Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219160.roa
File: AS219160.roa (raw, json)
Hash identifier: duOdWpm0n3TxDf45YcNGwR3yz5Ho6oLFk/NSUSLVZJs=
Subject key identifier: 81:57:62:47:9B:A0:FC:3C:32:C0:63:41:A4:F9:41:4F:F5:3C:2D:64
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 150B91E4EAED65A7F6C28D3826274441F5F683B5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219160.roa
Signing time: Sun 30 Aug 2026 17:28:01 +0000
ROA not before: Sun 30 Aug 2026 17:23:01 +0000
ROA not after: Sun 29 Aug 2027 17:28:01 +0000
asID: 219160
IP address blocks: 91.124.126.0/24 maxlen: 24
178.93.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0b:91:e4:ea:ed:65:a7:f6:c2:8d:38:26:27:44:41:f5:f6:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 30 17:23:01 2026 GMT
Not After : Aug 29 17:28:01 2027 GMT
Subject: CN=815762479BA0FC3C32C06341A4F9414FF53C2D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:9c:de:9d:7f:17:4d:33:42:90:35:42:aa:
d1:8c:9e:c3:7b:d6:6d:0d:35:ff:c1:09:65:82:4d:
51:f2:af:67:9d:5b:2f:6e:7a:0b:21:51:c2:dd:5e:
2c:c4:1b:b1:8c:bc:20:5e:88:fe:2e:57:eb:06:20:
3a:d5:d5:27:db:15:db:58:24:87:94:b0:35:c7:e9:
c7:b9:2c:d7:a7:f8:4f:4a:7e:82:71:d7:72:54:8f:
db:7e:6b:33:c9:a4:4a:d5:2b:2e:c2:f5:99:f6:15:
41:ff:7a:0e:17:66:ef:de:5d:f0:82:de:55:67:3b:
c1:a9:a3:58:f5:57:7d:ac:2c:1a:6f:b5:b0:30:90:
91:d6:4d:1a:43:7d:c6:70:67:3a:ca:87:ea:df:dc:
41:73:e6:c3:39:dc:bb:fc:93:28:79:c0:9c:0b:a0:
42:c4:a3:77:88:ad:ee:a8:af:88:03:af:fb:ba:56:
f6:d4:02:5f:4d:f9:41:0a:5d:be:dc:79:99:41:20:
fc:8d:1a:47:49:a3:7f:8c:51:52:08:ec:47:9e:ac:
53:9c:15:3d:09:55:62:a6:74:33:74:2b:36:bc:1d:
3b:90:89:cf:95:12:b0:24:0c:15:d4:fd:7c:04:d6:
96:5e:81:6b:c7:25:0e:7b:d3:17:79:b9:8b:e5:23:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:57:62:47:9B:A0:FC:3C:32:C0:63:41:A4:F9:41:4F:F5:3C:2D:64
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.126.0/24
178.93.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8f:15:94:b0:14:43:4d:81:2d:ac:4b:d1:ad:d1:a9:42:33:
2f:21:3e:72:e0:38:44:17:6b:29:d6:0d:72:63:07:3e:57:eb:
e2:bb:16:cf:71:3c:b9:47:13:6d:59:fe:52:aa:60:30:68:14:
d8:4d:db:b5:f8:f2:d3:12:e7:96:2e:d2:41:34:e0:7e:87:63:
41:14:cc:8a:99:ab:5e:2a:10:94:e5:0b:0e:62:73:e2:78:ed:
d7:24:5f:1f:07:10:7b:e6:bc:5d:ec:3e:31:c0:6d:84:26:c5:
df:87:9d:df:be:f8:c4:f0:b9:46:c2:47:7d:08:02:96:d7:d0:
47:96:ab:e1:99:65:54:3a:e1:02:ac:ce:02:14:e4:41:c3:bc:
14:55:1d:f3:50:b6:51:76:89:8f:2f:dc:61:3e:bf:22:55:05:
57:d4:6c:6f:e4:d6:8a:ab:94:14:0c:95:b5:c0:df:05:d8:b5:
7f:51:b4:68:20:f9:ab:64:41:12:d9:c1:52:ba:ab:1c:ed:ab:
8f:95:ac:34:1c:5d:7b:7b:39:e7:52:8b:42:9e:6b:e1:8c:4c:
0d:a8:50:db:fa:c6:33:61:3b:01:22:c5:e0:5f:cf:fc:d7:cc:
ac:88:55:88:2d:89:e2:9c:b5:b7:07:1a:bd:ca:5f:72:01:b4:
27:f5:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 19:33:18 2026 by rpki-client