Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219200.roa
File: AS219200.roa (raw, json)
Hash identifier: GD9NBPbUO3tbbFu/BRp06SNKSn3LQUa10bG5fP5+dX8=
Subject key identifier: B4:B8:3B:0D:4F:74:ED:00:EF:51:D2:AD:EB:13:8C:63:2E:E9:2B:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 31E84ADCFE269A7B898DE5227695B42C8DC8BEB4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219200.roa
Signing time: Fri 13 Nov 2026 08:55:54 +0000
ROA not before: Fri 13 Nov 2026 08:50:54 +0000
ROA not after: Fri 12 Nov 2027 08:55:54 +0000
asID: 219200
IP address blocks: 167.148.65.0/24 maxlen: 24
167.148.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e8:4a:dc:fe:26:9a:7b:89:8d:e5:22:76:95:b4:2c:8d:c8:be:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 08:50:54 2026 GMT
Not After : Nov 12 08:55:54 2027 GMT
Subject: CN=B4B83B0D4F74ED00EF51D2ADEB138C632EE92B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:aa:32:d5:f4:25:f5:bf:78:10:a6:10:88:
f7:f6:c3:98:80:1d:7c:3a:09:c3:c2:5f:67:5f:5c:
29:6b:8c:ff:7b:39:d1:17:b0:0d:df:f8:08:0e:c3:
80:a0:a1:30:64:85:0c:a3:e0:fd:2d:84:18:f5:8d:
5d:94:d4:55:77:42:52:f6:6e:e6:f4:6a:7a:90:9f:
bd:31:94:f7:65:22:54:fa:0e:dc:c6:2f:f1:50:b3:
90:c8:fb:9f:6b:db:af:a3:6e:6c:70:58:47:fa:bd:
17:3e:11:8b:d1:f7:e2:ac:48:15:75:49:56:b1:5e:
95:71:56:b9:13:9f:df:41:5e:2b:12:1e:f2:42:9f:
ab:1d:5e:24:3a:27:25:46:7e:10:e0:8a:98:7a:9f:
a2:9d:9a:68:3e:99:86:67:85:72:7d:26:08:49:97:
cb:b7:ea:ae:c0:a9:6e:d8:65:19:87:3a:ac:69:75:
9c:f1:55:1d:1b:c8:1c:e0:87:9f:8f:5c:eb:ef:e1:
36:40:c7:77:37:c2:5b:1c:6f:4c:8c:cb:ec:36:df:
b7:d0:00:d0:cc:9e:bc:aa:ee:a2:56:2e:06:58:ee:
91:56:79:2a:15:39:2a:ae:32:0b:9d:da:6d:bd:e3:
74:dd:7a:3d:d3:d2:7f:06:0b:7c:ae:a6:e3:b7:a1:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:3B:0D:4F:74:ED:00:EF:51:D2:AD:EB:13:8C:63:2E:E9:2B:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.65.0/24
167.148.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ae:31:a7:8c:d4:97:83:53:a1:fb:cb:01:c7:93:37:e7:48:
e4:c3:9e:14:56:53:62:d5:2f:36:51:fb:21:89:9f:69:0a:10:
df:b2:3c:c2:bc:5f:65:2a:b2:d1:79:e0:38:de:85:db:4f:6d:
1a:b6:26:6c:b0:fd:ca:74:94:74:e7:65:9e:89:35:05:f7:66:
14:4e:83:83:a4:b2:19:92:93:11:15:56:58:89:f6:cc:92:d7:
c7:9f:fd:78:d1:68:e2:0d:30:1d:1b:c9:cc:3f:fb:d3:8d:d0:
e1:30:df:ce:b5:0f:ea:e9:8a:5a:69:3f:86:79:7f:eb:7a:43:
94:b1:01:cc:b5:85:a1:9c:66:55:7b:7b:83:57:b9:9f:7a:e8:
bb:dc:e7:52:74:97:8f:86:99:60:69:3a:65:39:e4:e5:5f:e6:
83:5c:da:c3:3f:95:82:80:3c:6d:93:e3:45:af:ac:13:bf:d1:
73:92:af:f2:1f:b7:1c:e0:1f:31:bd:01:f7:64:ce:9f:75:9a:
b8:b4:c7:f5:ed:80:02:94:68:57:7a:b0:4c:24:e2:78:7b:16:
a7:e9:b1:08:20:90:e0:6d:8a:8d:d9:18:25:96:d2:d3:2f:c3:
56:a3:b0:39:eb:88:d0:75:ce:75:69:e4:f9:e4:58:a4:a8:80:
3d:d0:04:9a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUMehK3P4mmnuJjeUidpW0LI3IvrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMTMwODUwNTRaFw0yNzExMTIwODU1NTRaMDMxMTAvBgNV
BAMTKEI0QjgzQjBENEY3NEVEMDBFRjUxRDJBREVCMTM4QzYzMkVFOTJCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dKoy1fQl9b94EKYQiPf2w5iA
HXw6CcPCX2dfXClrjP97OdEXsA3f+AgOw4CgoTBkhQyj4P0thBj1jV2U1FV3QlL2
bub0anqQn70xlPdlIlT6DtzGL/FQs5DI+59r26+jbmxwWEf6vRc+EYvR9+KsSBV1
SVaxXpVxVrkTn99BXisSHvJCn6sdXiQ6JyVGfhDgiph6n6Kdmmg+mYZnhXJ9JghJ
l8u36q7AqW7YZRmHOqxpdZzxVR0byBzgh5+PXOvv4TZAx3c3wlscb0yMy+w237fQ
ANDMnryq7qJWLgZY7pFWeSoVOSquMgud2m2943Tdej3T0n8GC3yupuO3oaatAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUtLg7DU907QDvUdKt6xOMYy7pK44wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE5MjAwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp5RB
AwQAp5T+MA0GCSqGSIb3DQEBCwUAA4IBAQBKrjGnjNSXg1Oh+8sBx5M350jkw54U
VlNi1S82UfshiZ9pChDfsjzCvF9lKrLReeA43oXbT20atiZssP3KdJR052WeiTUF
92YUToODpLIZkpMRFVZYifbMktfHn/140WjiDTAdG8nMP/vTjdDhMN/OtQ/q6Ypa
aT+GeX/rekOUsQHMtYWhnGZVe3uDV7mfeui73OdSdJePhplgaTplOeTlX+aDXNrD
P5WCgDxtk+NFr6wTv9Fzkq/yH7cc4B8xvQH3ZM6fdZq4tMf17YAClGhXerBMJOJ4
exan6bEIIJDgbYqN2RglltLTL8NWo7A564jQdc51aeT55FikqIA90ASa
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:37:12 2026 by rpki-client