Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: UlYt3yTz+abDoS9KdfsMcRIvvJjuBK0ejIjPAIcdKbs=
Subject key identifier: 75:47:61:88:62:E8:2E:D2:07:D5:6D:9B:24:42:9D:44:85:38:19:BE
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 1B2773481EE30768DCBDBA3A9444A15177011401
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219427.roa
Signing time: Thu 24 Sep 2026 01:30:05 +0000
ROA not before: Thu 24 Sep 2026 01:25:05 +0000
ROA not after: Thu 23 Sep 2027 01:30:05 +0000
asID: 219427
IP address blocks: 46.236.192.0/24 maxlen: 24
46.236.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:27:73:48:1e:e3:07:68:dc:bd:ba:3a:94:44:a1:51:77:01:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 24 01:25:05 2026 GMT
Not After : Sep 23 01:30:05 2027 GMT
Subject: CN=7547618862E82ED207D56D9B24429D44853819BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:42:9e:c8:2e:67:a5:f3:d6:9a:69:fa:d7:
de:9f:b6:4e:d6:10:ae:b0:55:ba:2e:83:67:b2:69:
c6:e2:10:74:1a:33:38:bf:d0:dd:e6:75:20:97:e4:
48:fd:71:5b:52:13:61:a3:50:60:e3:10:81:27:7f:
4a:1e:f9:2c:f0:c9:cf:7e:59:08:8b:bc:f4:80:e5:
a5:51:9e:ab:5d:21:c3:b3:e6:ed:80:bc:a3:b0:63:
46:33:00:a7:9b:7e:76:09:05:9a:76:e5:af:bf:be:
9b:f0:82:85:44:5b:16:f1:62:bf:78:82:0c:ed:72:
ab:a7:9b:d9:24:4a:e2:15:d2:28:3d:bc:cb:a1:13:
43:e2:60:b9:54:34:cf:61:c5:75:f4:01:62:43:64:
d3:cd:9c:fe:4a:05:ef:b7:1d:94:bd:12:d9:ba:fa:
45:f4:28:8f:8d:0d:3a:9d:46:04:30:92:4d:c8:24:
f3:36:a9:e0:dd:01:ef:18:91:49:5e:26:db:b9:0d:
9c:07:0b:72:1b:a8:a3:d6:6b:4e:da:57:12:b7:22:
12:a5:81:0b:ef:3f:cf:4c:28:12:8c:0f:a0:20:e6:
8e:5f:03:44:0e:82:42:25:7e:97:07:81:2b:1f:9a:
08:64:70:cd:e1:5a:0d:fe:5d:53:23:6f:82:d6:f8:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:61:88:62:E8:2E:D2:07:D5:6D:9B:24:42:9D:44:85:38:19:BE
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/24
46.236.197.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cc:e8:bb:0e:98:e7:f8:f8:62:ec:e2:d3:98:21:19:f0:47:
d0:42:78:d6:64:7d:aa:54:1b:70:96:55:19:fa:8b:a2:ad:cf:
10:d7:ce:24:28:76:88:b4:c0:e4:05:32:e9:b9:d1:f4:02:bc:
7b:75:e1:75:fa:4a:bc:ad:32:b6:1e:ed:2a:64:5f:ae:fa:28:
a5:e2:01:d6:a1:c7:b9:46:09:b1:b7:be:0e:2f:4d:8f:45:ba:
51:85:66:39:12:68:53:16:7b:ad:19:d4:d9:97:8a:7d:77:08:
18:ca:52:68:fb:79:90:4e:58:76:9d:41:87:73:68:bb:23:f0:
46:ef:4c:96:c7:b8:19:06:72:dd:81:bb:2f:a3:4f:05:1f:54:
32:d1:29:5d:49:a5:3e:63:6d:40:2b:0e:bd:aa:11:d0:88:d7:
1b:58:e2:1a:ef:0a:c5:c6:08:73:8e:5e:b1:15:a9:a2:31:5d:
73:36:ab:9d:8b:d8:f0:b1:34:6c:27:75:57:eb:09:08:ae:38:
0b:a5:d6:aa:30:b8:88:59:4c:c7:6e:61:f7:5f:3f:c0:c7:e5:
b4:d8:4c:ce:fb:81:f8:6d:f0:cb:27:7b:bb:a2:7b:ef:3e:5e:
24:74:f5:16:12:20:25:ef:6e:bd:2a:ae:e6:3a:32:4c:4e:39:
8e:71:4a:13
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUGydzSB7jB2jcvbo6lEShUXcBFAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MjQwMTI1MDVaFw0yNzA5MjMwMTMwMDVaMDMxMTAvBgNV
BAMTKDc1NDc2MTg4NjJFODJFRDIwN0Q1NkQ5QjI0NDI5RDQ0ODUzODE5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BUKeyC5npfPWmmn6196ftk7W
EK6wVboug2eyacbiEHQaMzi/0N3mdSCX5Ej9cVtSE2GjUGDjEIEnf0oe+Szwyc9+
WQiLvPSA5aVRnqtdIcOz5u2AvKOwY0YzAKebfnYJBZp25a+/vpvwgoVEWxbxYr94
ggztcqunm9kkSuIV0ig9vMuhE0PiYLlUNM9hxXX0AWJDZNPNnP5KBe+3HZS9Etm6
+kX0KI+NDTqdRgQwkk3IJPM2qeDdAe8YkUleJtu5DZwHC3IbqKPWa07aVxK3IhKl
gQvvP89MKBKMD6Ag5o5fA0QOgkIlfpcHgSsfmghkcM3hWg3+XVMjb4LW+HDjAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUdUdhiGLoLtIH1W2bJEKdRIU4Gb4wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjE5NDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuzA
AwQALuzFMA0GCSqGSIb3DQEBCwUAA4IBAQB4zOi7Dpjn+Phi7OLTmCEZ8EfQQnjW
ZH2qVBtwllUZ+ouirc8Q184kKHaItMDkBTLpudH0Arx7deF1+kq8rTK2Hu0qZF+u
+iil4gHWoce5Rgmxt74OL02PRbpRhWY5EmhTFnutGdTZl4p9dwgYylJo+3mQTlh2
nUGHc2i7I/BG70yWx7gZBnLdgbsvo08FH1Qy0SldSaU+Y21AKw69qhHQiNcbWOIa
7wrFxghzjl6xFamiMV1zNqudi9jwsTRsJ3VX6wkIrjgLpdaqMLiIWUzHbmH3Xz/A
x+W02EzO+4H4bfDLJ3u7onvvPl4kdPUWEiAl7269Kq7mOjJMTjmOcUoT
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:07 2026 by rpki-client