Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219229.roa
File: AS219229.roa (raw, json)
Hash identifier: EzvpGW6Y6VRwzfC+26DZ1W1sQTNVQ7WO/hyU0T7CnpE=
Subject key identifier: DB:1F:2F:3C:1E:56:F0:51:C2:3F:A3:CA:C3:FF:D4:D8:C0:90:4B:A9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30F6C95B346C24D73C88D7F0C95DE0F6CC201E65
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219229.roa
Signing time: Wed 04 Nov 2026 12:55:46 +0000
ROA not before: Wed 04 Nov 2026 12:50:46 +0000
ROA not after: Wed 03 Nov 2027 12:55:46 +0000
asID: 219229
IP address blocks: 178.83.26.0/24 maxlen: 24
178.83.75.0/24 maxlen: 24
178.83.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f6:c9:5b:34:6c:24:d7:3c:88:d7:f0:c9:5d:e0:f6:cc:20:1e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 12:50:46 2026 GMT
Not After : Nov 3 12:55:46 2027 GMT
Subject: CN=DB1F2F3C1E56F051C23FA3CAC3FFD4D8C0904BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:14:4c:b2:dd:e7:6e:af:46:93:7c:c8:f7:
31:bb:fa:cd:c9:55:bb:d5:34:b3:28:f5:4e:de:d6:
3c:7a:2e:0d:58:01:a7:31:46:57:fb:5c:a3:69:13:
0c:99:fb:f1:28:bf:11:5e:17:48:35:29:01:3a:5e:
8b:bc:7e:7f:db:29:49:ab:35:19:46:df:7a:18:ee:
20:e7:d5:bc:a3:ee:6f:08:07:2d:45:d0:c9:bd:08:
8d:df:e3:53:9d:3f:5e:1d:94:c6:c6:44:71:b3:16:
a9:75:e0:e5:d2:b7:91:4d:55:6f:c3:b8:59:75:06:
54:20:46:d3:f6:b7:16:b6:c3:0a:eb:8a:23:39:48:
da:b9:7c:15:30:90:ba:62:6c:b8:94:41:41:87:9d:
05:e8:e5:4f:03:8e:8e:55:31:c8:a4:27:6a:43:af:
e2:4a:d3:f5:40:d7:cb:72:2a:b8:91:b7:cd:ed:43:
09:6b:9c:01:0a:23:3e:82:07:39:8b:7b:6a:05:fd:
89:3e:9c:1f:0e:6a:4d:89:0b:1a:b4:17:f5:63:9a:
b9:51:0d:e8:6f:b5:4e:a9:99:6c:84:16:00:d4:d4:
67:ee:58:68:9a:a9:10:20:0a:36:04:5b:da:e3:88:
13:47:72:f3:34:94:2e:7e:21:16:c9:4b:18:de:5b:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:2F:3C:1E:56:F0:51:C2:3F:A3:CA:C3:FF:D4:D8:C0:90:4B:A9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.26.0/24
178.83.75.0/24
178.83.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:32:0b:7b:de:ce:b2:a6:13:c3:38:ff:f9:4c:2c:2f:40:a6:
f6:39:12:c6:8d:81:c8:58:40:b8:35:9e:c7:85:ba:bd:85:e8:
58:ff:95:63:66:f9:26:b5:b1:0e:ff:4b:9f:8c:b7:63:d9:56:
04:c4:38:b2:83:cd:aa:dd:de:cb:72:0d:8b:69:a7:61:b0:e2:
04:fe:5b:74:b1:dd:1d:b2:c8:4c:8e:30:d9:91:94:ea:e5:56:
62:75:f9:0a:50:4f:54:fa:ac:bb:98:c2:10:24:cf:fd:6f:56:
77:64:ea:66:ba:b5:5c:b4:ca:dd:df:2d:4d:d7:a3:88:21:f0:
49:a3:4b:a0:43:52:97:49:6b:71:74:8b:84:5a:39:3a:af:2c:
9f:8a:77:3a:0d:5b:70:e9:e3:70:de:c8:3c:3c:5c:8a:6b:e1:
c0:6f:05:bc:73:b6:8a:fe:12:c2:bb:7d:21:84:dd:bd:ff:a3:
12:5c:83:16:0a:af:dc:21:e6:bf:a1:49:1d:2e:50:eb:98:53:
5c:8f:1c:74:13:7f:ce:fb:97:59:91:22:7b:21:76:44:45:9c:
0c:b6:df:48:da:f5:93:df:c1:f0:59:bf:10:93:df:01:81:ae:
a8:b9:16:76:d0:77:ab:7c:66:dd:c3:45:b8:6f:44:4e:5c:1c:
2e:5b:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:35:10 2026 by rpki-client