Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219284.roa
File: AS219284.roa (raw, json)
Hash identifier: oG+dHiX3EEp3npIym4relXv/dAxCpflqvXu0Li3xoyQ=
Subject key identifier: FE:CC:00:E1:6A:2F:56:D3:56:9E:1D:4D:36:43:B9:85:10:5C:C1:EA
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 1D60EBD6F0FB1EB5223F05774983C295FB162E79
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219284.roa
Signing time: Sat 14 Nov 2026 13:45:11 +0000
ROA not before: Sat 14 Nov 2026 13:40:11 +0000
ROA not after: Sat 13 Nov 2027 13:45:11 +0000
asID: 219284
IP address blocks: 177.166.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:60:eb:d6:f0:fb:1e:b5:22:3f:05:77:49:83:c2:95:fb:16:2e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 13:40:11 2026 GMT
Not After : Nov 13 13:45:11 2027 GMT
Subject: CN=FECC00E16A2F56D3569E1D4D3643B985105CC1EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:3d:d8:90:86:c9:9c:3e:7f:dd:6e:19:cf:
22:e3:e3:da:33:e7:07:3e:56:a9:9c:a1:d2:8b:04:
cc:5c:fd:fe:58:92:86:46:42:88:d7:c0:32:dd:54:
ad:5f:1f:75:67:6e:3e:a3:c0:02:f3:58:09:97:39:
ad:07:7b:9b:b5:20:a2:7d:e8:24:3e:f9:a4:97:20:
4f:97:c4:9d:a8:ce:07:f3:19:fb:87:37:1d:53:10:
03:26:6a:c7:4d:bf:3b:44:cd:5c:bf:7f:f8:bd:d7:
4e:cc:13:d5:a4:f4:57:34:3b:ce:6a:28:24:ff:40:
26:89:56:89:b3:f5:c5:80:8a:82:46:3b:86:54:90:
61:9c:9b:21:ac:1c:1c:41:68:d9:7d:1d:38:ac:b4:
96:26:a9:79:af:3d:d5:8b:27:25:04:a4:fa:ac:ec:
ef:d9:f4:61:89:f0:ee:57:62:8e:5f:85:b0:a1:27:
8f:bb:a5:30:07:46:41:a0:69:fa:1f:f3:3e:fc:7e:
b4:30:f7:f5:c6:44:16:9d:3a:6c:4f:a1:5f:aa:6c:
a8:b4:a8:f0:2f:f1:f2:d6:1c:3e:f1:da:c1:60:b1:
23:c1:e8:51:77:3e:b3:e2:ad:c6:54:37:bd:3b:b7:
64:cf:3c:52:1c:f3:7f:92:de:5c:84:2d:ec:05:50:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CC:00:E1:6A:2F:56:D3:56:9E:1D:4D:36:43:B9:85:10:5C:C1:EA
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219284.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.166.21.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2b:c5:14:a4:00:f7:9a:36:ee:20:e2:c0:59:cb:43:48:ae:
e9:45:ec:34:df:cb:9c:45:de:ad:a2:82:28:80:03:3c:68:17:
34:5a:c8:58:58:bb:37:cb:a2:6f:be:91:59:a5:79:fa:e8:3a:
4e:1b:1a:bd:22:3c:90:3b:eb:87:2b:b6:9a:24:75:34:a5:06:
52:ff:71:63:4d:93:e7:94:10:9f:26:ab:66:35:c7:a7:1a:f0:
6e:45:62:01:1a:aa:7d:15:b2:ea:26:f6:72:b3:b4:c2:bf:ff:
c0:46:f5:cb:69:45:66:38:32:c5:61:63:5b:2c:e0:f6:c7:32:
5a:30:8e:22:32:7a:b7:4e:e9:9a:28:ff:86:a3:e4:a6:ef:2d:
7a:dd:4b:16:b5:e9:c4:f2:a7:b9:f0:28:42:25:6f:49:47:71:
ed:c5:5d:62:24:1d:9d:13:67:91:98:45:12:86:ea:56:a4:f0:
22:02:a7:86:2f:d0:3d:f6:0e:18:83:09:5b:bd:1f:a7:64:bc:
82:ea:f1:1a:bd:d2:d6:68:36:a2:cd:65:75:aa:a7:d7:ce:aa:
5c:2e:a3:1e:f5:a4:86:00:ec:08:d0:33:47:ee:15:82:37:f6:
c8:ad:9c:d7:50:b0:f2:14:f8:23:8d:d6:17:b8:81:de:9b:7a:
5d:8b:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:26:43 2026 by rpki-client