Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: 4umANLc3xsjyNQ7k7U0E7m3n0FsKIvhGYffNrCHtzH0=
Subject key identifier: 79:24:3D:A8:89:63:7E:9F:B5:F9:F7:AD:FF:F3:C3:27:50:2C:D2:6C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6BB4238FC8F765DF9306FDDA6E72B452AD64A6AC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219047.roa
Signing time: Sat 14 Nov 2026 00:05:01 +0000
ROA not before: Sat 14 Nov 2026 00:00:01 +0000
ROA not after: Sat 13 Nov 2027 00:05:01 +0000
asID: 219047
IP address blocks: 82.47.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b4:23:8f:c8:f7:65:df:93:06:fd:da:6e:72:b4:52:ad:64:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 14 00:00:01 2026 GMT
Not After : Nov 13 00:05:01 2027 GMT
Subject: CN=79243DA889637E9FB5F9F7ADFFF3C327502CD26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:a3:58:33:24:6e:31:4e:4a:e1:8c:c9:06:
62:ee:b3:91:1c:d3:72:19:52:6a:71:92:78:8d:a1:
cd:5b:0c:f1:49:40:15:3a:10:76:87:57:5a:bc:14:
7a:a5:f7:0b:2c:74:42:8a:4f:72:47:a8:1a:6a:6b:
4a:d8:46:ab:df:c6:6d:15:67:6f:f5:16:31:e5:71:
cf:ee:1f:aa:29:5d:c9:35:41:84:77:8c:ea:2f:ef:
02:68:20:67:fe:49:4b:8e:16:52:72:c6:3a:ef:0d:
1c:dc:e8:33:ce:83:48:3e:b7:81:2b:19:72:0a:1b:
ed:04:3a:9f:c7:b0:aa:db:ea:51:aa:46:db:ed:fb:
ba:62:8b:96:f3:1c:9d:4b:b7:30:be:c7:76:b1:5a:
f0:d9:27:6a:cc:9d:83:7b:d9:99:e6:6e:04:84:ea:
34:23:3a:37:37:3d:8e:c1:d0:b4:11:a1:cb:a4:90:
02:ce:3c:00:2b:9a:69:9f:13:f5:97:06:31:11:e1:
2a:65:e3:34:65:f1:d4:1c:2f:49:35:89:bc:0f:84:
2a:f1:a2:69:be:2f:7e:17:d9:3c:6b:36:9f:69:9a:
b9:21:3f:d7:dc:6e:e1:16:b0:7a:d6:89:b5:9b:c2:
e2:88:9e:c4:67:35:c1:ec:7f:c4:aa:cb:91:eb:8c:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:3D:A8:89:63:7E:9F:B5:F9:F7:AD:FF:F3:C3:27:50:2C:D2:6C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6f:93:71:0e:3a:c0:86:c0:a8:11:67:67:b6:6f:73:94:6d:
eb:d6:9b:fe:3f:25:21:46:99:25:7b:4c:20:d5:82:d1:ec:b5:
b8:22:91:26:46:76:b1:17:d0:27:18:96:35:13:31:87:3d:5a:
77:39:31:a5:8b:cd:d6:75:3f:62:72:c4:0e:7c:30:51:c7:55:
55:fe:51:9c:41:7a:0c:32:b6:0c:fc:f8:31:41:34:b3:4b:13:
93:83:d4:6b:cf:56:05:6c:3f:01:4b:0a:96:79:6e:c8:78:f8:
51:00:5c:e9:b0:5e:79:92:04:45:fd:d4:2b:f5:63:f0:01:04:
3b:f9:d1:93:5c:6e:2f:b6:c4:35:61:0f:8f:89:01:00:13:cd:
8e:fd:c8:24:95:45:39:ec:b2:1c:94:31:91:e1:6f:76:d7:a2:
2a:65:80:86:b7:47:3f:55:4c:07:9d:45:30:c5:4a:89:8d:63:
aa:c2:c0:5e:c3:1c:31:e0:32:f0:75:5d:36:e3:40:51:02:1e:
54:e6:d8:41:2d:36:63:6f:f7:f3:c5:fb:6c:7a:15:99:d8:43:
59:de:47:dd:aa:79:90:41:d5:98:38:dd:0c:c1:3f:79:3c:67:
4f:aa:b4:60:53:6c:63:de:f0:8c:18:4e:e1:c3:86:5b:c2:50:
de:61:d5:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUa7Qjj8j3Zd+TBv3abnK0Uq1kpqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMTQwMDAwMDFaFw0yNzExMTMwMDA1MDFaMDMxMTAvBgNV
BAMTKDc5MjQzREE4ODk2MzdFOUZCNUY5RjdBREZGRjNDMzI3NTAyQ0QyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk46NYMyRuMU5K4YzJBmLus5Ec
03IZUmpxkniNoc1bDPFJQBU6EHaHV1q8FHql9wssdEKKT3JHqBpqa0rYRqvfxm0V
Z2/1FjHlcc/uH6opXck1QYR3jOov7wJoIGf+SUuOFlJyxjrvDRzc6DPOg0g+t4Er
GXIKG+0EOp/HsKrb6lGqRtvt+7pii5bzHJ1LtzC+x3axWvDZJ2rMnYN72ZnmbgSE
6jQjOjc3PY7B0LQRocukkALOPAArmmmfE/WXBjER4Spl4zRl8dQcL0k1ibwPhCrx
omm+L34X2TxrNp9pmrkhP9fcbuEWsHrWibWbwuKInsRnNcHsf8Sqy5HrjCjVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUeSQ9qIljfp+1+fet//PDJ1As0mwwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5MDQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUi//
MA0GCSqGSIb3DQEBCwUAA4IBAQBMb5NxDjrAhsCoEWdntm9zlG3r1pv+PyUhRpkl
e0wg1YLR7LW4IpEmRnaxF9AnGJY1EzGHPVp3OTGli83WdT9icsQOfDBRx1VV/lGc
QXoMMrYM/PgxQTSzSxOTg9Rrz1YFbD8BSwqWeW7IePhRAFzpsF55kgRF/dQr9WPw
AQQ7+dGTXG4vtsQ1YQ+PiQEAE82O/cgklUU57LIclDGR4W9216IqZYCGt0c/VUwH
nUUwxUqJjWOqwsBewxwx4DLwdV0240BRAh5U5thBLTZjb/fzxftsehWZ2ENZ3kfd
qnmQQdWYON0MwT95PGdPqrRgU2xj3vCMGE7hw4ZbwlDeYdUy
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:22:39 2026 by rpki-client