Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219008.roa
File: AS219008.roa (raw, json)
Hash identifier: F5bOn3hu/Q9xwe1ZTPgVg2BkkksZBPjdzuuUebjCawk=
Subject key identifier: 52:49:02:60:27:18:3E:40:D6:F9:8A:35:D5:E9:22:05:2A:B9:53:25
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3B9536DE7A0BB88DDDE868C06DAB39805C2F28CD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219008.roa
Signing time: Thu 29 Oct 2026 05:19:16 +0000
ROA not before: Thu 29 Oct 2026 05:14:16 +0000
ROA not after: Thu 28 Oct 2027 05:19:16 +0000
asID: 219008
IP address blocks: 82.27.38.0/24 maxlen: 24
82.38.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:95:36:de:7a:0b:b8:8d:dd:e8:68:c0:6d:ab:39:80:5c:2f:28:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 29 05:14:16 2026 GMT
Not After : Oct 28 05:19:16 2027 GMT
Subject: CN=5249026027183E40D6F98A35D5E922052AB95325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:5b:16:b3:da:38:dc:4a:b3:bc:db:a2:b8:
cc:ff:70:f3:4d:fe:05:84:6c:25:24:b4:fe:51:66:
37:5d:79:e9:a4:71:b1:25:e5:04:63:de:92:cc:8e:
28:de:1a:27:c2:a6:e7:c2:00:3c:e6:01:cd:74:81:
e5:4e:6e:68:1c:c5:5a:b4:d8:24:bc:bc:e8:2a:59:
f3:36:1a:89:dc:da:c3:4d:96:26:cf:14:fc:41:34:
78:f1:5f:fb:a1:0a:a9:31:98:1b:f1:ce:fc:3f:60:
e4:c3:c2:cb:e9:c0:f9:5f:0e:e8:44:05:85:41:37:
99:e6:bb:9b:2d:58:82:2b:7a:31:8f:e3:8c:32:69:
85:8a:cd:24:0e:99:42:97:cd:67:83:c4:f7:dc:87:
6f:16:72:7e:07:a8:a5:55:31:0e:36:e9:4e:61:b8:
08:f9:cb:76:02:89:f6:bb:17:e0:10:ba:7d:df:4c:
48:4a:99:db:b8:f5:1f:dc:61:32:b5:3b:05:25:5c:
a6:85:b7:6d:ea:1f:5f:e5:36:60:15:5f:41:df:77:
ef:91:3f:82:c4:83:66:48:95:66:9c:38:2a:94:74:
19:7e:af:0f:0a:fa:3e:c5:e2:d9:79:92:d8:6b:19:
f9:af:3a:60:14:9d:26:a6:94:41:f8:c7:33:6e:23:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:02:60:27:18:3E:40:D6:F9:8A:35:D5:E9:22:05:2A:B9:53:25
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.38.0/24
82.38.28.0/24
Signature Algorithm: sha256WithRSAEncryption
23:43:82:61:3c:d9:a6:8b:f1:ca:3b:29:69:a5:78:46:50:19:
2d:c3:72:db:b1:be:06:9a:93:05:51:54:e3:49:a1:fe:af:7e:
4e:72:7c:3f:c2:5f:7f:33:f6:e1:b5:91:49:40:48:d4:cb:51:
a2:59:c5:63:23:d9:01:e6:08:80:02:10:9e:d9:bd:88:f3:31:
aa:db:ba:1c:38:ad:81:2c:39:a6:1c:a0:05:91:ff:75:27:79:
d9:0f:5a:d9:f9:a7:9f:2f:b5:98:03:6c:ee:70:a7:76:bd:29:
84:d4:cd:b3:05:9d:6e:40:e2:49:00:9b:fc:f0:11:50:65:44:
8c:bc:7c:ee:a8:b4:6f:d3:4a:9a:17:16:83:c4:2a:2f:4c:95:
b2:20:37:8a:56:9b:38:9c:16:03:26:2c:37:1b:4e:fe:f1:4f:
f9:24:fe:38:4d:a5:7c:ec:4e:ca:4c:ca:64:46:05:73:27:b1:
28:b0:94:9c:47:66:6a:61:ea:ab:61:5a:5f:a5:f2:e1:6a:7b:
82:1e:26:05:fd:e4:af:d4:32:5b:1d:c6:b0:36:28:fd:0f:8a:
01:87:33:95:c7:8d:af:2d:5e:96:09:0e:7b:47:32:dd:41:b4:
b0:29:b1:3f:e5:11:5a:5c:17:c1:4d:cd:7d:91:92:4f:1d:8a:
42:50:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:23:11 2026 by rpki-client