Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: QghEkvIihO8fXvLdebFI4hUgHqCPuiFVANZgMcuaB0I=
Subject key identifier: 26:13:25:BE:BA:F8:91:59:C1:EF:96:55:D0:14:29:50:53:4B:C1:7F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 443FCEB32C28A077594CC304DACF7619AEFB6E6E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219075.roa
Signing time: Wed 11 Nov 2026 08:03:50 +0000
ROA not before: Wed 11 Nov 2026 07:58:50 +0000
ROA not after: Wed 10 Nov 2027 08:03:50 +0000
asID: 219075
IP address blocks: 96.62.204.0/24 maxlen: 24
96.62.206.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3f:ce:b3:2c:28:a0:77:59:4c:c3:04:da:cf:76:19:ae:fb:6e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 11 07:58:50 2026 GMT
Not After : Nov 10 08:03:50 2027 GMT
Subject: CN=261325BEBAF89159C1EF9655D0142950534BC17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:4c:e0:cc:39:7b:f9:8d:05:c1:da:c9:e1:
bd:c2:f8:31:39:43:79:5d:30:08:df:01:7d:4d:9a:
64:94:f4:a7:4b:de:af:99:18:dd:48:07:fd:ce:2a:
6d:e5:9b:5a:f0:34:3c:e0:db:bb:35:4a:ac:5b:66:
21:1c:60:2e:7c:e0:9d:0c:a7:c3:4d:8d:f9:53:02:
26:dc:b2:1b:b1:0c:1e:1d:62:56:0d:4a:72:67:85:
39:a5:6e:7e:99:ed:06:d3:10:43:d9:3d:3e:6d:a8:
18:0c:f2:60:c7:08:32:37:5c:50:7a:ad:04:39:87:
4f:b1:7f:d5:3f:c8:8b:8c:90:6b:62:a8:81:6b:b4:
89:a7:40:e5:50:d8:55:8c:59:5b:35:6e:21:b4:a3:
96:01:d4:32:58:f2:4d:2e:ad:d1:07:7c:3f:f1:5b:
60:ce:a4:95:57:32:9b:de:e0:29:11:50:e1:fa:a0:
28:63:e6:f6:fa:2e:f9:e6:3e:52:ac:43:16:b9:c7:
29:0e:4c:d4:31:d4:ef:3b:54:85:d8:88:58:7e:e0:
72:e8:ad:8d:4f:62:72:a7:34:1f:14:f5:75:d6:da:
1a:8f:bf:19:f1:ba:8e:ac:ed:ad:9b:dd:d5:8d:f8:
07:3a:50:df:c7:5d:82:d3:fa:95:94:f8:c6:25:d9:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:25:BE:BA:F8:91:59:C1:EF:96:55:D0:14:29:50:53:4B:C1:7F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.204.0/24
96.62.206.0/24
143.14.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ec:60:12:25:e7:4d:25:7a:9f:e7:6e:7e:b1:91:e2:60:2a:
b8:61:57:19:b5:5a:92:49:4e:8f:41:6c:d3:b4:03:ed:56:45:
d2:a7:56:00:a7:44:68:84:ee:c2:93:c4:51:82:f3:a6:76:69:
d2:17:23:5f:66:10:87:d4:b5:76:25:6f:36:31:24:5a:cd:2c:
9e:54:fb:e6:bc:05:38:e6:11:1d:67:c0:76:bc:1f:e3:05:1e:
d1:fd:0d:41:1b:66:ca:1e:ab:be:43:d2:50:fa:4b:a3:f7:f7:
4e:65:0e:7c:65:c5:ab:e7:f0:f6:9a:3b:30:93:f9:4f:f0:00:
e9:f2:d4:e4:57:43:27:eb:1f:c6:cf:b9:5e:20:2f:ff:7e:3b:
fa:ab:7f:58:f8:2f:f2:4f:1e:25:2e:06:42:b8:67:67:5d:4d:
7d:27:aa:71:3e:a1:d7:0e:91:a3:b4:39:bf:97:e4:56:17:a5:
35:f3:58:c3:7d:31:d7:2b:d0:8c:82:1b:73:99:cd:a1:8e:d1:
1a:72:c5:35:43:e4:68:57:e1:44:5d:75:15:49:26:cd:c0:fa:
ca:17:be:cf:ac:89:65:72:a1:38:81:07:65:16:96:46:7d:21:
99:ec:79:f3:b9:34:7e:48:c2:71:d3:d7:e3:b5:03:8b:1f:56:
83:9f:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:25:38 2026 by rpki-client