Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19148.roa
File: AS19148.roa (raw, json)
Hash identifier: 95lfdLeugYFJBcBIIM3klO2AQhEeaBJQyPjK9+E4HtY=
Subject key identifier: AF:1B:DE:F8:CD:8E:E6:CD:FC:6A:60:D1:3B:BB:9A:FD:C8:A7:8D:9E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 166E4E6B368E3DAA4EEE45001C484580A73FB4CA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19148.roa
Signing time: Mon 08 Sep 2025 09:55:00 +0000
ROA not before: Mon 08 Sep 2025 09:50:00 +0000
ROA not after: Mon 07 Sep 2026 09:55:00 +0000
asID: 19148
IP address blocks: 191.101.26.0/24 maxlen: 24
191.101.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6e:4e:6b:36:8e:3d:aa:4e:ee:45:00:1c:48:45:80:a7:3f:b4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 09:50:00 2025 GMT
Not After : Sep 7 09:55:00 2026 GMT
Subject: CN=AF1BDEF8CD8EE6CDFC6A60D13BBB9AFDC8A78D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:ea:03:04:05:dd:18:be:51:58:88:e6:e2:
2a:2d:f9:a2:9d:4a:b3:30:ba:1b:ef:ff:76:18:20:
03:73:fa:e6:08:bb:0c:a7:28:0e:63:d7:59:41:9b:
7c:e1:7b:8b:2d:2c:c6:54:16:2b:71:56:1d:fc:46:
18:cc:e1:77:50:93:99:5c:54:16:41:bc:37:9b:f7:
6c:9a:c8:39:d0:2f:d2:0d:44:0c:11:69:4a:12:b6:
e2:7c:65:f4:86:0b:eb:52:31:83:61:0c:95:52:47:
40:4b:03:04:cd:d3:28:a6:1c:88:fa:e3:ae:75:02:
fa:be:d8:d7:b3:54:7e:1d:c0:21:12:37:a9:09:92:
60:d0:5f:b3:3c:23:00:28:2b:2a:c1:db:20:6a:d4:
70:78:7d:bf:2c:83:2f:56:7d:2b:46:8f:73:17:63:
89:40:4d:7b:e7:d4:cc:9f:ef:bb:c9:80:12:e2:6c:
82:73:7b:5d:fb:da:36:e2:11:27:a4:82:27:e5:fd:
50:c0:89:31:f2:1d:15:4f:b3:a6:2a:63:52:ea:56:
46:1b:a6:39:34:e5:62:10:58:52:5f:8f:b9:6c:8f:
68:b6:63:b6:b3:23:5f:3b:ba:25:c9:9b:68:55:85:
30:e7:5e:99:63:e8:7c:ab:ed:fd:ab:5a:ec:1e:dc:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:DE:F8:CD:8E:E6:CD:FC:6A:60:D1:3B:BB:9A:FD:C8:A7:8D:9E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.26.0/24
191.101.174.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a2:18:76:2b:ee:2a:c6:19:42:21:8e:f1:b9:a2:13:79:15:
f9:09:03:65:c3:1f:ab:da:54:94:9f:fe:96:9c:14:a0:90:1d:
1f:b4:c8:fa:58:62:6a:7e:14:3d:d5:91:33:cf:18:10:f3:15:
dd:a1:1a:83:a5:e0:d9:60:67:87:ae:97:44:4e:18:73:7a:f9:
a5:82:57:b6:c1:02:35:7b:73:db:34:4e:09:c0:69:68:8c:93:
68:51:c9:6a:0a:6c:11:b4:88:8e:f7:f9:83:fc:13:5a:40:61:
d0:52:dc:59:df:a7:4e:b7:e2:c0:67:5d:df:8b:a2:bf:cd:c8:
eb:45:5c:2e:32:ac:3d:ff:3d:b8:d3:23:ad:41:c0:19:e2:19:
3e:e2:88:d2:d4:af:dc:24:51:7b:ab:d7:9d:02:2e:79:bd:bc:
80:79:61:34:c9:0a:6d:57:2c:81:d8:11:de:ed:05:13:cf:6a:
9f:95:46:34:3b:f1:a5:72:d1:e2:fa:34:2f:bf:23:eb:40:27:
41:90:1b:d9:83:9c:6a:e7:03:e2:82:a6:80:b4:8d:72:34:19:
92:a0:87:b2:a8:e4:59:dd:d4:10:4c:1b:ab:c7:bd:d9:f6:74:
ed:36:c1:85:06:12:71:0a:53:91:42:fa:e0:4d:70:57:11:3b:
35:7c:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:40 2025 by rpki-client