Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219057.roa
File: AS219057.roa (raw, json)
Hash identifier: U6mBV+rD98enHwc+gxi3dij5ZFyO2+D3Q6+/LQwWE94=
Subject key identifier: 30:A4:0B:C5:76:49:F5:20:55:83:F0:B8:F4:F4:F5:79:E5:CC:B9:B5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53A3C5B75B5B0E19F37236AD7710CE9484C4B040
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219057.roa
Signing time: Wed 23 Sep 2026 02:08:10 +0000
ROA not before: Wed 23 Sep 2026 02:03:10 +0000
ROA not after: Wed 22 Sep 2027 02:08:10 +0000
asID: 219057
IP address blocks: 82.47.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a3:c5:b7:5b:5b:0e:19:f3:72:36:ad:77:10:ce:94:84:c4:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 02:03:10 2026 GMT
Not After : Sep 22 02:08:10 2027 GMT
Subject: CN=30A40BC57649F5205583F0B8F4F4F579E5CCB9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:bf:7a:55:7d:6c:34:a0:6c:97:1f:8a:11:
10:5c:b4:1f:84:97:e3:38:d9:7c:4b:18:20:11:8e:
05:63:c8:ac:8d:2a:a6:79:23:71:3c:8d:75:42:4b:
40:ec:03:eb:66:0b:12:64:88:79:62:69:7f:c0:cf:
da:fb:94:92:f9:18:c6:a9:47:a0:14:6d:87:d7:79:
9c:a5:c1:cf:93:7b:17:a3:e1:e5:24:c0:97:bc:7a:
92:17:66:f1:c1:84:36:ee:46:77:e5:40:37:24:91:
0a:a9:6e:8c:a8:1f:35:a2:04:f1:81:de:ad:2e:ce:
4d:b6:8f:02:1e:79:d6:6a:ab:e4:69:e1:b2:d2:12:
ba:f8:0f:d6:bb:a0:e8:61:9c:05:49:18:c6:7b:fb:
b8:bd:08:cb:b5:04:75:7e:5f:d9:68:73:26:dd:10:
f2:b2:54:00:f3:5e:a3:85:65:a4:82:05:de:b3:ae:
5d:4c:17:ed:7b:c5:d3:93:12:25:20:5f:05:8c:62:
b3:9f:5e:78:43:ab:b4:cc:52:57:50:99:4d:71:8d:
1f:2f:1f:b3:42:32:9b:be:44:1e:bb:a0:eb:e4:4c:
33:43:4b:3a:93:e2:f6:f9:e3:09:8e:e7:b1:1c:11:
4d:e3:c7:37:c4:c6:ae:75:cf:e1:ab:02:35:b4:81:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:0B:C5:76:49:F5:20:55:83:F0:B8:F4:F4:F5:79:E5:CC:B9:B5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.255.0/24
Signature Algorithm: sha256WithRSAEncryption
47:60:ef:45:2c:9e:18:2b:bc:2e:ca:1f:2e:62:d0:a3:42:b6:
7b:30:23:f3:22:66:bf:51:c7:b3:89:98:5b:2a:e2:ef:75:74:
fa:54:74:f0:5b:af:5b:0b:cd:96:74:f7:51:f1:c7:23:ce:c8:
f8:ff:29:8b:a2:fa:ca:13:72:7e:7a:f5:17:12:9d:59:60:cc:
74:f8:0e:10:6e:fc:da:94:ff:2c:90:42:e9:08:a3:ca:db:0c:
9b:36:6f:96:29:ee:4a:3c:5d:45:36:18:7c:80:57:b2:8d:31:
91:7b:3d:bf:1d:07:85:5c:02:95:4d:a9:3a:e4:29:c2:89:e3:
e5:22:00:2c:17:5a:9c:4d:8a:31:9d:8c:87:3b:83:4a:b0:4a:
74:aa:22:08:44:3c:df:a7:e7:e9:77:6d:05:33:43:04:d1:64:
61:cf:d9:c0:4f:2f:3d:af:4c:96:a9:8a:cd:73:60:0f:92:8b:
55:ed:dc:33:65:54:a8:96:12:09:ce:00:73:27:2d:fc:6d:dc:
f3:29:13:2d:46:5f:74:0f:0c:fa:43:27:53:b8:e1:ca:1c:d4:
60:95:a4:61:dd:2f:00:af:06:04:92:2b:86:fb:5c:ff:c2:77:
69:5f:fd:2f:ca:ad:a3:b3:4d:99:81:49:39:fa:b2:90:9f:1c:
f9:90:8f:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUU6PFt1tbDhnzcjatdxDOlITEsEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjMwMjAzMTBaFw0yNzA5MjIwMjA4MTBaMDMxMTAvBgNV
BAMTKDMwQTQwQkM1NzY0OUY1MjA1NTgzRjBCOEY0RjRGNTc5RTVDQ0I5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGur96VX1sNKBslx+KERBctB+E
l+M42XxLGCARjgVjyKyNKqZ5I3E8jXVCS0DsA+tmCxJkiHliaX/Az9r7lJL5GMap
R6AUbYfXeZylwc+Texej4eUkwJe8epIXZvHBhDbuRnflQDckkQqpboyoHzWiBPGB
3q0uzk22jwIeedZqq+Rp4bLSErr4D9a7oOhhnAVJGMZ7+7i9CMu1BHV+X9locybd
EPKyVADzXqOFZaSCBd6zrl1MF+17xdOTEiUgXwWMYrOfXnhDq7TMUldQmU1xjR8v
H7NCMpu+RB67oOvkTDNDSzqT4vb54wmO57EcEU3jxzfExq51z+GrAjW0gUXTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMKQLxXZJ9SBVg/C49PT1eeXMubUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5MDU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUi//
MA0GCSqGSIb3DQEBCwUAA4IBAQBHYO9FLJ4YK7wuyh8uYtCjQrZ7MCPzIma/Ucez
iZhbKuLvdXT6VHTwW69bC82WdPdR8ccjzsj4/ymLovrKE3J+evUXEp1ZYMx0+A4Q
bvzalP8skELpCKPK2wybNm+WKe5KPF1FNhh8gFeyjTGRez2/HQeFXAKVTak65CnC
iePlIgAsF1qcTYoxnYyHO4NKsEp0qiIIRDzfp+fpd20FM0ME0WRhz9nATy89r0yW
qYrNc2APkotV7dwzZVSolhIJzgBzJy38bdzzKRMtRl90Dwz6QydTuOHKHNRglaRh
3S8ArwYEkiuG+1z/wndpX/0vyq2js02ZgUk5+rKQnxz5kI+n
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:10 2026 by rpki-client