Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219031.roa
File: AS219031.roa (raw, json)
Hash identifier: HoXV3oFpyyPEIgy2BwoGuqp3PXFqOJD22j0liWpbQR8=
Subject key identifier: BB:1E:AD:D5:ED:B4:FA:F9:58:1B:3A:D9:55:B7:1F:DF:F2:5C:BE:08
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 025E1FB086244B5E68A6AD2AC3E1354167494870
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219031.roa
Signing time: Fri 30 Oct 2026 07:01:33 +0000
ROA not before: Fri 30 Oct 2026 06:56:33 +0000
ROA not after: Fri 29 Oct 2027 07:01:33 +0000
asID: 219031
IP address blocks: 2a13:9500:1fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5e:1f:b0:86:24:4b:5e:68:a6:ad:2a:c3:e1:35:41:67:49:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 30 06:56:33 2026 GMT
Not After : Oct 29 07:01:33 2027 GMT
Subject: CN=BB1EADD5EDB4FAF9581B3AD955B71FDFF25CBE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:8c:92:08:59:fa:ab:5d:f9:67:58:39:77:
18:eb:f9:fd:9a:f0:e2:10:65:0a:2b:d3:7d:08:49:
ef:80:09:b7:d4:df:b0:a3:65:a9:00:b6:95:7c:d3:
86:0a:20:53:00:88:6e:3e:0a:89:b1:b6:8e:91:7b:
59:35:c3:49:a8:53:db:c8:88:b4:b9:b4:32:1f:8a:
bd:f1:a7:58:a2:cd:02:32:ea:97:6b:63:c5:bd:fe:
c0:3e:db:b0:9c:2c:f3:ed:fe:78:9c:98:0b:6b:86:
4d:01:32:a7:dd:a5:66:29:4f:b4:7a:73:f0:cb:17:
16:e9:35:ce:40:6e:50:28:5a:d0:4d:f4:3f:ec:bf:
3d:1f:9c:4d:86:a9:25:ad:fa:fe:3a:e8:39:ee:01:
d4:ac:b4:d7:65:a4:7c:bb:3c:5f:48:47:b2:c8:2d:
2d:f0:6d:82:9e:ed:1d:ef:e4:a1:ee:69:43:9c:68:
6d:16:3d:b9:2d:dc:7f:c0:34:72:fd:dc:83:af:55:
af:0a:60:e8:3d:3b:7b:0e:9a:15:c2:66:41:48:41:
16:c0:32:b5:79:43:b3:7f:18:c2:b6:c9:84:58:19:
6c:47:cb:a2:17:57:43:7f:45:1a:64:81:16:6f:a1:
67:b9:28:78:64:c0:cf:62:85:7f:ae:60:d2:75:58:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:AD:D5:ED:B4:FA:F9:58:1B:3A:D9:55:B7:1F:DF:F2:5C:BE:08
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1fb::/48
Signature Algorithm: sha256WithRSAEncryption
79:07:e4:60:28:a5:43:6d:76:1b:7e:02:f4:aa:19:a4:c7:bc:
7b:e1:15:05:b7:d4:de:53:f0:f0:26:62:fe:ae:fe:21:af:16:
1a:0b:fc:67:81:3d:8f:7a:03:8c:d9:f1:32:ff:5b:cc:57:fd:
7b:3b:b3:65:6c:92:6e:f3:a0:c8:92:0e:d9:66:63:d8:d9:92:
e3:1e:f2:de:96:c1:89:9e:44:3d:50:8d:56:08:fa:fe:7f:36:
e1:74:2b:27:5a:da:c7:60:15:4a:69:9f:1f:eb:7e:af:d0:39:
b8:00:5c:51:ee:41:1c:a2:14:27:56:f8:11:61:ad:23:35:d5:
de:47:22:dc:a2:bf:94:13:49:55:d3:44:71:7d:e4:a4:ef:d6:
e1:78:5d:51:ea:6d:33:1d:ca:4e:e3:5d:75:9a:ec:47:3c:ee:
d8:bb:d8:69:5f:b9:e1:ac:63:37:0b:bb:5a:e5:d5:e1:a1:06:
30:74:72:3d:38:e8:78:42:42:f8:bb:b1:d1:c6:76:0f:2e:b2:
ff:ac:19:f7:ec:26:15:bb:1a:42:eb:ab:c4:ad:0b:6b:40:d5:
9a:75:54:04:58:b7:46:41:92:09:85:7c:1f:1e:c7:96:56:a3:
dc:5c:7c:fb:9f:a0:46:12:38:d3:78:cd:d6:f8:13:8e:d1:93:
a8:73:65:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUAl4fsIYkS15opq0qw+E1QWdJSHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMzAwNjU2MzNaFw0yNzEwMjkwNzAxMzNaMDMxMTAvBgNV
BAMTKEJCMUVBREQ1RURCNEZBRjk1ODFCM0FEOTU1QjcxRkRGRjI1Q0JFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8YySCFn6q135Z1g5dxjr+f2a
8OIQZQor030ISe+ACbfU37CjZakAtpV804YKIFMAiG4+Comxto6Re1k1w0moU9vI
iLS5tDIfir3xp1iizQIy6pdrY8W9/sA+27CcLPPt/nicmAtrhk0BMqfdpWYpT7R6
c/DLFxbpNc5AblAoWtBN9D/svz0fnE2GqSWt+v466DnuAdSstNdlpHy7PF9IR7LI
LS3wbYKe7R3v5KHuaUOcaG0WPbkt3H/ANHL93IOvVa8KYOg9O3sOmhXCZkFIQRbA
MrV5Q7N/GMK2yYRYGWxHy6IXV0N/RRpkgRZvoWe5KHhkwM9ihX+uYNJ1WPKrAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUux6t1e20+vlYGzrZVbcf3/JcvggwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5MDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAH7MA0GCSqGSIb3DQEBCwUAA4IBAQB5B+RgKKVDbXYbfgL0qhmkx7x74RUFt9Te
U/DwJmL+rv4hrxYaC/xngT2PegOM2fEy/1vMV/17O7NlbJJu86DIkg7ZZmPY2ZLj
HvLelsGJnkQ9UI1WCPr+fzbhdCsnWtrHYBVKaZ8f636v0Dm4AFxR7kEcohQnVvgR
Ya0jNdXeRyLcor+UE0lV00RxfeSk79bheF1R6m0zHcpO4111muxHPO7Yu9hpX7nh
rGM3C7ta5dXhoQYwdHI9OOh4QkL4u7HRxnYPLrL/rBn37CYVuxpC66vErQtrQNWa
dVQEWLdGQZIJhXwfHseWVqPcXHz7n6BGEjjTeM3W+BOO0ZOoc2WJ
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:33:29 2026 by rpki-client