Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: XkFSkEQY7gZ66IglM+QL4kjAOFUPFcsudf4hOUIJZUQ=
Subject key identifier: 2C:40:BC:48:A0:0E:39:F7:25:7D:C4:2E:E8:9D:7C:9C:4B:11:94:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D8D415CF58923E4E444942D185FA8E3D2915BEB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
Signing time: Thu 29 Oct 2026 18:29:03 +0000
ROA not before: Thu 29 Oct 2026 18:24:03 +0000
ROA not after: Thu 28 Oct 2027 18:29:03 +0000
asID: 19318
IP address blocks: 82.22.19.0/24 maxlen: 24
82.38.134.0/24 maxlen: 24
84.75.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8d:41:5c:f5:89:23:e4:e4:44:94:2d:18:5f:a8:e3:d2:91:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 29 18:24:03 2026 GMT
Not After : Oct 28 18:29:03 2027 GMT
Subject: CN=2C40BC48A00E39F7257DC42EE89D7C9C4B11946A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:ae:3f:11:bb:8a:22:31:e1:59:19:5c:a6:
c2:90:e0:a4:17:a8:04:01:3d:e9:35:d7:16:68:a5:
4e:bb:fc:62:dc:a1:10:1e:14:38:cd:6b:37:2e:00:
63:8e:68:74:bb:e4:d9:54:e9:5d:a3:08:15:4a:0e:
27:93:77:d4:0c:cd:2c:c8:d0:23:a2:be:0d:38:44:
ad:74:10:d0:54:f6:5a:e3:c8:c8:53:26:52:19:9f:
a8:b7:2b:2f:2f:97:80:24:cf:ed:be:65:90:3a:0d:
9a:78:3b:93:59:d1:bd:bb:69:a9:fb:3b:56:98:fa:
e7:0c:e3:98:76:f1:ce:6a:0e:a0:30:19:63:55:91:
64:75:d4:f6:5e:dc:ab:03:8d:f2:27:13:9b:96:a0:
c3:3a:ee:38:85:dd:99:05:e9:c9:35:ac:1e:84:d4:
6b:ff:d5:f6:3d:bd:93:da:5b:b0:1c:43:9e:57:cd:
27:18:aa:9f:f1:db:13:91:bf:a0:56:76:5d:29:59:
9f:ef:76:ee:47:43:37:63:4b:03:9f:ff:e3:39:be:
20:60:05:73:55:0c:6c:c0:23:4b:9b:b3:56:36:80:
82:94:25:13:41:67:cf:12:6c:f7:5c:75:0a:e2:a7:
f1:c4:cd:19:d6:e6:b8:90:4b:88:4a:b1:e1:24:33:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:BC:48:A0:0E:39:F7:25:7D:C4:2E:E8:9D:7C:9C:4B:11:94:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.19.0/24
82.38.134.0/24
84.75.243.0/24
Signature Algorithm: sha256WithRSAEncryption
48:76:2d:3a:9c:68:23:b3:fe:b4:db:a7:60:0e:3b:4f:b5:4c:
a0:c1:6d:35:c4:0f:de:5e:8a:90:6b:ed:f4:da:73:01:1f:50:
f8:3e:8d:9f:1f:d9:9f:bc:6b:6f:f8:61:19:32:80:8c:e6:2b:
3a:e3:7d:d1:0b:d7:1d:22:cc:a7:af:9d:0a:c3:70:72:8c:6f:
2b:b8:a1:85:ea:8a:ee:88:b5:39:dc:5b:61:c2:a2:92:a9:a4:
3c:1c:67:8a:03:eb:db:ba:11:57:93:9d:c8:fb:2d:84:00:ac:
9b:b2:dc:22:82:ac:82:bb:36:29:b8:8d:13:0d:d8:67:50:b5:
05:5e:29:31:b2:60:7a:06:e9:8b:fa:9e:01:57:27:f3:61:1f:
a0:38:71:80:e3:cf:04:49:48:4c:a6:42:68:8f:d6:ac:4c:9a:
3d:67:b1:f2:3d:92:28:2d:14:16:0d:d2:2e:e8:de:13:ca:a7:
28:ee:22:df:19:8b:61:3c:4c:85:8c:35:0c:6c:2e:8d:a4:3b:
f0:9d:e4:80:78:3c:46:20:1b:70:35:7f:8b:46:9d:03:88:12:
c2:6a:56:00:93:73:eb:ac:07:04:10:d2:69:6e:b7:94:2d:ba:
f7:4d:64:93:16:4b:0d:00:d5:c7:c1:50:7a:f7:76:5e:c1:b3:
61:23:c1:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 11 14:40:11 2026 by rpki-client