Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19437.roa
File: AS19437.roa (raw, json)
Hash identifier: kCyg2FFiZmnA8ys3uPnQCdyf6BhId9UqPDLwXMGaJBA=
Subject key identifier: 9D:9C:A9:53:E9:45:B1:56:AE:04:D2:D4:71:6D:EB:78:54:6B:54:64
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 46B259AC4A40EBD8091DDF1A659CAE29D06DC19C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19437.roa
Signing time: Fri 06 Nov 2026 09:49:40 +0000
ROA not before: Fri 06 Nov 2026 09:44:40 +0000
ROA not after: Fri 05 Nov 2027 09:49:40 +0000
asID: 19437
IP address blocks: 181.215.139.0/24 maxlen: 24
191.96.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b2:59:ac:4a:40:eb:d8:09:1d:df:1a:65:9c:ae:29:d0:6d:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 6 09:44:40 2026 GMT
Not After : Nov 5 09:49:40 2027 GMT
Subject: CN=9D9CA953E945B156AE04D2D4716DEB78546B5464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:d7:f1:d6:7a:3d:fb:51:e6:3a:3f:8c:f3:
7c:5e:ae:bf:f1:d8:bd:54:80:d4:f9:8d:22:83:69:
01:79:c8:70:0c:25:f5:0b:3b:3a:f8:64:ce:0f:30:
11:10:e0:13:27:9f:49:bc:db:5e:5f:01:bb:2a:0a:
bd:d4:1f:9e:0a:79:5b:bd:ba:92:3e:11:01:d4:3c:
c0:5a:ca:2c:b8:6b:f6:e9:53:0f:ec:8a:21:58:c1:
96:db:d1:ef:3a:81:62:b2:9d:f9:f9:0e:82:4b:e3:
e3:64:16:eb:1b:19:e7:67:a0:85:dc:0e:51:31:3f:
37:01:84:6f:e6:0d:62:25:03:2c:9d:e4:b3:bb:20:
a6:43:95:3b:37:a2:73:0f:2e:41:12:8b:96:88:84:
3a:98:71:bd:fd:44:9a:75:2c:d4:f9:9a:3e:11:93:
8a:cb:1d:cf:b0:26:e2:de:06:37:ed:7e:0e:e4:05:
19:4c:ff:d5:b4:33:c1:d0:0d:7c:61:e0:8f:9b:8a:
54:b0:e8:e3:b6:e1:e6:63:21:d3:ed:1f:bd:aa:07:
04:02:46:de:41:3c:5e:37:56:dd:29:fc:73:9a:a7:
e7:6c:3b:6a:4b:91:f9:be:f9:d7:21:a4:e2:92:92:
fd:19:eb:dc:4d:79:65:a5:76:81:09:0f:9f:7b:84:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:A9:53:E9:45:B1:56:AE:04:D2:D4:71:6D:EB:78:54:6B:54:64
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.139.0/24
191.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7f:2a:87:29:81:0c:26:b4:9a:bd:3f:17:ed:fa:af:6e:88:
0e:82:16:1d:6b:ea:c3:0e:fc:89:c2:4d:b1:46:91:4e:b7:e5:
56:e7:ab:02:55:8b:dd:a4:d2:dd:24:5c:0e:80:66:ab:46:9f:
df:8c:4e:35:81:1e:75:b4:49:47:46:8d:f1:a5:82:c2:fc:de:
de:37:a1:02:0e:3c:aa:94:f3:57:1b:db:2c:38:00:4f:42:b2:
d7:f2:02:7f:73:51:2e:79:28:58:f8:2e:46:7d:15:f4:71:07:
5a:fd:8d:64:57:f0:b4:5e:88:9f:01:fd:21:9c:2e:fb:8e:6a:
3f:f3:a2:81:e6:14:b6:9d:9f:ec:7c:09:ae:98:71:c0:d2:bd:
b3:f4:af:3e:15:6c:96:04:fe:69:5c:1f:42:8e:ca:90:92:72:
81:26:b7:94:37:95:d8:2a:83:6c:da:f4:ab:e0:67:06:b5:66:
4f:8c:48:b8:e7:62:5d:ec:a6:ca:43:f6:3a:f5:35:e8:2d:36:
a9:da:c7:4b:e4:8e:d3:7d:b5:d7:7c:fa:25:97:a8:62:c5:23:
42:99:7f:ce:aa:e0:d0:c8:9e:19:bc:e4:35:0d:f9:f9:2f:a7:
67:e2:e0:c8:4b:7c:10:45:2c:23:d8:eb:27:29:5a:2e:29:30:
4f:ae:81:9d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIURrJZrEpA69gJHd8aZZyuKdBtwZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjExMDYwOTQ0NDBaFw0yNzExMDUwOTQ5NDBaMDMxMTAvBgNV
BAMTKDlEOUNBOTUzRTk0NUIxNTZBRTA0RDJENDcxNkRFQjc4NTQ2QjU0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFktfx1no9+1HmOj+M83xerr/x
2L1UgNT5jSKDaQF5yHAMJfULOzr4ZM4PMBEQ4BMnn0m8215fAbsqCr3UH54KeVu9
upI+EQHUPMBayiy4a/bpUw/siiFYwZbb0e86gWKynfn5DoJL4+NkFusbGednoIXc
DlExPzcBhG/mDWIlAyyd5LO7IKZDlTs3onMPLkESi5aIhDqYcb39RJp1LNT5mj4R
k4rLHc+wJuLeBjftfg7kBRlM/9W0M8HQDXxh4I+bilSw6OO24eZjIdPtH72qBwQC
Rt5BPF43Vt0p/HOap+dsO2pLkfm++dchpOKSkv0Z69xNeWWldoEJD597hOFRAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUnZypU+lFsVauBNLUcW3reFRrVGQwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk0Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC114sD
BAC/YCYwDQYJKoZIhvcNAQELBQADggEBAIB/KocpgQwmtJq9Pxft+q9uiA6CFh1r
6sMO/InCTbFGkU635VbnqwJVi92k0t0kXA6AZqtGn9+MTjWBHnW0SUdGjfGlgsL8
3t43oQIOPKqU81cb2yw4AE9CstfyAn9zUS55KFj4LkZ9FfRxB1r9jWRX8LReiJ8B
/SGcLvuOaj/zooHmFLadn+x8Ca6YccDSvbP0rz4VbJYE/mlcH0KOypCScoEmt5Q3
ldgqg2za9KvgZwa1Zk+MSLjnYl3spspD9jr1NegtNqnax0vkjtN9tdd8+iWXqGLF
I0KZf86q4NDInhm85DUN+fkvp2fi4MhLfBBFLCPY6ycpWi4pME+ugZ0=
-----END CERTIFICATE-----
Generated at Thu Nov 12 20:31:30 2026 by rpki-client