Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219407.roa
File: AS219407.roa (raw, json)
Hash identifier: z2UF8Vpc94XH/K9rNmHtDyYWr6cFAmKiODmWNHsMriA=
Subject key identifier: B3:F2:64:B7:4C:91:CC:AB:9B:CF:0F:CF:20:23:43:05:BF:51:54:7E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 43C05DB15235E0EEBABB173EA0AFDBC4D42E5B15
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219407.roa
Signing time: Thu 12 Nov 2026 17:29:25 +0000
ROA not before: Thu 12 Nov 2026 17:24:25 +0000
ROA not after: Thu 11 Nov 2027 17:29:25 +0000
asID: 219407
IP address blocks: 177.111.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c0:5d:b1:52:35:e0:ee:ba:bb:17:3e:a0:af:db:c4:d4:2e:5b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 12 17:24:25 2026 GMT
Not After : Nov 11 17:29:25 2027 GMT
Subject: CN=B3F264B74C91CCAB9BCF0FCF20234305BF51547E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:b2:37:08:81:5b:d2:99:e6:5b:c9:4d:19:
85:e5:f4:97:67:4d:7d:c5:c2:fc:e4:5f:d7:8b:b8:
a8:6c:ef:ed:3b:b6:79:df:63:11:47:47:fc:ae:07:
ac:17:af:0f:0d:b1:dc:44:f4:6c:b5:73:de:f8:5f:
97:bf:79:c4:fe:a9:00:27:8e:d9:45:61:58:28:fc:
56:d0:c3:64:30:64:82:f0:f7:a8:f8:6c:ea:9c:ec:
d8:e5:9f:2b:8d:af:85:81:50:73:46:cf:df:fe:20:
42:d4:a9:18:6c:f5:0d:d9:44:6d:43:9f:4d:78:a3:
f4:c4:85:d6:7c:f3:c3:46:47:bf:1c:e5:10:64:45:
15:bd:50:60:09:c5:bc:18:31:ab:ac:ae:d0:37:65:
31:fd:b9:13:28:7a:eb:d6:f5:0e:3a:e0:d2:f3:14:
9e:59:d2:ee:84:63:7c:33:a1:02:5f:d0:bd:e8:1d:
41:6f:c9:fc:7a:2f:98:d6:fe:9e:34:c6:5a:11:b3:
5a:fb:41:a8:20:c8:8f:a8:9b:e2:23:0d:8c:c2:2e:
48:31:50:ef:58:b9:39:e4:0a:fe:c2:0f:a4:34:60:
43:b1:89:21:a7:3e:d2:3d:48:e7:60:72:fc:ed:ec:
5c:ce:46:63:d8:54:58:38:86:a0:f8:5d:ca:25:40:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:64:B7:4C:91:CC:AB:9B:CF:0F:CF:20:23:43:05:BF:51:54:7E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS219407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.111.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ab:0a:2a:1e:d9:75:6b:0a:e6:04:d2:c8:be:ea:ff:2c:87:
d1:46:8f:0d:d8:cb:aa:9f:f8:dc:bc:e6:06:a0:a9:ad:3b:5d:
67:08:2e:e7:31:10:df:e1:9e:36:80:83:a9:35:c5:5f:3c:42:
4d:d9:89:5a:9b:97:cb:7f:d7:26:be:33:d5:b3:43:d0:ce:8e:
07:18:03:d0:59:73:a1:4b:26:ff:e9:36:85:36:ba:1c:81:62:
99:48:90:8a:42:a8:48:34:10:7a:c0:09:ec:91:e2:1b:f8:87:
0f:65:6e:24:4c:4c:85:7e:41:5a:e7:a2:f4:c5:44:79:b6:59:
3b:43:aa:79:ac:b3:05:1b:32:e1:52:58:3c:47:1d:e2:49:1c:
c9:45:26:8c:e4:95:3c:4a:e3:d4:2a:7e:bd:7c:39:de:4e:59:
0d:c5:aa:61:c4:47:82:58:41:ca:ae:51:64:d7:ff:d2:6b:af:
54:5b:a2:f4:e7:51:bb:0e:77:f3:80:3e:48:0c:41:f6:04:cb:
a2:bc:02:ff:f8:e7:be:f0:c5:ce:51:ce:67:cf:aa:0f:fa:7d:
71:6f:e4:2d:e8:44:cb:1a:a3:90:98:42:fa:f6:1a:01:60:50:
00:ad:4f:1a:24:ac:1e:3e:d3:0e:09:0e:3a:6a:1b:41:cd:a9:
9c:96:66:e4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQ8BdsVI14O66uxc+oK/bxNQuWxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjExMTIxNzI0MjVaFw0yNzExMTExNzI5MjVaMDMxMTAvBgNV
BAMTKEIzRjI2NEI3NEM5MUNDQUI5QkNGMEZDRjIwMjM0MzA1QkY1MTU0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyrI3CIFb0pnmW8lNGYXl9Jdn
TX3FwvzkX9eLuKhs7+07tnnfYxFHR/yuB6wXrw8NsdxE9Gy1c974X5e/ecT+qQAn
jtlFYVgo/FbQw2QwZILw96j4bOqc7NjlnyuNr4WBUHNGz9/+IELUqRhs9Q3ZRG1D
n014o/TEhdZ888NGR78c5RBkRRW9UGAJxbwYMausrtA3ZTH9uRMoeuvW9Q464NLz
FJ5Z0u6EY3wzoQJf0L3oHUFvyfx6L5jW/p40xloRs1r7QaggyI+om+IjDYzCLkgx
UO9YuTnkCv7CD6Q0YEOxiSGnPtI9SOdgcvzt7FzORmPYVFg4hqD4XcolQJVnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUs/Jkt0yRzKubzw/PICNDBb9RVH4wHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMjE5NDA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsW+J
MA0GCSqGSIb3DQEBCwUAA4IBAQBbqwoqHtl1awrmBNLIvur/LIfRRo8N2Muqn/jc
vOYGoKmtO11nCC7nMRDf4Z42gIOpNcVfPEJN2Ylam5fLf9cmvjPVs0PQzo4HGAPQ
WXOhSyb/6TaFNrocgWKZSJCKQqhINBB6wAnskeIb+IcPZW4kTEyFfkFa56L0xUR5
tlk7Q6p5rLMFGzLhUlg8Rx3iSRzJRSaM5JU8SuPUKn69fDneTlkNxaphxEeCWEHK
rlFk1//Sa69UW6L051G7DnfzgD5IDEH2BMuivAL/+Oe+8MXOUc5nz6oP+n1xb+Qt
6ETLGqOQmEL69hoBYFAArU8aJKwePtMOCQ46ahtBzamclmbk
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:04:37 2026 by rpki-client