Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219409.roa
File: AS219409.roa (raw, json)
Hash identifier: DiTrhqfI6ly1iPQOwJ8oLIXnPiHLPF52tHOirtHk/Rw=
Subject key identifier: 8B:43:7B:FC:F5:AA:A9:94:32:B9:A9:BF:BC:8E:DE:97:75:EB:C3:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 38DB5AC69478B01150440576350E0796677BAA7E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219409.roa
Signing time: Sun 19 Jul 2026 11:44:26 +0000
ROA not before: Sun 19 Jul 2026 11:39:26 +0000
ROA not after: Sun 18 Jul 2027 11:44:26 +0000
asID: 219409
IP address blocks: 162.141.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:db:5a:c6:94:78:b0:11:50:44:05:76:35:0e:07:96:67:7b:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 11:39:26 2026 GMT
Not After : Jul 18 11:44:26 2027 GMT
Subject: CN=8B437BFCF5AAA99432B9A9BFBC8EDE9775EBC3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:a2:f3:77:9b:0d:d3:8c:21:ac:75:99:aa:
2d:d9:50:c0:44:b2:e4:c2:3c:89:6e:18:75:45:3b:
60:57:31:34:ff:54:f0:0b:3f:35:dd:82:f8:99:62:
e1:30:91:3a:bb:fe:70:c9:7c:8c:5a:a2:e2:b5:05:
9c:c4:9f:78:5d:e9:56:1c:77:40:9e:69:0a:e2:a3:
e9:96:7e:09:d4:d7:1c:c3:a0:4e:24:be:7a:34:72:
a7:88:23:2c:76:45:3a:b0:e5:f9:99:3f:c4:80:47:
67:51:e7:26:25:48:55:54:39:73:49:29:02:ee:a8:
df:82:03:67:b5:80:45:02:b4:56:4b:d9:fc:ab:29:
ed:c5:0d:1d:9e:90:16:3d:e9:85:e9:f1:0b:ac:53:
c0:bc:6f:46:95:6c:d3:4f:8f:c8:b6:4c:92:03:35:
ce:b3:e6:82:f9:04:3b:46:d9:0e:c4:f2:5b:69:ae:
ca:f1:c1:e6:f5:69:5d:60:0b:4c:ca:3b:3e:49:da:
cb:0d:fd:0c:31:a4:a8:ea:85:b7:7b:56:75:5c:0f:
67:fa:ec:20:ab:b7:af:dd:e3:91:c9:e2:60:be:7e:
4b:8a:06:5b:83:24:f9:7e:69:81:11:a1:1e:49:af:
23:17:12:2c:bc:ca:80:6d:25:5d:ff:f8:52:25:c7:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:7B:FC:F5:AA:A9:94:32:B9:A9:BF:BC:8E:DE:97:75:EB:C3:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c8:24:90:a8:c4:87:07:f9:6f:da:3d:23:45:25:5c:a1:29:
09:b4:4f:7c:68:6c:a7:83:cb:52:13:bd:87:cd:ee:f0:6a:ce:
ff:94:83:83:17:fe:05:04:b9:fa:5d:71:a6:6d:f0:71:88:58:
d5:8c:ce:49:21:e1:53:7b:ec:13:6e:4e:eb:f8:6a:15:34:75:
e4:f3:52:8d:d4:0f:15:8e:34:70:9b:8b:4c:30:f1:33:8c:cf:
2f:5f:7a:30:00:bc:04:3f:4f:89:f8:18:e1:3c:ca:4c:cc:44:
5b:fa:25:c5:16:40:98:2d:fc:6c:2e:b8:a9:bc:0a:51:20:9f:
32:1b:c5:7b:ea:9d:e7:ee:2c:33:21:1c:65:b1:58:04:6c:5c:
60:5d:3b:77:64:10:da:1e:8d:a7:bb:a9:9f:a4:f9:7b:ba:9b:
33:92:7e:af:57:3d:c5:44:78:b0:6f:f6:e5:26:7d:ce:da:35:
c9:79:70:91:8f:88:9c:13:ba:e7:bc:cd:98:75:22:37:f1:f7:
00:04:ba:c3:7e:0c:a5:03:82:3e:e8:21:50:c6:32:9f:e5:18:
15:5f:c0:fd:70:1d:ac:a5:95:70:9d:33:75:ef:09:eb:37:c4:
89:96:4d:ac:ca:30:a6:ec:da:11:b4:80:21:ca:05:cb:b7:5b:
ce:7c:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:41 2026 by rpki-client