Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: 2xGXxouSBKlmDYJNi0xR3R4l7KBQlzydx0X2QknIXY0=
Subject key identifier: D3:92:5F:39:3C:59:DA:2D:5A:BA:41:EC:FB:E1:E5:6A:EE:05:BD:7F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 208DEE6B2289F97CD6C1594CA7BBCE4B248B9D81
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
Signing time: Mon 09 Nov 2026 00:01:54 +0000
ROA not before: Sun 08 Nov 2026 23:56:54 +0000
ROA not after: Mon 08 Nov 2027 00:01:54 +0000
asID: 219047
IP address blocks: 91.124.105.0/24 maxlen: 24
178.92.178.0/24 maxlen: 24
178.93.169.0/24 maxlen: 24
178.93.191.0/24 maxlen: 24
178.94.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8d:ee:6b:22:89:f9:7c:d6:c1:59:4c:a7:bb:ce:4b:24:8b:9d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 8 23:56:54 2026 GMT
Not After : Nov 8 00:01:54 2027 GMT
Subject: CN=D3925F393C59DA2D5ABA41ECFBE1E56AEE05BD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:02:29:f4:3c:01:32:d9:a7:1b:df:bc:1a:
80:f2:31:a1:d2:29:0b:9e:d9:77:e5:a6:fa:ef:f6:
f8:18:4c:ce:18:17:d9:d2:d4:30:d2:c9:97:0d:91:
92:d2:e7:d7:41:37:7d:86:f9:c3:4d:75:10:e2:1c:
15:b4:63:ec:06:7c:4c:a4:a4:56:5c:1f:81:78:3b:
86:02:b9:33:1a:61:8c:a5:9f:a1:61:80:43:1d:e6:
8c:a0:ba:24:c0:41:ce:70:fa:a1:29:e7:c3:03:3d:
00:c5:46:fe:c6:bf:a9:69:5a:c6:d1:a6:2a:86:e1:
4e:b8:36:3e:fd:35:10:4a:b0:d7:da:9e:2f:51:04:
ed:27:0f:61:c0:9a:fa:e7:89:03:75:44:76:d0:6e:
9d:12:6f:03:12:04:b2:0a:5c:50:fb:b9:b0:6b:6c:
4b:a6:5f:59:a7:db:0e:b8:ec:1c:32:b4:72:5b:07:
f5:5f:0d:fc:81:cf:5f:a1:76:c5:82:c0:d8:14:eb:
31:32:a3:af:de:f0:4c:b1:32:d1:70:91:3c:57:d3:
f4:1a:31:fa:8a:ad:90:1c:01:5c:a4:49:fe:25:cd:
9e:0b:e2:66:1e:b2:4f:27:f2:c9:c2:6d:76:73:ec:
c0:89:8d:23:a7:df:56:60:31:75:84:ef:84:99:ea:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:92:5F:39:3C:59:DA:2D:5A:BA:41:EC:FB:E1:E5:6A:EE:05:BD:7F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.105.0/24
178.92.178.0/24
178.93.169.0/24
178.93.191.0/24
178.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
93:16:fd:22:b7:e1:2e:b1:21:c1:78:8b:e9:d1:f2:d6:61:49:
b7:2e:17:aa:7a:ce:da:73:73:dd:93:a7:44:ab:0f:11:f2:a7:
96:41:d5:46:b0:ac:cd:f4:dd:18:64:62:fd:b1:d4:91:6b:c3:
5d:69:6c:a0:6a:f7:d1:bc:da:c2:b5:bb:8a:7a:d7:5c:d6:2f:
1c:a6:76:ae:4e:1a:7c:72:ca:98:70:e7:3e:88:21:95:08:dd:
37:b2:ea:4f:c5:a0:1a:3d:e5:14:01:6f:75:26:d8:d1:68:cc:
3a:0c:50:b2:08:45:bf:c7:8d:e2:37:38:bc:86:36:19:c1:7c:
92:ff:2d:5d:0c:c0:b3:71:b9:01:2a:a8:a1:5a:43:f0:3c:58:
be:b3:88:70:0a:34:91:91:0b:16:b1:0a:16:dc:ce:b2:f9:8b:
50:59:a6:20:fc:08:25:64:62:5c:71:c7:e8:ef:e6:cd:3c:9a:
23:bf:30:99:d0:3d:fe:8c:f5:22:c8:4c:d3:37:94:8a:58:d3:
a5:8f:a1:c8:ea:b4:e1:97:25:ab:2d:0c:b1:2b:a0:7a:36:80:
1c:f9:a6:2b:42:e0:42:8c:a5:89:7d:f7:b5:23:86:35:8b:e7:
09:26:fa:2b:95:b5:d7:13:42:dc:59:c4:bd:f6:63:d5:04:a3:
9a:2d:2e:ea
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUII3uayKJ+XzWwVlMp7vOSySLnYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjExMDgyMzU2NTRaFw0yNzExMDgwMDAxNTRaMDMxMTAvBgNV
BAMTKEQzOTI1RjM5M0M1OURBMkQ1QUJBNDFFQ0ZCRTFFNTZBRUUwNUJEN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsAIp9DwBMtmnG9+8GoDyMaHS
KQue2Xflpvrv9vgYTM4YF9nS1DDSyZcNkZLS59dBN32G+cNNdRDiHBW0Y+wGfEyk
pFZcH4F4O4YCuTMaYYyln6FhgEMd5oyguiTAQc5w+qEp58MDPQDFRv7Gv6lpWsbR
piqG4U64Nj79NRBKsNfani9RBO0nD2HAmvrniQN1RHbQbp0SbwMSBLIKXFD7ubBr
bEumX1mn2w647BwytHJbB/VfDfyBz1+hdsWCwNgU6zEyo6/e8EyxMtFwkTxX0/Qa
MfqKrZAcAVykSf4lzZ4L4mYesk8n8snCbXZz7MCJjSOn31ZgMXWE74SZ6u3xAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQU05JfOTxZ2i1aukHs++Hlau4FvX8wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE5MDQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW3xp
AwQAslyyAwQAsl2pAwQAsl2/AwQAsl50MA0GCSqGSIb3DQEBCwUAA4IBAQCTFv0i
t+EusSHBeIvp0fLWYUm3Lheqes7ac3Pdk6dEqw8R8qeWQdVGsKzN9N0YZGL9sdSR
a8NdaWygavfRvNrCtbuKetdc1i8cpnauThp8csqYcOc+iCGVCN03supPxaAaPeUU
AW91JtjRaMw6DFCyCEW/x43iNzi8hjYZwXyS/y1dDMCzcbkBKqihWkPwPFi+s4hw
CjSRkQsWsQoW3M6y+YtQWaYg/AglZGJcccfo7+bNPJojvzCZ0D3+jPUiyEzTN5SK
WNOlj6HI6rThlyWrLQyxK6B6NoAc+aYrQuBCjKWJffe1I4Y1i+cJJvorlbXXE0Lc
WcS99mPVBKOaLS7q
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:22:24 2026 by rpki-client