Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: vXQ4uQZ5pB3s02c2gCibstfjdnk/N+LwPyvlNZQ5Iv0=
Subject key identifier: A4:74:57:3B:0E:80:D0:C1:AB:0D:55:F3:60:00:76:8E:7C:BB:26:DE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1ACC6C05B600922DD7E3A4A08861F1AE810B3EE7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219447.roa
Signing time: Fri 13 Nov 2026 08:55:54 +0000
ROA not before: Fri 13 Nov 2026 08:50:54 +0000
ROA not after: Fri 12 Nov 2027 08:55:54 +0000
asID: 219447
IP address blocks: 167.148.65.0/24 maxlen: 24
167.148.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cc:6c:05:b6:00:92:2d:d7:e3:a4:a0:88:61:f1:ae:81:0b:3e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 08:50:54 2026 GMT
Not After : Nov 12 08:55:54 2027 GMT
Subject: CN=A474573B0E80D0C1AB0D55F36000768E7CBB26DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:73:68:0a:a5:12:90:6b:9c:95:05:95:98:
e1:7d:8e:7e:11:c9:57:a7:9e:e6:66:64:ac:28:ff:
5a:56:65:4e:54:ca:c3:f1:9c:a4:0d:14:87:06:88:
5c:43:fd:16:60:dc:aa:27:75:59:f7:f6:e0:c4:b6:
e4:33:5e:d6:f5:ef:30:ea:17:68:36:35:05:ac:a0:
dd:b2:13:64:2b:2b:fa:a1:39:83:0c:0d:b9:5c:d6:
e0:48:e0:a0:75:02:9a:61:3a:81:77:ec:57:d3:23:
48:92:69:f0:68:31:de:b6:55:d5:49:67:dd:e0:eb:
9e:ab:49:be:06:99:f5:c2:1e:63:5a:d0:6b:dc:b2:
63:52:8e:4c:a7:9d:5d:2a:78:71:79:64:04:b5:f8:
26:59:63:7e:ae:f8:ba:68:58:f6:f4:db:b9:f9:da:
13:b3:a6:69:6a:60:24:4c:9c:29:91:c8:e7:60:5f:
de:42:63:8b:91:a5:24:59:67:69:4e:55:c6:57:4b:
dc:b8:39:21:90:4b:25:49:77:04:e0:0f:e0:52:22:
3d:9d:cb:0c:99:7f:e6:99:34:4f:78:eb:5b:3a:b0:
cb:36:2b:d5:d2:43:e8:f4:86:bc:8d:c5:97:d7:a5:
df:bd:83:3b:eb:a7:6b:c1:10:24:83:f1:6e:cb:d3:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:57:3B:0E:80:D0:C1:AB:0D:55:F3:60:00:76:8E:7C:BB:26:DE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.65.0/24
167.148.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:99:cd:4f:cc:17:c5:00:a8:e7:48:58:66:40:01:63:4e:1c:
50:3a:57:41:fc:98:64:01:39:8e:78:4d:2b:95:5c:06:1a:40:
86:b1:50:d0:46:eb:84:83:1e:0b:66:aa:57:cc:1d:7b:6d:91:
a5:34:ed:96:b9:95:eb:cb:e8:1a:44:04:68:03:03:bb:4b:f3:
e8:aa:57:77:9b:a8:c2:68:ff:1b:87:4b:0d:61:2c:a0:7a:db:
af:57:98:8d:a7:5c:96:0f:c6:c7:43:c3:ac:fc:9f:c3:dd:eb:
33:87:ad:53:70:b8:f3:2a:d0:b1:99:1f:b8:c4:ef:e7:32:ae:
b8:9f:ef:76:69:01:82:43:71:d1:74:2f:5e:b6:ad:1c:5d:7a:
8d:d1:08:a5:6b:82:56:92:7e:f6:2e:89:22:78:8b:85:e3:17:
c5:ee:37:8f:2c:d8:e1:61:0e:7c:27:f3:a7:7f:2d:e9:17:fd:
25:03:16:8e:c6:fb:2e:79:28:81:3d:d4:8b:4d:5c:38:b1:54:
39:b4:9f:0b:15:95:c1:6f:f3:9f:af:05:c2:73:d5:39:03:21:
87:ff:17:4a:5d:73:a5:4c:41:0b:de:2f:2e:13:6a:08:99:12:
9f:50:77:5b:15:0a:14:ad:ec:1e:d6:0f:6b:26:f8:35:f3:e6:
04:37:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:22:23 2026 by rpki-client