Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: tyCKTelT6Iz7Zpt9EguKDAJoqTDZUK4isnCyVL5QDJ0=
Subject key identifier: 0B:2B:8B:9E:32:66:AA:44:2F:59:A6:75:25:8C:3F:B7:AD:49:FA:40
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7B38093A8C7D2E4190F36CEAEDDE44302DA4A6A4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
Signing time: Wed 23 Sep 2026 11:18:57 +0000
ROA not before: Wed 23 Sep 2026 11:13:57 +0000
ROA not after: Wed 22 Sep 2027 11:18:57 +0000
asID: 219427
IP address blocks: 66.132.157.0/24 maxlen: 24
66.132.238.0/24 maxlen: 24
66.155.65.0/24 maxlen: 24
66.234.12.0/24 maxlen: 24
66.234.13.0/24 maxlen: 24
69.90.33.0/24 maxlen: 24
146.103.22.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
155.117.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:38:09:3a:8c:7d:2e:41:90:f3:6c:ea:ed:de:44:30:2d:a4:a6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 23 11:13:57 2026 GMT
Not After : Sep 22 11:18:57 2027 GMT
Subject: CN=0B2B8B9E3266AA442F59A675258C3FB7AD49FA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:ce:6d:c4:7c:36:c5:c5:ff:85:4a:d1:10:
cd:2e:bf:bd:5a:c1:92:ee:aa:ed:3b:54:b3:b9:79:
b0:bb:74:44:e5:87:9b:b2:54:ab:1b:f2:e7:b2:b3:
42:87:ae:88:71:ef:3e:65:bc:18:c8:9a:76:7f:c2:
77:8a:98:98:cf:0a:6d:05:84:15:57:54:94:60:df:
29:67:a6:38:d8:19:fa:e6:5b:44:53:25:16:69:4f:
63:72:be:b1:73:21:e4:a5:6e:27:ff:fd:65:70:51:
ae:8c:b9:78:6b:d5:20:c6:b4:94:b2:0f:8e:56:f2:
18:a7:81:bd:ef:08:81:ae:49:88:aa:24:83:8a:0c:
68:69:f1:80:45:8f:02:ae:a7:a8:68:e4:5e:c6:be:
d5:17:36:76:fa:4e:67:b2:43:9f:b8:32:15:91:cb:
cf:6d:c1:11:56:1c:ff:2c:ad:38:c5:78:e3:62:a8:
f7:57:83:29:e4:7d:58:6d:14:94:73:4a:2e:26:82:
67:b6:d8:03:85:aa:a7:63:7d:87:82:ed:26:59:15:
1d:b2:b1:51:2d:62:c1:ea:76:87:7d:5a:e8:3d:fc:
c5:91:e4:a7:38:3d:5b:7d:1d:1d:f7:cc:16:3a:fb:
57:ab:c4:61:32:60:f6:0b:10:e9:1d:6e:99:44:c2:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:8B:9E:32:66:AA:44:2F:59:A6:75:25:8C:3F:B7:AD:49:FA:40
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.157.0/24
66.132.238.0/24
66.155.65.0/24
66.234.12.0/23
69.90.33.0/24
146.103.22.0/24
155.117.102.0/24
155.117.171.0/24
Signature Algorithm: sha256WithRSAEncryption
35:14:d4:da:be:fb:82:9a:b6:40:5a:4c:4e:e7:eb:a5:21:f8:
ec:ca:da:d3:94:fd:3f:16:6c:bc:c8:6e:74:d0:0a:93:f3:06:
21:ea:dc:0e:83:57:68:1f:2b:f5:93:71:da:f4:46:c5:44:e3:
49:c9:74:f5:5e:77:08:77:c6:4f:ce:58:e3:7e:ca:11:b8:b5:
07:90:d1:95:4e:1a:5c:12:c8:f8:72:44:e4:37:67:0e:34:d6:
41:e6:1b:21:fd:8a:e4:03:66:99:b3:40:82:d6:89:59:bc:79:
62:90:51:f0:5e:97:e6:db:fc:d3:e1:12:ea:e8:7a:6c:d5:01:
06:20:93:84:e2:8a:88:04:25:25:5f:15:37:59:f9:5f:12:44:
a1:5f:df:f4:40:2e:ba:4d:02:2b:26:46:92:86:b2:61:46:e3:
5b:8f:12:0f:f3:45:bc:a0:c6:e7:f8:04:2a:f3:8a:9e:0a:c1:
32:d3:91:73:cb:89:44:85:d0:22:8e:c1:50:c9:41:dd:a8:d0:
d5:c7:c3:84:c8:51:d3:16:f9:60:ba:d8:90:56:a4:c6:fd:2d:
1a:da:ca:34:7e:e0:9a:b8:72:1b:09:b5:4f:c1:12:79:7b:86:
c2:af:67:f3:e3:bb:24:20:62:88:d7:93:e0:19:c7:13:3d:84:
c5:67:2c:e3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUezgJOox9LkGQ82zq7d5EMC2kpqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjMxMTEzNTdaFw0yNzA5MjIxMTE4NTdaMDMxMTAvBgNV
BAMTKDBCMkI4QjlFMzI2NkFBNDQyRjU5QTY3NTI1OEMzRkI3QUQ0OUZBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphc5txHw2xcX/hUrREM0uv71a
wZLuqu07VLO5ebC7dETlh5uyVKsb8ueys0KHrohx7z5lvBjImnZ/wneKmJjPCm0F
hBVXVJRg3ylnpjjYGfrmW0RTJRZpT2NyvrFzIeSlbif//WVwUa6MuXhr1SDGtJSy
D45W8hingb3vCIGuSYiqJIOKDGhp8YBFjwKup6ho5F7GvtUXNnb6TmeyQ5+4MhWR
y89twRFWHP8srTjFeONiqPdXgynkfVhtFJRzSi4mgme22AOFqqdjfYeC7SZZFR2y
sVEtYsHqdod9Wug9/MWR5Kc4PVt9HR33zBY6+1erxGEyYPYLEOkdbplEwkG/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCyuLnjJmqkQvWaZ1JYw/t61J+kAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE5NDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAQoSd
AwQAQoTuAwQAQptBAwQBQuoMAwQARVohAwQAkmcWAwQAm3VmAwQAm3WrMA0GCSqG
SIb3DQEBCwUAA4IBAQA1FNTavvuCmrZAWkxO5+ulIfjsytrTlP0/Fmy8yG500AqT
8wYh6twOg1doHyv1k3Ha9EbFRONJyXT1XncId8ZPzljjfsoRuLUHkNGVThpcEsj4
ckTkN2cONNZB5hsh/YrkA2aZs0CC1olZvHlikFHwXpfm2/zT4RLq6Hps1QEGIJOE
4oqIBCUlXxU3WflfEkShX9/0QC66TQIrJkaShrJhRuNbjxIP80W8oMbn+AQq84qe
CsEy05Fzy4lEhdAijsFQyUHdqNDVx8OEyFHTFvlgutiQVqTG/S0a2so0fuCauHIb
CbVPwRJ5e4bCr2fz47skIGKI15PgGccTPYTFZyzj
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:55 2026 by rpki-client