Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219229.roa
File: AS219229.roa (raw, json)
Hash identifier: JAtxgZtFi55ttXSCMZ3us7DO0RHwELCq2+haHzwwTY8=
Subject key identifier: BF:AD:0B:40:EE:54:F8:38:82:B2:16:50:DA:61:6C:51:2B:F7:CB:BF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 26A8790A5B28D196126C43F381460D22D7775619
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219229.roa
Signing time: Wed 11 Nov 2026 13:48:53 +0000
ROA not before: Wed 11 Nov 2026 13:43:53 +0000
ROA not after: Wed 10 Nov 2027 13:48:53 +0000
asID: 219229
IP address blocks: 178.93.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a8:79:0a:5b:28:d1:96:12:6c:43:f3:81:46:0d:22:d7:77:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 11 13:43:53 2026 GMT
Not After : Nov 10 13:48:53 2027 GMT
Subject: CN=BFAD0B40EE54F83882B21650DA616C512BF7CBBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:d5:b4:e2:cc:72:f6:93:e6:f7:5c:73:71:
8f:6e:ce:81:48:76:c8:56:21:53:43:34:83:41:2c:
dc:5a:00:e6:5e:33:19:10:70:b9:e3:29:3c:8f:16:
93:b7:f5:09:87:f1:91:d1:3f:48:d3:4b:95:af:47:
1d:dc:57:d7:13:c0:f2:84:9d:08:5f:96:47:5a:a0:
8d:3a:8d:62:0c:b6:3f:d1:b8:63:29:0d:8a:e7:d1:
ed:30:23:74:95:e1:0d:47:b6:09:92:3c:bd:34:09:
02:31:af:14:6c:cc:4f:a8:89:72:58:c3:60:36:f9:
f5:2d:8a:32:c8:93:bf:c6:60:35:78:c3:e6:a2:97:
4a:0c:96:f8:7f:76:d9:3e:87:59:d4:97:75:75:48:
e8:de:18:28:05:0a:72:96:57:46:f1:59:e7:71:8b:
42:5b:0b:ce:c0:76:6c:c8:14:cd:f5:fa:cb:b0:9e:
ab:8a:0c:11:3c:ef:d2:07:df:4a:99:8a:62:06:b2:
0f:16:55:4d:0e:43:5d:a2:9d:ad:3e:46:a8:18:47:
2c:85:1b:bc:4f:bc:3a:f2:6e:28:29:10:6c:8f:6b:
d2:8d:13:6a:8f:0e:32:98:f8:d1:4a:80:b3:d3:83:
14:42:ff:93:9f:4c:9e:86:70:33:6b:af:f8:e3:cd:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:0B:40:EE:54:F8:38:82:B2:16:50:DA:61:6C:51:2B:F7:CB:BF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.186.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fb:b1:59:56:a4:eb:f8:43:f6:1c:26:53:96:d2:13:a8:ef:
a0:84:63:b3:16:fb:c1:f8:76:30:dc:aa:3d:55:cf:33:3a:19:
31:ff:17:46:98:f3:0d:01:ba:d5:d8:d5:80:26:a9:f1:1c:7f:
85:d9:24:59:ad:d1:d0:35:da:e9:6c:6b:0c:29:de:64:17:c7:
b4:26:58:58:a0:d1:20:6d:94:e2:11:35:61:71:cf:f9:11:3c:
cb:30:a8:ac:9c:cf:cf:f1:6a:33:f9:21:8b:23:45:0f:12:1d:
e6:b6:96:8a:ef:4a:b5:59:f5:4c:b9:dd:6c:7a:aa:d5:5d:a5:
c1:8c:2c:37:d0:90:c3:7c:26:80:f9:39:78:d3:2d:f7:b5:d2:
70:1c:20:75:5a:81:41:72:33:b9:44:a7:28:f9:af:8d:2a:32:
23:f1:66:cc:da:13:30:65:84:3d:6d:e2:fc:8e:c0:1e:ce:58:
4e:aa:fb:b3:4b:8e:0e:2c:c0:78:ce:55:58:57:4d:94:aa:6d:
ac:73:23:ea:a5:82:27:98:87:22:84:e9:95:8f:89:00:ea:58:
58:01:84:ce:72:78:8e:b9:56:be:7a:8f:00:15:ee:9a:2e:77:
a0:88:6a:4f:2f:f6:c0:4c:b8:8a:93:5f:7a:c0:a7:02:3e:9d:
34:1b:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:08:46 2026 by rpki-client