Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: eIAZ03mdvr+7nViE85UFTwH++jCLhfsbo6X5nyvtgu0=
Subject key identifier: 15:A9:55:90:02:7A:CC:FA:B9:83:57:74:22:32:B5:9B:8C:26:55:15
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7ECFFF1534D100E2F93ADAF43A4215D319E3C834
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
Signing time: Tue 22 Sep 2026 06:57:52 +0000
ROA not before: Tue 22 Sep 2026 06:52:52 +0000
ROA not after: Tue 21 Sep 2027 06:57:52 +0000
asID: 219427
IP address blocks: 82.21.66.0/24 maxlen: 24
82.21.127.0/24 maxlen: 24
82.21.136.0/24 maxlen: 24
82.23.150.0/24 maxlen: 24
82.25.132.0/24 maxlen: 24
82.25.197.0/24 maxlen: 24
82.25.202.0/24 maxlen: 24
82.26.111.0/24 maxlen: 24
82.26.123.0/24 maxlen: 24
82.27.40.0/24 maxlen: 24
82.27.66.0/24 maxlen: 24
82.27.70.0/24 maxlen: 24
82.38.202.0/24 maxlen: 24
82.41.129.0/24 maxlen: 24
82.41.210.0/24 maxlen: 24
82.47.60.0/24 maxlen: 24
82.47.192.0/24 maxlen: 24
82.47.197.0/24 maxlen: 24
84.75.36.0/24 maxlen: 24
84.75.42.0/24 maxlen: 24
84.75.50.0/24 maxlen: 24
84.75.65.0/24 maxlen: 24
84.75.68.0/24 maxlen: 24
84.75.131.0/24 maxlen: 24
84.75.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cf:ff:15:34:d1:00:e2:f9:3a:da:f4:3a:42:15:d3:19:e3:c8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 06:52:52 2026 GMT
Not After : Sep 21 06:57:52 2027 GMT
Subject: CN=15A95590027ACCFAB98357742232B59B8C265515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:e7:03:6d:22:b9:03:9b:97:01:45:68:68:
43:22:43:0c:18:c5:30:82:67:43:ba:79:34:13:fd:
4e:b6:52:63:38:19:55:5f:35:c9:c5:2e:00:bd:3d:
bd:7a:8d:3a:2b:62:4e:0f:37:0f:30:c7:30:66:02:
73:2e:1e:41:5f:c3:ab:f5:45:84:84:ea:54:0e:a9:
2e:d7:9e:48:84:b8:e5:36:6c:79:4d:fa:dd:cd:1a:
3f:e2:6e:5c:27:29:1d:9f:83:9c:16:53:57:e8:98:
68:89:6b:46:b9:f1:88:da:a8:73:98:e3:c8:cd:83:
69:37:1e:df:f3:61:62:53:d4:fb:4c:ae:68:25:c6:
da:5f:a3:83:85:69:b6:46:90:e7:41:fd:dc:84:7a:
aa:9c:c2:72:11:74:ff:91:ee:cc:3f:be:cf:06:b9:
eb:7f:28:30:d1:6a:65:4a:ac:ee:32:9e:8e:ca:4c:
6b:7f:b1:49:94:94:69:50:23:18:9d:e4:e1:a4:c7:
6e:6b:30:a3:15:06:cd:f1:a1:c4:39:00:ae:35:da:
f7:45:06:e9:6f:64:e3:5f:d4:81:55:0f:4b:cb:5a:
b8:41:dd:17:b4:ba:e3:5e:6e:84:39:a5:86:d2:c5:
83:aa:62:44:10:a3:6a:76:b4:1f:8a:36:f8:ff:b9:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:55:90:02:7A:CC:FA:B9:83:57:74:22:32:B5:9B:8C:26:55:15
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.66.0/24
82.21.127.0/24
82.21.136.0/24
82.23.150.0/24
82.25.132.0/24
82.25.197.0/24
82.25.202.0/24
82.26.111.0/24
82.26.123.0/24
82.27.40.0/24
82.27.66.0/24
82.27.70.0/24
82.38.202.0/24
82.41.129.0/24
82.41.210.0/24
82.47.60.0/24
82.47.192.0/24
82.47.197.0/24
84.75.36.0/24
84.75.42.0/24
84.75.50.0/24
84.75.65.0/24
84.75.68.0/24
84.75.131.0/24
84.75.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e4:63:e7:f4:00:fe:49:96:ee:40:b0:84:7d:37:01:df:bd:
a8:96:9f:f7:d0:17:4f:4c:ab:c3:d0:29:53:d0:87:2e:82:73:
5e:5f:6a:e3:84:40:a9:3e:7d:05:c2:a6:eb:8d:68:81:c9:52:
d7:29:7a:87:89:ac:07:70:99:2a:8c:a8:7a:e9:2a:c3:e1:24:
71:c9:92:64:00:f8:62:30:93:bf:e3:0d:1d:77:e1:c6:4e:69:
0e:30:45:75:ec:06:64:8f:75:cf:43:64:cc:f0:88:b1:e8:e9:
af:76:d7:a4:61:35:91:cc:06:18:35:54:01:d2:dd:e9:25:ba:
56:9e:5a:53:38:1e:0e:c9:d2:bb:73:77:f9:ca:22:d2:6d:ed:
b0:40:f4:89:c7:65:2f:43:2b:49:55:e2:72:51:c4:68:58:11:
0f:57:fe:bd:69:ab:ef:4f:1e:74:6d:1a:6a:8a:0e:e7:f3:76:
9b:83:49:84:24:1e:5f:18:47:c2:99:70:f6:95:a2:e7:01:04:
27:db:5f:d0:42:ea:65:f8:25:bb:5f:01:fa:55:90:7d:7b:2e:
d5:70:bc:57:aa:48:72:2a:10:5d:36:78:93:2c:0a:ab:31:85:
02:0b:36:10:90:c5:a8:48:28:7e:9c:63:12:8b:a3:16:71:57:
19:c0:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:46:34 2026 by rpki-client