Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: Ex4Njkq/5+CI2vc38nVDIJn0Xa9ZVArH4MO29bWw8js=
Subject key identifier: E1:C0:81:B5:2F:0B:0B:4A:9D:2A:69:A8:08:FD:DF:C2:15:AC:C1:09
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 204D829336A7289459A222FD90647B8FC2FF1ED8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
Signing time: Fri 06 Nov 2026 00:06:29 +0000
ROA not before: Fri 06 Nov 2026 00:01:29 +0000
ROA not after: Fri 05 Nov 2027 00:06:29 +0000
asID: 219075
IP address blocks: 178.83.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4d:82:93:36:a7:28:94:59:a2:22:fd:90:64:7b:8f:c2:ff:1e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 6 00:01:29 2026 GMT
Not After : Nov 5 00:06:29 2027 GMT
Subject: CN=E1C081B52F0B0B4A9D2A69A808FDDFC215ACC109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:06:d2:10:72:2a:8e:1d:62:76:20:a2:de:
70:57:0d:d3:da:82:49:56:ba:05:57:f8:17:e6:7b:
5f:fc:5b:00:ca:d5:43:9d:3e:81:8d:99:13:bf:a7:
7b:d9:19:07:7b:fb:f1:fe:ef:0a:4b:a0:37:d2:85:
e9:2d:9e:cf:00:09:4d:1b:a1:42:22:7f:d3:08:db:
a4:c6:d3:5a:cb:d4:7a:d7:da:89:58:a3:b9:86:6f:
e2:03:39:cb:c1:e4:fb:7a:9e:09:23:90:50:97:f4:
6f:3a:9f:fa:56:a8:49:fa:74:e8:fe:c5:41:68:f0:
26:12:00:cd:4f:a5:2b:bc:2e:b4:62:4b:0e:df:9e:
eb:1f:7e:b4:e4:1b:71:ba:d3:02:0c:3b:4e:7c:b0:
33:fd:f8:6f:f1:b8:96:a4:f7:89:06:89:61:c4:6f:
6c:bb:1a:f2:b2:eb:07:05:4e:a7:33:6a:4b:ab:7c:
6c:7b:65:ef:bd:31:ea:6b:8f:f5:e0:88:ed:51:0c:
44:92:e6:f8:1c:8c:68:7d:02:12:1d:87:65:8f:84:
91:9e:fe:64:2e:e8:76:ed:0c:80:0b:4b:ba:7b:35:
04:2c:57:9f:3d:bf:5c:d5:a9:ee:86:6f:10:81:2f:
64:1b:c3:58:e3:4b:96:b5:fb:3a:83:34:b2:1d:d0:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:81:B5:2F:0B:0B:4A:9D:2A:69:A8:08:FD:DF:C2:15:AC:C1:09
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.142.0/24
Signature Algorithm: sha256WithRSAEncryption
32:06:6f:41:d8:84:2e:00:7e:dd:87:6f:23:9c:35:ba:14:a4:
b2:01:ab:21:69:66:4c:4b:c5:f9:14:99:42:27:c5:5f:2c:5d:
54:39:09:b6:48:c9:89:80:60:f3:01:d5:59:d7:71:a3:02:26:
4f:14:97:2a:99:16:87:c2:8c:d4:37:c8:a7:9a:19:2c:9d:2d:
c1:a5:67:b1:63:7e:5b:99:05:6d:ee:cd:22:b1:25:ca:01:70:
0f:1b:d8:69:d8:5f:d5:f5:4e:e5:a6:c9:ba:d4:97:c1:fc:6f:
bc:68:35:41:91:1b:b5:d3:48:68:ca:4d:fe:33:93:bc:86:76:
7e:30:61:3c:25:3f:e5:76:10:96:d2:c2:09:a8:c4:5e:3b:97:
63:db:2d:79:53:f9:39:b0:3e:bf:e4:9d:63:e4:3c:48:48:7d:
b3:0e:af:5b:68:57:28:fb:3d:3c:05:c0:88:ec:a0:ff:43:8a:
fa:9f:b5:d8:89:f1:57:e3:3c:71:99:9d:00:a3:9c:2a:39:d6:
a4:28:7d:5e:42:16:fb:92:e6:74:70:ea:8c:1b:65:f4:6b:53:
bb:dd:53:22:2a:87:93:52:df:bd:b4:93:51:a6:43:25:36:5b:
2e:98:fa:d0:e4:1b:1f:28:81:ce:2a:89:2a:c0:60:4f:3f:cf:
b3:86:d5:34
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIE2CkzanKJRZoiL9kGR7j8L/HtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDYwMDAxMjlaFw0yNzExMDUwMDA2MjlaMDMxMTAvBgNV
BAMTKEUxQzA4MUI1MkYwQjBCNEE5RDJBNjlBODA4RkRERkMyMTVBQ0MxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59wbSEHIqjh1idiCi3nBXDdPa
gklWugVX+Bfme1/8WwDK1UOdPoGNmRO/p3vZGQd7+/H+7wpLoDfShektns8ACU0b
oUIif9MI26TG01rL1HrX2olYo7mGb+IDOcvB5Pt6ngkjkFCX9G86n/pWqEn6dOj+
xUFo8CYSAM1PpSu8LrRiSw7fnusffrTkG3G60wIMO058sDP9+G/xuJak94kGiWHE
b2y7GvKy6wcFTqczakurfGx7Ze+9Meprj/XgiO1RDESS5vgcjGh9AhIdh2WPhJGe
/mQu6HbtDIALS7p7NQQsV589v1zVqe6GbxCBL2Qbw1jjS5a1+zqDNLId0EEfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU4cCBtS8LC0qdKmmoCP3fwhWswQkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5MDc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAslOO
MA0GCSqGSIb3DQEBCwUAA4IBAQAyBm9B2IQuAH7dh28jnDW6FKSyAashaWZMS8X5
FJlCJ8VfLF1UOQm2SMmJgGDzAdVZ13GjAiZPFJcqmRaHwozUN8inmhksnS3BpWex
Y35bmQVt7s0isSXKAXAPG9hp2F/V9U7lpsm61JfB/G+8aDVBkRu100hoyk3+M5O8
hnZ+MGE8JT/ldhCW0sIJqMReO5dj2y15U/k5sD6/5J1j5DxISH2zDq9baFco+z08
BcCI7KD/Q4r6n7XYifFX4zxxmZ0Ao5wqOdakKH1eQhb7kuZ0cOqMG2X0a1O73VMi
KoeTUt+9tJNRpkMlNlsumPrQ5BsfKIHOKokqwGBPP8+zhtU0
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:25:46 2026 by rpki-client