Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: W9H5t8JIXm4Nf/IouQyI6PWxiVpdU5wZ4EoUXTVkIYQ=
Subject key identifier: 1C:36:CE:86:9C:70:9D:EF:DE:68:8C:B5:E3:87:FF:9A:FB:8C:A1:FD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0F5330F6BAE882BF9865FFFB7B212A53E173B78F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219427.roa
Signing time: Mon 14 Sep 2026 08:16:32 +0000
ROA not before: Mon 14 Sep 2026 08:11:32 +0000
ROA not after: Mon 13 Sep 2027 08:16:32 +0000
asID: 219427
IP address blocks: 46.202.84.0/24 maxlen: 24
46.203.22.0/24 maxlen: 24
46.203.29.0/24 maxlen: 24
46.203.56.0/24 maxlen: 24
46.203.62.0/24 maxlen: 24
46.203.74.0/24 maxlen: 24
46.203.80.0/24 maxlen: 24
46.203.91.0/24 maxlen: 24
46.203.92.0/24 maxlen: 24
46.203.137.0/24 maxlen: 24
46.203.199.0/24 maxlen: 24
46.203.242.0/24 maxlen: 24
91.124.29.0/24 maxlen: 24
91.124.54.0/24 maxlen: 24
91.124.83.0/24 maxlen: 24
91.124.137.0/24 maxlen: 24
91.124.139.0/24 maxlen: 24
91.124.147.0/24 maxlen: 24
91.124.185.0/24 maxlen: 24
91.124.192.0/24 maxlen: 24
91.124.200.0/24 maxlen: 24
91.124.203.0/24 maxlen: 24
91.124.255.0/24 maxlen: 24
92.112.39.0/24 maxlen: 24
92.113.45.0/24 maxlen: 24
92.113.102.0/24 maxlen: 24
92.113.159.0/24 maxlen: 24
92.113.162.0/24 maxlen: 24
92.113.186.0/24 maxlen: 24
92.113.198.0/24 maxlen: 24
95.135.36.0/24 maxlen: 24
95.135.48.0/24 maxlen: 24
95.135.224.0/24 maxlen: 24
95.135.250.0/24 maxlen: 24
178.92.239.0/24 maxlen: 24
178.93.118.0/24 maxlen: 24
178.95.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:53:30:f6:ba:e8:82:bf:98:65:ff:fb:7b:21:2a:53:e1:73:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 14 08:11:32 2026 GMT
Not After : Sep 13 08:16:32 2027 GMT
Subject: CN=1C36CE869C709DEFDE688CB5E387FF9AFB8CA1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:ad:83:5c:1f:32:f5:56:d6:59:d9:37:fe:
39:ec:4e:52:e9:db:fa:5a:b1:1b:da:1d:86:b2:f0:
a3:2f:dc:1a:d0:1a:a0:7b:8e:42:a1:4f:b2:29:1b:
3d:f7:47:cd:16:1d:e5:bf:ab:66:d8:18:d3:a7:0c:
13:02:a6:65:cb:9e:55:12:d7:81:8d:8a:ce:8b:e8:
55:24:70:0c:38:26:1c:53:a3:0e:43:6c:3e:1f:86:
5d:3d:4e:ba:71:ba:73:d2:d2:c9:d3:35:56:2a:92:
1d:c5:64:e9:2e:cd:4b:54:90:8e:4c:21:a1:fa:c3:
01:70:51:2e:48:45:44:32:2b:34:e4:b1:2d:93:bb:
5c:5d:b1:14:0a:fd:2c:be:f5:70:3c:d2:00:8a:49:
76:d0:a9:87:6f:e2:76:97:ea:cc:5d:a9:cf:6f:2e:
48:0d:44:1f:69:50:2c:5c:f9:1a:ab:96:4d:cc:a5:
67:12:34:e1:ce:86:39:a4:5e:2c:fc:ad:10:6a:e1:
d7:e9:50:89:0d:1e:67:ac:f2:f9:d9:16:a9:de:04:
a2:b1:85:b9:3d:ae:cb:eb:97:f3:86:8c:50:36:ad:
8e:12:b3:b5:03:7a:f0:f2:ee:44:80:8c:8d:6c:24:
a3:69:51:c2:23:45:39:98:93:fb:21:62:fc:3d:a6:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:36:CE:86:9C:70:9D:EF:DE:68:8C:B5:E3:87:FF:9A:FB:8C:A1:FD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.84.0/24
46.203.22.0/24
46.203.29.0/24
46.203.56.0/24
46.203.62.0/24
46.203.74.0/24
46.203.80.0/24
46.203.91.0-46.203.92.255
46.203.137.0/24
46.203.199.0/24
46.203.242.0/24
91.124.29.0/24
91.124.54.0/24
91.124.83.0/24
91.124.137.0/24
91.124.139.0/24
91.124.147.0/24
91.124.185.0/24
91.124.192.0/24
91.124.200.0/24
91.124.203.0/24
91.124.255.0/24
92.112.39.0/24
92.113.45.0/24
92.113.102.0/24
92.113.159.0/24
92.113.162.0/24
92.113.186.0/24
92.113.198.0/24
95.135.36.0/24
95.135.48.0/24
95.135.224.0/24
95.135.250.0/24
178.92.239.0/24
178.93.118.0/24
178.95.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:01:85:45:cb:97:52:d5:40:6d:47:48:c7:59:97:84:2a:be:
ac:b3:3b:04:08:d2:fc:fc:ff:d1:41:16:a8:11:c2:b9:57:04:
00:30:f9:6f:bf:13:8f:f4:cb:b3:57:81:0e:22:6d:42:89:29:
ac:4c:0d:43:32:bc:5e:6e:be:c5:d5:ab:77:48:3d:39:c7:c8:
87:6c:4a:ef:80:d6:bb:2f:68:d9:e7:7b:e3:5e:ef:7c:01:bd:
ec:53:90:71:b8:ef:5e:89:1a:7d:73:6a:9c:57:ff:f5:cb:48:
13:8e:f4:8e:a7:2c:f4:b9:b5:93:38:d2:99:27:a4:54:ce:16:
27:50:e7:e4:45:20:46:c3:fc:6a:fb:28:df:7a:b1:25:6b:80:
0d:cd:be:cb:8b:c6:bc:9d:73:90:c3:4b:15:99:ae:2d:a3:2d:
fe:7e:60:63:d5:da:3a:a2:29:f4:c4:1a:86:86:07:85:37:0e:
71:d6:9b:56:a8:02:c6:92:1f:31:32:da:63:ae:4c:1f:9f:1f:
7b:c4:bd:86:84:50:a9:0b:35:58:30:2f:70:5e:24:0d:bd:ff:
8a:1e:3a:fe:35:e2:d0:83:d7:ce:24:be:a5:08:bc:e2:fb:b7:
fc:50:3e:83:98:5d:ba:a3:a9:0e:1d:62:06:a9:d2:80:f7:c9:
50:30:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:17:27 2026 by rpki-client