Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: uhdRWwlfBkOggy9ieEdx7aVe808mRYyhfBxvUewfJ9c=
Subject key identifier: 48:70:10:7A:34:91:27:79:AE:70:D4:F5:14:FC:A3:BF:36:98:A6:73
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 191BAD8818C5F13F3B2C590BCE78B4C3777E17FC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
Signing time: Mon 21 Sep 2026 16:40:12 +0000
ROA not before: Mon 21 Sep 2026 16:35:12 +0000
ROA not after: Mon 20 Sep 2027 16:40:12 +0000
asID: 219427
IP address blocks: 51.146.244.0/24 maxlen: 24
78.105.143.0/24 maxlen: 24
78.105.145.0/24 maxlen: 24
78.105.147.0/24 maxlen: 24
78.105.157.0/24 maxlen: 24
78.105.161.0/24 maxlen: 24
78.105.163.0/24 maxlen: 24
78.105.170.0/24 maxlen: 24
78.105.174.0/24 maxlen: 24
78.105.176.0/24 maxlen: 24
78.105.187.0/24 maxlen: 24
188.220.64.0/24 maxlen: 24
188.220.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1b:ad:88:18:c5:f1:3f:3b:2c:59:0b:ce:78:b4:c3:77:7e:17:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 16:35:12 2026 GMT
Not After : Sep 20 16:40:12 2027 GMT
Subject: CN=4870107A34912779AE70D4F514FCA3BF3698A673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:2c:77:7e:b3:44:f2:23:c9:48:a4:b8:33:
ee:a1:7b:a1:95:c6:1d:47:31:2b:53:37:e7:de:99:
b4:49:3f:ce:d6:ed:db:ce:77:7d:a1:ec:41:af:75:
a1:da:68:d2:6c:37:8a:e7:15:66:cd:80:2a:19:81:
78:af:0c:f4:f3:43:a5:9b:5b:06:0e:f6:9f:b1:32:
d3:2d:51:73:ab:8b:e7:f2:74:c0:ab:93:2e:da:d3:
22:3f:a9:c6:39:c0:cd:24:5b:fd:30:49:c0:32:18:
e3:cf:ac:5e:4c:d8:ca:e7:63:22:6d:79:fc:1b:93:
79:0f:9b:95:53:51:6c:fc:db:b0:3c:db:fc:25:e5:
94:53:e9:d1:a4:0e:b3:95:67:ad:ef:54:64:19:17:
11:5a:9b:7d:cb:13:c2:58:ad:1f:62:cf:c0:07:fc:
39:99:d1:91:cf:14:97:1f:14:58:0d:43:da:df:99:
a7:da:54:f3:29:c4:1f:0a:f3:64:01:53:3c:f5:73:
a0:90:f5:93:6e:ad:f8:66:99:51:2b:66:cc:7f:1c:
74:d8:3c:81:b9:d1:1b:79:22:9f:c9:03:ad:60:82:
7a:c1:bb:69:d7:e1:cf:5e:60:34:1a:16:62:6f:2b:
db:34:9a:fd:ba:c4:0a:a0:9f:f1:ec:67:bb:cc:4f:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:10:7A:34:91:27:79:AE:70:D4:F5:14:FC:A3:BF:36:98:A6:73
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.244.0/24
78.105.143.0/24
78.105.145.0/24
78.105.147.0/24
78.105.157.0/24
78.105.161.0/24
78.105.163.0/24
78.105.170.0/24
78.105.174.0/24
78.105.176.0/24
78.105.187.0/24
188.220.64.0/24
188.220.147.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a6:97:a7:ad:08:97:a8:45:90:ab:c9:d0:06:02:ed:36:8c:
33:06:07:de:40:7d:1e:82:bf:3b:42:06:7e:07:18:57:a5:5e:
cf:d7:d4:79:3d:f2:e4:3d:d9:c2:94:f8:d9:6e:4c:5f:6a:fd:
8f:45:ad:a5:9d:ff:31:13:29:b4:0c:67:22:3e:f7:de:bb:cd:
01:43:70:7c:ae:79:8f:c6:78:d4:2b:d3:15:6a:b8:11:f3:75:
61:30:7c:95:8b:c5:3e:b1:14:1c:f8:e1:26:4d:9b:fe:dc:7b:
99:2d:c6:a7:a9:57:b2:66:e8:bc:42:45:fb:17:2d:c8:48:3f:
43:f4:31:17:68:15:08:6f:86:c0:8d:49:c1:aa:1b:41:2e:db:
d9:b0:c7:6a:46:e2:68:00:a7:6a:61:0c:31:b2:fb:ab:9a:10:
7d:93:79:49:dd:67:1f:3a:88:64:1b:ce:7f:3c:a8:36:b4:5f:
d7:25:75:df:c6:92:77:9b:ec:8c:34:1d:2c:68:e8:7d:91:03:
9e:3d:39:19:1e:04:41:dd:0c:f7:88:8f:3f:5e:9f:7b:6b:99:
a3:83:00:7e:67:73:ab:26:59:19:30:c6:91:e8:60:34:0d:5a:
63:a2:c5:1f:8c:ab:0b:09:56:69:d4:b6:bb:9e:15:70:6d:0f:
2c:27:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:34:27 2026 by rpki-client