Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219476.roa
File: AS219476.roa (raw, json)
Hash identifier: pOlwedcJ7YTv2BPthl6U/0bT1yCqGmhIK47Kz/rAqwo=
Subject key identifier: C7:F0:C5:34:0A:DD:30:B9:77:A8:84:77:17:F7:4F:18:7B:92:B8:11
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 043797C9BD784B3982201DF508AC99D08BD1FF04
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219476.roa
Signing time: Mon 06 Jul 2026 15:45:47 +0000
ROA not before: Mon 06 Jul 2026 15:40:47 +0000
ROA not after: Mon 05 Jul 2027 15:45:47 +0000
asID: 219476
IP address blocks: 51.146.94.0/24 maxlen: 24
188.220.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:37:97:c9:bd:78:4b:39:82:20:1d:f5:08:ac:99:d0:8b:d1:ff:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 6 15:40:47 2026 GMT
Not After : Jul 5 15:45:47 2027 GMT
Subject: CN=C7F0C5340ADD30B977A8847717F74F187B92B811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:36:df:c6:42:21:90:ca:c0:ae:e2:76:a1:
87:ea:b3:00:02:55:bb:df:21:76:0a:b1:71:34:e6:
6e:9b:c9:bb:b3:f4:55:29:2e:5d:4b:60:ee:74:83:
ac:cf:64:50:97:40:1e:52:25:28:9b:a5:8c:4a:31:
ed:ae:24:ac:39:a9:a1:6f:97:31:6e:62:a8:5f:7d:
e4:ec:68:e9:25:62:0e:cb:b3:54:76:90:ca:16:cc:
d9:e1:c7:ad:13:3b:48:91:16:ab:4a:d2:db:98:34:
3b:28:58:d6:59:80:4b:07:50:bb:55:f4:5d:b3:0b:
2a:5b:85:7d:1b:cb:b6:48:80:cf:ae:20:b6:51:a4:
ca:e4:47:d5:bf:5e:32:a4:ae:58:ce:ea:12:da:fb:
5f:3c:dd:d1:b8:7b:ae:de:b5:65:30:5d:db:4e:6a:
be:47:e3:47:59:83:1c:b8:88:7e:46:95:ab:e2:17:
f2:4a:86:41:64:63:b8:1c:e8:22:97:03:8e:82:e1:
5d:1f:e7:60:cd:a7:59:04:53:09:12:45:83:57:d0:
77:e9:fa:0e:8d:93:c1:7b:75:57:37:07:9c:d4:00:
a7:d5:2d:9b:e5:08:fb:3a:1b:a2:1e:ec:a0:87:d5:
6f:58:24:be:ce:33:40:7c:e9:31:6e:bf:20:81:1f:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:C5:34:0A:DD:30:B9:77:A8:84:77:17:F7:4F:18:7B:92:B8:11
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS219476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.94.0/24
188.220.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:38:8f:90:e9:7b:ff:81:6f:73:49:83:40:32:d2:75:a9:
02:ea:08:8b:d8:ba:29:55:84:58:31:64:ff:c4:04:9f:03:a7:
b5:cd:c0:6c:90:7d:61:59:75:a2:44:13:a8:b4:48:00:00:a1:
f0:ab:b9:54:a9:94:c1:75:be:75:52:f1:f5:5e:3e:19:7f:5f:
29:46:3a:a5:ba:13:92:3d:47:2a:41:ae:d3:79:c3:db:5d:49:
fa:bb:3f:95:a7:83:3a:b4:67:f9:f8:b9:86:36:de:29:f3:cf:
fd:01:84:f7:bf:ec:84:62:57:51:5f:f1:ac:75:34:a7:ef:8a:
fa:eb:33:19:b3:98:e1:c1:c8:b9:76:72:5e:f1:5b:c4:b8:ff:
6c:5f:f5:3f:a6:3d:b6:a1:dd:fe:0b:6f:a5:6d:0f:93:9c:49:
9c:56:12:8e:d7:c1:18:d6:e7:13:71:dd:c2:b4:b6:60:3a:a8:
08:c4:dc:ca:a7:a0:f8:fd:80:ed:20:9c:59:36:f8:08:dd:84:
99:26:83:70:2e:57:5d:0d:a2:4f:68:46:7c:41:cb:32:42:ea:
28:8b:7f:91:03:63:e5:6e:fd:cc:fb:e8:65:eb:98:ea:0e:11:
72:8a:4a:4b:ae:1a:0a:19:6b:c2:bb:fb:13:61:84:a7:ef:91:
3b:73:24:f4
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUBDeXyb14SzmCIB31CKyZ0IvR/wQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MDYxNTQwNDdaFw0yNzA3MDUxNTQ1NDdaMDMxMTAvBgNV
BAMTKEM3RjBDNTM0MEFERDMwQjk3N0E4ODQ3NzE3Rjc0RjE4N0I5MkI4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1AjbfxkIhkMrAruJ2oYfqswAC
VbvfIXYKsXE05m6bybuz9FUpLl1LYO50g6zPZFCXQB5SJSibpYxKMe2uJKw5qaFv
lzFuYqhffeTsaOklYg7Ls1R2kMoWzNnhx60TO0iRFqtK0tuYNDsoWNZZgEsHULtV
9F2zCypbhX0by7ZIgM+uILZRpMrkR9W/XjKkrljO6hLa+1883dG4e67etWUwXdtO
ar5H40dZgxy4iH5GlaviF/JKhkFkY7gc6CKXA46C4V0f52DNp1kEUwkSRYNX0Hfp
+g6Nk8F7dVc3B5zUAKfVLZvlCPs6G6Ie7KCH1W9YJL7OM0B86TFuvyCBH4u5AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUx/DFNArdMLl3qIR3F/dPGHuSuBEwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE5NDc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM5Je
AwQAvNxuMA0GCSqGSIb3DQEBCwUAA4IBAQCHsjiPkOl7/4Fvc0mDQDLSdakC6giL
2LopVYRYMWT/xASfA6e1zcBskH1hWXWiRBOotEgAAKHwq7lUqZTBdb51UvH1Xj4Z
f18pRjqluhOSPUcqQa7TecPbXUn6uz+Vp4M6tGf5+LmGNt4p88/9AYT3v+yEYldR
X/GsdTSn74r66zMZs5jhwci5dnJe8VvEuP9sX/U/pj22od3+C2+lbQ+TnEmcVhKO
18EY1ucTcd3CtLZgOqgIxNzKp6D4/YDtIJxZNvgI3YSZJoNwLlddDaJPaEZ8Qcsy
Quooi3+RA2Plbv3M++hl65jqDhFyikpLrhoKGWvCu/sTYYSn75E7cyT0
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:25 2026 by rpki-client