Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219343.roa
File: AS219343.roa (raw, json)
Hash identifier: sNnXW0FObcYii2gZ93m2nI4L05uaYf23JU0Zdlp2UVI=
Subject key identifier: 68:65:E5:FA:34:D5:8B:03:F0:27:5E:96:B1:68:05:F0:9C:97:CA:84
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 23B63D39D353BF05FADA1D69984FE14D21803DC9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219343.roa
Signing time: Fri 06 Nov 2026 20:22:49 +0000
ROA not before: Fri 06 Nov 2026 20:17:49 +0000
ROA not after: Fri 05 Nov 2027 20:22:49 +0000
asID: 219343
IP address blocks: 168.222.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b6:3d:39:d3:53:bf:05:fa:da:1d:69:98:4f:e1:4d:21:80:3d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 6 20:17:49 2026 GMT
Not After : Nov 5 20:22:49 2027 GMT
Subject: CN=6865E5FA34D58B03F0275E96B16805F09C97CA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:41:70:35:c6:dc:af:31:a2:ed:07:8f:7c:
c1:59:50:1f:2b:8d:94:6b:ef:de:3c:55:3e:15:f0:
a8:89:02:fa:78:5a:8f:de:c8:00:73:ac:04:50:40:
9f:8d:e6:06:28:68:a6:51:f3:aa:07:9a:0d:fd:36:
bb:52:6b:34:e5:85:96:eb:d7:c1:03:4e:02:43:e1:
cd:ed:ec:7c:d3:69:a3:33:52:30:ec:b1:dc:63:14:
64:80:83:4a:a8:34:c2:9b:01:33:86:72:4c:58:aa:
4c:5b:5b:fe:3f:77:21:27:78:7c:b4:09:59:82:8e:
24:27:a9:5a:e7:b1:1a:30:b8:ff:46:fa:25:5b:db:
a4:7b:1b:e8:b0:9d:2e:d4:c4:8c:a1:62:26:97:e0:
c4:b9:ac:f8:19:a4:d7:9b:6a:7f:47:19:b3:17:02:
21:7f:0c:a4:61:06:c0:c0:0a:11:5c:a7:77:fe:64:
11:dc:93:17:a1:27:3c:b3:73:93:83:ff:45:dc:4d:
fe:0f:cd:a0:56:b5:56:a4:47:eb:0a:0d:d0:3d:da:
9d:5b:80:40:72:7e:42:dd:2f:15:86:d6:53:f4:80:
79:a5:d8:15:a2:c0:bb:48:b0:2e:57:f1:43:f5:b3:
1a:f3:33:68:a3:b9:6a:a6:d6:1b:3d:68:f4:16:89:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:E5:FA:34:D5:8B:03:F0:27:5E:96:B1:68:05:F0:9C:97:CA:84
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.41.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a0:8e:ac:87:70:26:c1:d2:75:0e:44:15:e7:c7:eb:91:ef:
d3:32:fd:fb:e0:3e:e8:af:ea:7a:b7:b4:29:29:47:63:6e:0d:
85:ed:cd:2c:aa:ff:ec:c1:e4:f2:b6:a1:47:a0:76:b2:ad:19:
95:b9:44:10:c7:fc:4b:92:ec:2d:64:02:bf:c0:f6:c2:ab:15:
a4:ad:23:22:bc:41:a3:48:c4:58:92:30:d1:56:e4:54:b7:ba:
cc:82:19:78:24:f3:23:09:32:8e:09:a8:bb:25:e6:23:eb:93:
6c:ea:95:fa:87:25:ca:90:5a:52:88:e4:68:12:bf:12:b3:36:
90:0d:40:71:63:8c:98:1a:bd:8f:e4:8f:9b:3a:5b:3c:2f:cf:
46:ec:76:72:8f:83:76:7c:43:3d:9e:c4:5d:eb:ce:6b:6f:10:
38:58:71:38:07:91:9a:e5:f1:a4:c2:a4:a1:a0:29:4f:34:50:
53:b8:20:4a:89:ea:54:8a:dd:37:57:00:19:38:01:d3:3e:61:
1a:74:9d:97:e6:c6:37:7f:55:6a:b0:5b:ce:94:a7:aa:7a:91:
41:7f:ee:e6:6c:22:db:d6:cf:fe:da:f3:0f:f4:08:5a:70:c4:
47:01:4a:b0:a1:f1:4d:92:7d:81:91:40:d7:a1:a0:4f:0c:6f:
89:5a:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:58:47 2026 by rpki-client