Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219057.roa
File: AS219057.roa (raw, json)
Hash identifier: QTd6xz7n3jmsKLL50tMW1GUVKAMzswNSPGWqGCaFw2c=
Subject key identifier: 70:CD:21:BD:41:F7:5B:6C:28:DE:57:57:74:80:49:67:6A:F8:A3:34
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 042CE1BABABC0B86E6904DECFEF33DA01960807F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219057.roa
Signing time: Wed 23 Sep 2026 02:08:11 +0000
ROA not before: Wed 23 Sep 2026 02:03:11 +0000
ROA not after: Wed 22 Sep 2027 02:08:11 +0000
asID: 219057
IP address blocks: 168.222.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2c:e1:ba:ba:bc:0b:86:e6:90:4d:ec:fe:f3:3d:a0:19:60:80:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 23 02:03:11 2026 GMT
Not After : Sep 22 02:08:11 2027 GMT
Subject: CN=70CD21BD41F75B6C28DE5757748049676AF8A334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:b9:01:1b:fb:02:bb:72:f4:d1:15:ec:79:
02:e9:f8:dc:4b:e1:94:db:98:47:ba:b4:c3:c8:c5:
9e:6a:b9:a5:aa:9f:33:16:a5:14:cc:86:d5:c9:e3:
f9:be:51:07:a5:f3:17:d4:82:a3:b5:05:86:82:cb:
6c:c5:02:d5:63:39:91:ba:fc:b3:a1:1d:1a:a8:6d:
47:28:af:cd:dd:6d:e6:f2:46:c5:d3:1a:ef:7a:55:
b9:7e:d6:17:57:17:7b:4a:c3:0a:71:84:f6:89:54:
74:be:9a:61:d3:7c:56:1c:c2:26:5a:b7:2e:7e:ba:
40:ff:3a:a0:c5:c8:39:ab:51:f1:7e:c2:0f:88:e7:
61:a0:ba:86:f3:fa:da:97:d8:81:25:c1:5d:8a:ca:
06:84:67:35:90:ea:d3:c3:90:b0:8f:2d:81:8a:84:
61:f9:28:2d:6a:1e:36:0c:87:dc:10:92:46:16:74:
c1:8f:18:1f:9c:da:c9:1a:bb:d4:7e:1c:10:3e:24:
c2:7d:2e:b9:f2:99:18:ef:94:bf:17:74:92:8e:29:
88:7c:10:bb:12:01:e3:fd:65:8b:10:30:2d:37:a8:
fd:e8:fd:da:48:58:ce:b4:71:37:e7:3b:11:04:03:
74:e5:07:59:17:e4:58:51:c0:ad:36:13:b1:58:3d:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:21:BD:41:F7:5B:6C:28:DE:57:57:74:80:49:67:6A:F8:A3:34
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:91:65:ec:b0:68:89:a0:4c:fd:23:87:60:61:3f:ae:75:01:
f1:6b:ec:68:a7:06:04:ce:fc:42:86:32:a3:e7:ed:c4:1f:39:
8b:b1:5a:63:e0:35:76:62:00:f1:f4:1b:02:51:e9:09:c6:46:
7a:b2:b1:03:25:8a:39:d0:19:82:ba:3a:84:4f:bd:34:51:bf:
d2:0f:e7:e7:50:85:0c:6a:b4:f4:bb:96:3a:f6:74:09:5d:cb:
02:46:58:14:ba:a1:16:be:75:b3:ce:83:5c:0f:86:c7:21:98:
f3:42:93:0a:e6:19:ac:95:9e:34:b2:55:7c:9f:89:c9:1f:55:
e7:42:a9:ca:d5:1d:40:32:a5:a9:e1:7f:5e:3b:76:a5:9e:f2:
8b:c2:9d:b8:3f:8a:f2:8e:83:c9:0e:81:7f:29:af:f9:d3:a5:
3c:96:a3:c7:89:1c:b3:dc:68:70:56:0c:fc:4a:4b:6b:a1:a5:
ec:bf:22:98:29:12:0a:7b:ab:16:84:6b:57:05:30:3a:6c:43:
56:ec:66:3e:7b:ef:ab:9f:7c:ad:03:59:74:b8:28:8b:92:8b:
d6:03:a6:68:aa:86:ba:ed:1e:9e:e8:5a:ac:af:bb:e6:19:12:
fc:d1:dd:eb:53:cf:7a:3b:64:3b:e6:ca:24:4e:0d:9a:bf:25:
d4:62:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:47:23 2026 by rpki-client