Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219409.roa
File: AS219409.roa (raw, json)
Hash identifier: PFclyTJZ/dZBtEH7UZLaml7tElo0+e1uOK5dNWEcCEg=
Subject key identifier: 93:58:D2:C9:21:EF:B0:47:4E:AC:F9:AA:28:FC:11:A2:C5:EC:F9:53
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 76063ECAE6F5CCBE916C0C54FC0D1B446B40BEB2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219409.roa
Signing time: Sun 19 Jul 2026 11:44:08 +0000
ROA not before: Sun 19 Jul 2026 11:39:08 +0000
ROA not after: Sun 18 Jul 2027 11:44:08 +0000
asID: 219409
IP address blocks: 82.47.170.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:06:3e:ca:e6:f5:cc:be:91:6c:0c:54:fc:0d:1b:44:6b:40:be:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 19 11:39:08 2026 GMT
Not After : Jul 18 11:44:08 2027 GMT
Subject: CN=9358D2C921EFB0474EACF9AA28FC11A2C5ECF953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:53:1c:1e:b9:34:aa:56:21:51:f7:f9:2c:
dc:41:9b:70:25:83:e8:ad:d4:8b:00:63:e8:bd:c0:
37:28:08:cb:91:15:a1:70:80:97:43:ea:12:58:54:
a0:37:07:4b:8e:5f:83:82:df:60:06:3f:ef:15:d5:
c7:fc:04:9e:f0:f1:6e:0e:43:c8:7f:1f:0f:81:eb:
dd:3a:ad:d9:d9:72:74:1c:48:1f:de:b7:9e:04:05:
fc:6f:3a:38:3d:2a:08:46:a2:72:40:86:7b:d4:22:
30:67:59:61:c6:53:31:e5:1d:9f:59:43:59:10:e0:
f4:53:a5:7a:f3:a5:9d:6b:cb:8c:c0:a1:0d:b6:b3:
13:a9:6d:7d:c9:b3:cd:1e:ea:6f:f8:83:6a:71:67:
25:35:ca:f7:cb:41:9f:1e:59:67:4c:e2:68:01:ba:
a0:30:5a:b5:f4:76:4e:f3:03:21:e9:8b:94:9a:2e:
ab:7c:30:5f:3e:31:7e:06:40:28:a0:d9:99:ec:b7:
d2:8f:fa:c1:c7:ba:60:15:e9:65:9d:0f:07:a8:26:
cb:c1:e4:a1:bd:87:c4:68:a1:f2:3f:32:c1:25:6c:
c9:c8:e4:b9:29:f0:5f:3e:ae:6c:f4:56:41:88:3e:
6e:c3:45:5e:0e:44:0c:2a:db:3a:c7:ad:b3:3c:9b:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:D2:C9:21:EF:B0:47:4E:AC:F9:AA:28:FC:11:A2:C5:EC:F9:53
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.170.0/24
178.83.165.0/24
Signature Algorithm: sha256WithRSAEncryption
04:be:e5:d6:a0:fe:fd:1f:f2:a6:df:82:f4:a1:ff:90:2f:b4:
6c:80:e1:59:d6:34:be:06:a3:e4:2c:29:48:bd:e1:ea:d5:da:
c2:a9:de:71:ce:cc:18:8e:2a:ef:bc:a5:f3:bb:34:ef:18:47:
6c:08:6c:60:96:b7:c4:47:21:5f:7d:1f:b2:0e:91:aa:8a:35:
b6:56:c9:20:1a:7b:3e:46:cc:3a:29:dd:3f:9a:b5:39:30:9e:
3a:99:b0:fb:72:88:4c:b1:bc:08:a9:1a:c9:a2:54:e0:1d:09:
d8:a4:bb:f0:f3:a6:e1:7c:fc:d9:a0:31:63:dd:33:9e:92:63:
33:24:00:ab:14:89:0d:5a:a0:c3:d6:3d:66:44:4c:08:dc:5f:
da:57:96:95:7b:04:9d:4e:55:ef:9c:4b:82:cc:9d:17:e0:c1:
72:41:f0:75:ca:a6:e5:77:c4:ca:b6:23:e2:e8:d4:ba:d9:5d:
1e:7c:a4:69:8c:bc:a9:75:88:9c:2a:fc:16:0b:b6:03:0b:9b:
b2:16:a6:9e:b4:a7:ec:db:e1:18:f8:b7:00:e5:86:3a:8f:ec:
72:a7:c0:e7:7b:2f:e8:fd:67:ca:05:45:7d:86:4b:53:af:28:
26:2c:61:c4:02:63:5a:26:7d:25:9e:5f:8a:84:30:1d:c2:48:
99:ad:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:50 2026 by rpki-client