Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219329.roa
File: AS219329.roa (raw, json)
Hash identifier: 4cs1W8wTtHP+QjAKuTSLRPBVJHCOpN0uHhd7To5vRJI=
Subject key identifier: 38:39:57:7E:81:FF:C3:66:14:8D:03:EA:DF:F0:41:83:31:5A:9E:DB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C5B44553042A62551A7D9488ACAA3F27F9E037E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219329.roa
Signing time: Wed 16 Sep 2026 12:29:29 +0000
ROA not before: Wed 16 Sep 2026 12:24:29 +0000
ROA not after: Wed 15 Sep 2027 12:29:29 +0000
asID: 219329
IP address blocks: 46.202.1.0/24 maxlen: 24
46.203.21.0/24 maxlen: 24
91.124.119.0/24 maxlen: 24
92.112.20.0/24 maxlen: 24
92.112.40.0/24 maxlen: 24
92.112.43.0/24 maxlen: 24
92.112.54.0/24 maxlen: 24
92.112.56.0/24 maxlen: 24
92.112.71.0/24 maxlen: 24
92.112.140.0/24 maxlen: 24
92.113.63.0/24 maxlen: 24
92.113.161.0/24 maxlen: 24
92.113.199.0/24 maxlen: 24
92.113.208.0/24 maxlen: 24
92.113.209.0/24 maxlen: 24
92.113.210.0/24 maxlen: 24
92.113.211.0/24 maxlen: 24
92.113.251.0/24 maxlen: 24
92.113.252.0/24 maxlen: 24
95.134.96.0/24 maxlen: 24
95.134.98.0/24 maxlen: 24
95.134.99.0/24 maxlen: 24
95.134.101.0/24 maxlen: 24
95.134.103.0/24 maxlen: 24
95.134.120.0/24 maxlen: 24
95.135.71.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
178.92.30.0/24 maxlen: 24
178.92.89.0/24 maxlen: 24
178.92.210.0/24 maxlen: 24
178.92.222.0/24 maxlen: 24
178.92.225.0/24 maxlen: 24
178.92.227.0/24 maxlen: 24
178.92.231.0/24 maxlen: 24
178.92.250.0/24 maxlen: 24
178.93.5.0/24 maxlen: 24
178.93.6.0/24 maxlen: 24
178.93.8.0/24 maxlen: 24
178.93.18.0/24 maxlen: 24
178.93.20.0/24 maxlen: 24
178.93.34.0/24 maxlen: 24
178.93.36.0/24 maxlen: 24
178.93.245.0/24 maxlen: 24
178.94.154.0/24 maxlen: 24
178.94.157.0/24 maxlen: 24
178.94.221.0/24 maxlen: 24
178.95.94.0/24 maxlen: 24
178.95.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 13:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5b:44:55:30:42:a6:25:51:a7:d9:48:8a:ca:a3:f2:7f:9e:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 16 12:24:29 2026 GMT
Not After : Sep 15 12:29:29 2027 GMT
Subject: CN=3839577E81FFC366148D03EADFF04183315A9EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:58:26:2b:f9:29:1d:5a:1a:d2:be:ec:9e:
34:c6:6c:d9:28:5f:57:de:b8:fe:43:fe:83:3d:f8:
36:ce:03:e9:00:27:14:d9:a2:1e:e6:33:51:d5:e2:
a9:21:f9:d0:84:e4:1f:89:0a:98:19:7c:14:5f:63:
b4:fb:92:ee:09:3a:50:be:54:5b:fd:01:0b:27:c4:
f3:ea:d6:55:e6:d1:a0:cc:25:a9:25:82:d4:99:24:
3a:9c:7a:14:b5:c9:07:8d:01:34:af:77:95:46:7d:
7a:c5:77:02:a5:62:07:c6:e3:1b:50:d5:23:87:8f:
01:b4:12:68:e2:f0:ab:54:c0:0e:18:98:15:74:9a:
75:f5:5c:75:cd:fe:9b:48:35:5f:18:0b:76:2e:2d:
c1:7e:19:1e:cd:4d:bd:08:f9:6a:d6:4a:81:e1:99:
32:6b:24:c4:90:98:2e:ba:3c:d3:e8:ba:48:27:d3:
07:b9:2b:09:b9:f8:99:62:10:6e:8b:e6:b2:40:61:
0c:9a:8c:7a:02:57:a0:24:f7:72:cb:8b:79:59:f7:
8c:46:ae:c4:27:a2:83:8f:2a:e5:39:a1:fc:83:37:
59:5d:c8:e2:c2:4b:67:ef:22:06:17:f5:12:2d:09:
43:8f:b8:0e:df:7c:cf:09:31:2e:d0:3a:b1:ae:21:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:57:7E:81:FF:C3:66:14:8D:03:EA:DF:F0:41:83:31:5A:9E:DB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.1.0/24
46.203.21.0/24
91.124.119.0/24
92.112.20.0/24
92.112.40.0/24
92.112.43.0/24
92.112.54.0/24
92.112.56.0/24
92.112.71.0/24
92.112.140.0/24
92.113.63.0/24
92.113.161.0/24
92.113.199.0/24
92.113.208.0/22
92.113.251.0-92.113.252.255
95.134.96.0/24
95.134.98.0/23
95.134.101.0/24
95.134.103.0/24
95.134.120.0/24
95.135.71.0/24
95.135.221.0/24
178.92.30.0/24
178.92.89.0/24
178.92.210.0/24
178.92.222.0/24
178.92.225.0/24
178.92.227.0/24
178.92.231.0/24
178.92.250.0/24
178.93.5.0-178.93.6.255
178.93.8.0/24
178.93.18.0/24
178.93.20.0/24
178.93.34.0/24
178.93.36.0/24
178.93.245.0/24
178.94.154.0/24
178.94.157.0/24
178.94.221.0/24
178.95.94.0/24
178.95.107.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e8:31:af:98:1f:56:86:80:aa:87:ac:c8:91:1b:d4:2e:b4:
d2:3f:f4:c6:2a:4e:2e:af:da:d8:7c:88:83:74:25:7a:98:63:
43:30:ff:9e:9d:71:93:2f:5b:d1:25:03:ac:7a:89:ce:6c:71:
16:23:b5:d1:1a:b3:0b:3f:ef:0e:0e:d5:96:20:73:5c:44:f5:
11:bf:09:66:cc:19:66:ff:b8:dc:b1:6e:0a:20:6c:80:04:67:
8a:41:7a:31:c4:88:e3:9e:f4:97:da:d3:39:8c:72:55:05:48:
84:fd:7a:5c:a1:3e:b7:6e:ef:b8:ec:0b:df:67:39:73:ba:df:
96:9b:15:b9:24:f9:9b:fb:48:00:6f:2a:3e:83:24:1b:e5:06:
27:97:d8:1e:3e:2c:72:40:9e:c7:e2:27:a4:05:03:c9:d8:0c:
a4:98:e6:d6:bc:3c:9c:d4:7d:74:a4:93:82:dc:de:57:9a:96:
19:c0:8d:56:e3:db:34:16:ac:22:f3:ed:13:d6:f8:20:b5:c7:
a8:3f:89:a8:0f:46:00:26:9f:ef:3a:2f:c7:5c:cc:1a:70:e0:
0b:db:3d:9d:77:d6:a3:3d:c4:77:a0:94:c4:d6:cd:ad:54:e9:
41:ef:59:0d:77:da:f0:72:e9:06:b2:90:93:d8:08:18:c9:0d:
f6:9b:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 15:35:06 2026 by rpki-client