Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: QeQmVwNx20nYaeZJkf7O/BeKD/68+HTS7xqnQT/lJ9A=
Subject key identifier: 9F:DA:96:72:45:C9:94:18:4D:6B:3E:D6:BE:4F:BE:A8:85:8A:62:2D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 206A7C5639ED68B67A2B461A2E69478FB092CA51
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
Signing time: Sat 14 Nov 2026 00:05:01 +0000
ROA not before: Sat 14 Nov 2026 00:00:01 +0000
ROA not after: Sat 13 Nov 2027 00:05:01 +0000
asID: 219447
IP address blocks: 82.47.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6a:7c:56:39:ed:68:b6:7a:2b:46:1a:2e:69:47:8f:b0:92:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 14 00:00:01 2026 GMT
Not After : Nov 13 00:05:01 2027 GMT
Subject: CN=9FDA967245C994184D6B3ED6BE4FBEA8858A622D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:f1:fd:a7:c7:56:15:1b:30:47:2f:af:75:
d1:51:b8:b7:d8:de:a4:e6:65:17:d7:ab:83:e7:2b:
a1:bf:30:14:93:d1:16:44:90:38:c4:b1:9d:01:08:
fc:2c:15:c8:d5:eb:d2:91:cd:9c:c3:0a:0a:f9:64:
01:a3:e2:42:2c:a9:7c:56:e1:2d:2a:a1:d5:f3:51:
43:90:29:af:a1:9d:22:18:cb:f2:9b:ce:27:f6:70:
9a:6f:56:2c:17:44:f0:fa:85:47:6a:04:2c:37:8e:
a5:a9:8b:87:72:df:21:93:8e:68:3d:fc:b9:46:79:
e2:ba:f8:da:91:07:66:6b:d2:c9:f5:87:c0:74:27:
fe:6a:96:8a:4d:c0:e8:2c:aa:fd:c3:da:98:c1:ee:
6e:76:ad:83:93:0b:07:fb:57:2e:c6:51:78:67:b0:
66:42:86:08:84:68:bb:ea:fd:29:99:fe:9b:e5:be:
69:70:39:b9:9a:e7:ba:e0:28:64:01:d9:6f:9a:ff:
aa:7c:c9:19:c0:a4:17:a6:e4:65:11:bc:05:69:87:
04:7e:53:d6:60:49:4a:ff:cc:7a:48:e3:96:f3:1e:
b2:56:67:1c:53:4b:e8:66:4b:00:f0:b1:f6:2a:d3:
06:e4:60:9b:39:43:f6:46:2a:47:fe:06:30:36:16:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:96:72:45:C9:94:18:4D:6B:3E:D6:BE:4F:BE:A8:85:8A:62:2D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:34:ca:14:98:71:7f:c0:3e:9b:43:fe:b3:ca:9d:79:f7:f2:
62:e5:a3:5d:b0:d7:4f:f5:ab:d6:fa:fb:f4:5a:1e:d5:f5:a3:
58:f0:47:35:ac:ec:cf:03:07:a5:39:e0:f5:1f:7b:bd:60:da:
a2:ea:1f:06:da:06:77:7f:cb:18:6c:06:8b:83:13:d9:ce:6b:
18:de:7a:ce:d1:fc:aa:69:7a:e0:07:63:cd:fb:d6:a6:ed:ea:
7b:f8:72:97:50:53:df:35:32:44:f6:8e:96:28:d6:5d:f8:0c:
fa:07:1c:10:e5:6c:92:c0:f9:8d:ab:04:ba:4a:2a:2c:6f:64:
a4:84:b6:8c:55:6e:df:f8:cc:58:37:c9:30:ee:51:34:13:cc:
06:49:47:a2:7e:23:a8:ea:d7:ac:a6:c5:18:27:4a:81:69:a1:
f3:0a:6b:06:99:52:91:e6:0f:cd:a1:c6:eb:5a:ec:bc:c9:35:
4e:c0:c1:6e:b3:56:36:f9:4f:b4:85:10:ad:41:df:e1:a8:13:
99:e1:38:9a:fb:35:52:c2:bc:cc:c7:f1:65:0f:e6:6b:02:55:
f1:51:68:83:15:99:ce:89:7f:84:3a:3f:1a:3f:21:bd:88:44:
98:07:91:72:c3:8c:65:1f:a3:dc:3c:c4:b6:86:2d:79:33:d8:
bc:eb:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:27:01 2026 by rpki-client