Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: zqXcm+bXefeMxLPi01186vnFlDJAmll25QKFK9ASqGU=
Subject key identifier: 0A:05:95:6D:6A:AC:23:49:24:D2:6A:11:0F:88:10:FB:14:17:5E:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 592E7604F1448DBE067DEE4A3510C7D48F72FBC6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
Signing time: Tue 05 May 2026 00:05:18 +0000
ROA not before: Tue 05 May 2026 00:00:18 +0000
ROA not after: Tue 04 May 2027 00:05:18 +0000
asID: 19318
IP address blocks: 150.241.203.0/24 maxlen: 24
162.141.167.0/24 maxlen: 24
167.148.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2e:76:04:f1:44:8d:be:06:7d:ee:4a:35:10:c7:d4:8f:72:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 5 00:00:18 2026 GMT
Not After : May 4 00:05:18 2027 GMT
Subject: CN=0A05956D6AAC234924D26A110F8810FB14175E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:1c:a3:7e:7f:8e:29:13:fa:c0:ef:cb:2a:
46:8e:da:b0:15:06:44:8e:65:d4:2d:6f:91:e6:ef:
22:51:8c:17:f4:e0:f1:2b:ea:76:a9:f5:ba:a0:89:
1f:12:5b:6e:e1:c5:5d:01:6e:8a:15:cf:5f:ef:94:
0f:0c:eb:f5:54:4f:07:21:67:61:08:0b:f1:8a:d3:
44:cf:b9:dd:9c:ef:26:66:b0:80:8b:eb:a3:39:94:
52:c3:6a:28:7a:ed:36:8d:56:9b:ab:81:ec:ef:19:
42:61:40:d7:ca:15:df:3c:a1:6b:1a:fa:56:30:58:
16:1b:2f:2b:31:47:42:aa:25:f7:cf:2a:44:dc:e9:
03:5a:b8:f6:2e:57:89:75:0b:3b:78:7e:a1:33:45:
22:37:a8:d8:45:9f:2d:e9:39:cf:0d:c7:67:b8:da:
d0:51:21:30:4d:72:ac:4c:6e:04:46:13:c5:d3:8c:
7b:af:48:fb:b5:2a:7c:de:5a:7e:ae:a6:38:be:db:
d8:75:71:0e:9b:4f:3e:ff:7e:c3:6c:4a:dc:fa:91:
26:a7:a2:d0:2d:b2:8b:81:eb:f8:63:35:ac:42:95:
7d:35:11:84:dd:60:bd:0d:e9:de:88:39:11:46:a0:
75:3f:f6:4e:e3:53:b7:a1:fd:09:ea:30:4d:33:7e:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:95:6D:6A:AC:23:49:24:D2:6A:11:0F:88:10:FB:14:17:5E:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.203.0/24
162.141.167.0/24
167.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:70:d1:e8:38:44:bb:f2:b0:c8:37:51:1c:41:8a:5a:61:93:
95:1c:37:3f:7b:85:55:cf:09:5d:6b:8a:d2:7b:35:84:b6:bc:
dd:aa:fa:15:d2:8b:54:18:0d:32:b2:15:ab:69:db:41:08:af:
69:64:7f:6d:87:d8:b7:3d:90:61:a7:ae:5d:cd:85:2d:5d:60:
a7:a8:8d:8b:06:32:28:5c:f7:c0:b4:b7:1d:f4:4c:76:b2:66:
17:1a:e2:ed:33:67:ec:e0:23:92:83:9b:5f:0f:4e:2d:02:5f:
21:af:79:2b:d1:24:09:b6:b9:21:9b:5e:41:e8:99:c7:05:0e:
47:47:ee:d2:a3:99:88:b7:c8:e5:95:8d:ea:d7:a8:04:0e:d2:
4a:ac:d3:74:14:b0:36:8c:39:bb:08:6d:94:2a:0a:2f:96:8e:
e8:36:1a:66:ac:24:32:a4:8d:d9:98:4c:77:05:97:23:d0:4f:
d8:10:a5:0d:a1:64:a0:87:a4:61:bc:3f:40:cd:13:ba:9f:22:
38:ec:4f:b5:ad:1c:b9:6c:45:6b:1b:42:ab:01:a5:5d:a5:cb:
b8:dc:30:76:c5:ca:ef:a7:f3:2f:99:9d:10:01:90:f1:6e:06:
3b:03:34:4a:68:ae:05:88:2d:37:8f:85:85:47:11:fd:07:db:
05:bc:b4:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:37:53 2026 by rpki-client