8:9D:59
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 72D1D3928EBF14FF9660E0449C2320F84F63067B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219155.roa
Signing time: Fri 24 Jul 2026 09:47:06 +0000
ROA not before: Fri 24 Jul 2026 09:42:06 +0000
ROA not after: Fri 23 Jul 2027 09:47:06 +0000
asID: 219155
IP address blocks: 91.124.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d1:d3:92:8e:bf:14:ff:96:60:e0:44:9c:23:20:f8:4f:63:06:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 24 09:42:06 2026 GMT
Not After : Jul 23 09:47:06 2027 GMT
Subject: CN=C491344F2244E382D83C295BA0AC16FE5BE89D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:75:0f:9b:4c:c2:88:8c:fc:3f:af:04:33:c4:
9d:d5:d2:aa:f3:74:07:dc:08:6b:34:a6:85:72:8e:
28:4a:35:0e:ff:3e:47:9a:fb:dc:d6:99:3d:ca:9d:
66:c1:7f:13:52:b2:91:a4:0f:ee:74:b2:00:a5:33:
df:42:72:3f:17:21:7e:a1:ce:49:ef:c9:2f:6c:b1:
c9:7a:53:df:a8:c8:0e:fd:eb:5a:15:e2:62:9c:cc:
58:82:d2:46:44:c7:6f:88:69:a4:e1:6c:f8:40:30:
eb:76:1b:cc:42:cf:8b:e8:68:d0:52:6d:17:4e:36:
c3:8f:da:3b:08:3e:b3:4c:30:9c:fc:92:34:73:d4:
f7:08:ae:11:aa:fa:af:95:39:93:4e:78:b9:28:ed:
ab:b2:1f:60:49:ed:a4:85:5d:1d:05:5f:f8:db:cf:
b3:a1:0d:e2:51:52:0e:d3:51:1c:54:0c:61:1d:7a:
6e:ad:89:60:b3:d7:bd:d4:83:63:6a:da:37:7a:ae:
1b:91:d1:20:f1:ee:b8:4b:cc:c4:c1:d6:f3:eb:56:
5a:70:8e:80:30:a2:19:45:2f:9b:ba:00:15:3c:d3:
1f:37:3c:e3:f5:37:99:09:d1:42:d6:a6:d6:0b:d8:
6f:6b:6b:d0:0e:a4:37:6c:c3:c4:a7:50:f4:ff:85:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:34:4F:22:44:E3:82:D8:3C:29:5B:A0:AC:16:FE:5B:E8:9D:59
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.14.0/24
Signature Algorithm: sha256WithRSAEncryption
93:88:5b:2f:00:27:0f:63:70:de:e5:fd:a6:1e:2b:f5:e3:ec:
83:42:d0:8e:1e:3d:1b:5e:82:9b:a2:d0:db:e4:5f:d4:8b:23:
8d:2f:b9:5f:a2:99:e9:2c:52:a1:9d:5f:b5:d3:0f:8a:5f:45:
ed:38:21:e2:44:84:0e:e1:f4:2a:ff:01:4f:a0:0c:62:a5:6a:
63:0f:69:8e:d2:8a:77:59:c4:8d:7d:5a:58:cd:25:ea:69:aa:
43:01:50:40:f0:12:20:a4:74:72:0f:62:d4:e9:3c:42:69:d5:
e3:b4:75:70:e8:8d:3d:ee:91:86:20:8b:23:79:f5:21:57:44:
2e:1b:74:84:5c:be:53:80:56:a3:e8:b3:d5:1c:3f:c2:04:de:
44:8a:4d:1b:a5:f1:0e:be:71:ce:60:52:05:9d:7d:dc:e8:ef:
27:ff:9b:fb:0d:5d:a1:30:15:be:a3:b5:4b:c4:71:b1:87:3c:
ad:7b:0a:b2:c3:a5:77:d1:32:61:b8:20:0c:82:9e:02:7f:81:
93:74:14:81:0a:c8:c8:4b:61:a9:c9:a0:69:30:e1:97:0a:ee:
5b:f7:f4:b1:41:3d:c4:53:96:b4:68:73:77:e7:4f:25:52:b4:
14:1a:c3:d9:b2:89:c9:a3:f2:6d:7d:52:53:98:46:80:e0:98:
d0:4b:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:12 2026 by rpki-client