Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS219317.roa
File: AS219317.roa (raw, json)
Hash identifier: FR6EJlm/xtsBWOHAP1oYak2M8E5bl97wysfY7imR7tE=
Subject key identifier: 04:02:68:B6:CF:42:33:D0:7B:0F:B7:66:AE:F4:C0:97:8A:E7:19:B8
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 4D68D5C80D17FABEA31A43BFB1120971E0A8EE8A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS219317.roa
Signing time: Tue 30 Jun 2026 10:00:51 +0000
ROA not before: Tue 30 Jun 2026 09:55:51 +0000
ROA not after: Tue 29 Jun 2027 10:00:51 +0000
asID: 219317
IP address blocks: 212.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:68:d5:c8:0d:17:fa:be:a3:1a:43:bf:b1:12:09:71:e0:a8:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 30 09:55:51 2026 GMT
Not After : Jun 29 10:00:51 2027 GMT
Subject: CN=040268B6CF4233D07B0FB766AEF4C0978AE719B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:2a:91:86:7b:ba:62:a2:4a:fb:ee:04:80:
fe:ce:04:d6:e6:79:9c:bf:05:d5:cc:50:8d:bd:b4:
ea:59:bc:06:e4:3c:4f:86:60:a2:bc:a5:3f:e2:72:
ec:c4:b2:8b:69:57:b8:f8:a5:48:d1:f8:f7:3e:08:
1f:ad:a9:b7:d3:82:7f:7e:79:63:81:0f:9d:5e:b0:
c7:94:7e:3d:ef:81:c9:de:d1:05:c9:2a:01:3e:94:
d9:8a:fa:52:de:c8:3f:28:e4:66:fb:84:25:64:73:
89:df:fc:1a:1c:8f:18:3e:cc:ae:92:54:94:80:86:
7d:67:db:f0:ca:de:74:69:c2:af:16:25:93:fd:11:
56:a0:aa:63:53:37:09:f8:5a:3f:9d:13:e2:ff:5a:
a2:7b:48:e1:8c:ba:dd:74:55:18:cb:1f:37:93:b1:
cb:01:02:21:54:fe:68:f8:8b:78:22:8a:c4:2a:c2:
0c:e7:b5:fb:4d:9e:34:8d:e6:ef:7c:6a:87:ac:10:
fd:14:3c:14:51:5a:e9:50:fa:b5:b7:70:74:9e:42:
73:9d:44:82:c3:bd:52:a8:9e:5e:85:8d:14:f6:ad:
91:fc:b4:42:0f:87:c1:f0:41:4f:84:9e:77:7e:8a:
db:5c:74:99:8e:0d:c4:a4:5b:db:77:eb:c1:96:c0:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:68:B6:CF:42:33:D0:7B:0F:B7:66:AE:F4:C0:97:8A:E7:19:B8
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS219317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:56:71:83:af:47:53:b9:27:97:eb:f6:cc:c3:2f:79:0d:24:
66:c5:c3:01:35:0c:6e:3b:86:78:74:4e:f7:6a:aa:2f:d0:e4:
29:ee:34:8e:e0:3d:dd:91:cb:64:14:ee:ad:f6:6d:08:51:60:
d1:6d:79:36:d7:b8:e0:4f:ac:67:56:58:83:98:1a:08:95:9c:
91:30:82:08:02:86:b1:d0:87:ba:69:cf:0e:1a:78:cc:73:95:
b0:14:a6:6a:46:4a:4d:63:e6:ab:03:7e:19:93:f9:d2:ed:85:
7c:f9:eb:65:85:d2:85:fa:fd:d9:8b:45:53:74:bc:00:2c:1a:
72:84:91:5e:f8:5c:ed:4c:3b:8c:0f:8b:6e:9c:42:20:fb:59:
ad:5e:d1:f4:c8:ad:95:0f:75:85:4e:75:67:4b:f4:4f:4e:94:
9c:a3:d1:80:f8:cf:e4:af:c1:76:e9:fa:aa:13:b2:1f:48:1e:
43:a4:fc:08:97:93:14:90:25:32:0f:81:84:7f:18:3d:1f:2e:
1e:60:3f:06:03:c7:5e:76:c7:a6:b3:20:09:8b:83:68:d2:71:
7a:61:bc:e3:7c:35:4e:2d:74:ed:f7:4c:9b:74:3c:f1:fe:c7:
44:6c:c3:1c:bd:1c:06:6e:a6:04:40:be:8c:5b:3f:d0:dd:79:
84:94:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:25 2026 by rpki-client