Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219357.roa
File: AS219357.roa (raw, json)
Hash identifier: q+9+Q+SvekTauX5gIydw+2StmGrC6BWN6ByWVq+j/j8=
Subject key identifier: B6:A6:B9:F1:76:FD:4E:AF:A8:20:F6:22:46:D3:D4:06:5A:28:46:3D
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 1A3A2FB32A41366A91F60DC25CFC5EF3C90BB1F3
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219357.roa
Signing time: Wed 11 Nov 2026 17:31:01 +0000
ROA not before: Wed 11 Nov 2026 17:26:01 +0000
ROA not after: Wed 10 Nov 2027 17:31:01 +0000
asID: 219357
IP address blocks: 177.111.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3a:2f:b3:2a:41:36:6a:91:f6:0d:c2:5c:fc:5e:f3:c9:0b:b1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 11 17:26:01 2026 GMT
Not After : Nov 10 17:31:01 2027 GMT
Subject: CN=B6A6B9F176FD4EAFA820F62246D3D4065A28463D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:35:c3:45:04:3c:1d:75:dc:4b:6e:8f:c0:
fa:67:fd:5e:81:ff:78:e7:c0:61:9e:d3:ef:d9:d3:
06:4a:6a:4b:17:ca:61:4b:04:89:8b:44:2c:29:f5:
17:e8:0c:03:f4:83:b2:3e:f5:f1:3d:b1:d2:c7:4e:
87:5d:14:89:4e:9e:79:37:eb:a5:a1:f1:d6:bd:3f:
af:73:dd:02:5c:38:db:94:f0:90:45:3d:a2:6b:4b:
8c:e1:4a:0f:eb:cc:3d:bc:ce:a5:b5:57:8a:6f:36:
44:9c:67:8e:21:2f:da:21:84:64:62:65:43:13:be:
b3:bc:72:ce:13:d0:40:da:3d:22:08:0d:de:f9:ad:
2b:8a:2a:ff:12:c1:86:67:37:64:c7:af:3e:c6:c0:
8e:6c:a1:dc:6d:05:6e:60:66:d4:35:60:5e:82:b5:
0c:f5:51:a2:21:43:f2:fa:ba:a9:30:ef:b1:bc:5f:
4a:97:00:d8:db:7c:8c:89:26:cf:03:c8:e5:85:15:
6b:6f:bd:8f:68:af:d2:9e:8d:d3:24:99:3f:fd:f2:
57:45:75:4d:e1:1b:6d:4e:18:73:7a:f6:e4:4a:91:
55:34:c7:7d:ea:06:a5:11:04:cb:3c:97:65:99:30:
60:d9:4d:3a:c8:be:20:70:4c:52:ef:c9:2b:92:c6:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:B9:F1:76:FD:4E:AF:A8:20:F6:22:46:D3:D4:06:5A:28:46:3D
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.111.103.0/24
Signature Algorithm: sha256WithRSAEncryption
23:48:3a:cd:55:30:67:be:0e:36:39:c5:f6:a7:77:64:46:0b:
cb:cd:66:56:43:a1:33:05:55:c6:12:d4:80:44:71:0e:a6:8d:
31:15:e5:a5:23:ce:ab:bf:46:53:f3:ff:8a:4c:bb:e5:96:5a:
c0:45:52:7b:1c:79:da:ce:68:17:59:9f:d9:0a:e3:28:c6:0b:
2f:2a:85:5c:f5:5c:f0:2a:e7:4f:ee:ee:bd:b9:83:4b:6b:4b:
b8:d1:8f:96:38:cd:ba:bd:eb:a8:b7:83:d6:82:37:88:1b:bb:
10:39:01:2b:d8:2d:b7:e9:30:17:20:05:f9:f1:13:00:1b:d7:
4f:5c:e5:8c:21:3b:42:4f:02:c4:7b:de:36:80:1d:60:8c:bd:
1b:fc:38:6c:9e:e6:32:c2:9e:c0:6a:51:96:b3:91:b8:f2:22:
1f:5c:b5:45:03:c1:88:37:fd:d7:78:6f:8f:14:53:ed:3c:25:
d4:02:3a:1d:2e:00:80:27:76:b7:67:f5:e3:93:6c:82:ab:b6:
bd:74:df:a1:23:82:33:a4:8f:92:8c:1d:54:9f:a1:6d:bd:7d:
e7:5d:54:f9:c9:97:1b:0f:79:3c:ea:b2:d4:de:7a:b9:03:79:
9d:3f:42:54:99:9f:16:09:34:57:5c:4b:a7:48:c3:86:df:0a:
f9:85:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:51 2026 by rpki-client