Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219008.roa
File: AS219008.roa (raw, json)
Hash identifier: TOlcWj9YvI00WFNt2ahvLH4ubqgMMPY9q0yIiEhg3FI=
Subject key identifier: 4D:B9:1E:9A:0F:7C:2A:D5:D1:8F:0C:9D:C1:09:5C:23:0E:BA:07:90
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6CCD943A1F2ACD35385F4C04DBF9A929198E0DD9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219008.roa
Signing time: Fri 09 Oct 2026 23:20:29 +0000
ROA not before: Fri 09 Oct 2026 23:15:29 +0000
ROA not after: Fri 08 Oct 2027 23:20:29 +0000
asID: 219008
IP address blocks: 82.27.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:cd:94:3a:1f:2a:cd:35:38:5f:4c:04:db:f9:a9:29:19:8e:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 23:15:29 2026 GMT
Not After : Oct 8 23:20:29 2027 GMT
Subject: CN=4DB91E9A0F7C2AD5D18F0C9DC1095C230EBA0790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:5d:5a:e4:4a:c2:6f:8e:cb:28:91:9b:2a:
9e:b5:16:bf:08:59:46:55:68:4f:7d:3e:18:36:12:
8f:c8:fb:3b:32:c6:0d:ff:5d:15:a9:0b:a8:42:b8:
a0:df:f0:8b:27:e3:84:66:2b:b8:2f:99:6a:b6:6d:
e8:3f:4a:e7:d2:3e:99:19:33:31:e8:c0:1a:ec:3f:
16:32:44:16:f9:39:bd:d3:b7:5e:2c:81:45:46:68:
e9:61:52:c8:cd:3a:d3:bf:53:66:8e:27:e7:79:82:
38:31:24:79:18:69:c1:3c:53:32:d6:61:e0:98:d2:
c2:d2:18:0b:57:62:3c:6c:76:94:f4:89:4f:7c:56:
83:99:35:ec:a9:ea:31:f0:c3:56:2d:93:85:70:4e:
b3:eb:d2:d9:16:c5:2a:55:84:e6:01:57:68:d1:7a:
6b:b8:b7:74:73:dc:2d:28:ea:b4:6f:7a:63:63:62:
7e:43:1d:45:93:8d:26:9a:b3:c8:f6:db:bc:0f:e0:
39:50:40:5b:ea:b5:19:94:e7:c9:79:2a:e4:88:d6:
27:67:91:39:59:89:8a:8a:73:eb:27:87:ac:2a:1a:
fb:e9:38:41:08:b9:34:6c:bf:ed:85:27:d4:37:28:
87:9b:0c:a6:11:6f:cb:b8:c3:9e:91:f7:84:65:de:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:1E:9A:0F:7C:2A:D5:D1:8F:0C:9D:C1:09:5C:23:0E:BA:07:90
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.38.0/24
Signature Algorithm: sha256WithRSAEncryption
07:af:80:ed:61:79:15:ab:dc:82:e6:13:fc:ab:2e:12:f1:0e:
a3:da:4c:c6:1b:2c:bc:4e:4b:b7:f4:9a:b4:4a:45:f9:a6:bb:
1a:e9:67:6a:57:ac:fa:c5:93:f6:71:26:a7:cd:ee:f9:ca:c9:
01:d3:94:54:8e:1c:65:8e:61:e7:28:68:90:d1:e3:f1:c2:32:
ad:4d:82:77:fa:09:a7:b9:f6:93:0e:be:70:72:36:65:31:fd:
7d:a6:a1:c6:e2:31:8d:82:c4:a2:7a:4d:08:a3:23:0b:c8:d3:
dc:b8:39:85:e1:6c:a0:86:80:9d:cf:f9:15:bb:0a:70:db:33:
94:98:f6:ea:f9:fc:49:07:1f:cc:59:da:f3:d4:c1:65:de:31:
37:d6:ae:3a:54:f3:1c:0d:ba:5a:7e:ea:5a:e9:d0:17:6b:b0:
5e:ac:0d:4a:bd:21:34:2b:e1:b6:6a:73:2e:eb:83:bb:3f:cb:
2f:ae:17:9f:e1:82:c8:66:34:7f:08:4f:b1:e7:36:f2:04:4f:
ee:6f:cb:b7:1c:ca:2a:7f:1f:9b:44:72:ea:c5:7b:1f:e4:e8:
79:e3:b7:64:5a:44:3d:c9:69:6d:66:09:9e:37:21:15:60:3f:
ca:a4:15:d5:8c:16:4f:3a:5a:27:df:a6:3a:c2:f0:5a:b1:40:
6a:b6:dd:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbM2UOh8qzTU4X0wE2/mpKRmODdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMDkyMzE1MjlaFw0yNzEwMDgyMzIwMjlaMDMxMTAvBgNV
BAMTKDREQjkxRTlBMEY3QzJBRDVEMThGMEM5REMxMDk1QzIzMEVCQTA3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEV1a5ErCb47LKJGbKp61Fr8I
WUZVaE99Phg2Eo/I+zsyxg3/XRWpC6hCuKDf8Isn44RmK7gvmWq2beg/SufSPpkZ
MzHowBrsPxYyRBb5Ob3Tt14sgUVGaOlhUsjNOtO/U2aOJ+d5gjgxJHkYacE8UzLW
YeCY0sLSGAtXYjxsdpT0iU98VoOZNeyp6jHww1Ytk4VwTrPr0tkWxSpVhOYBV2jR
emu4t3Rz3C0o6rRvemNjYn5DHUWTjSaas8j227wP4DlQQFvqtRmU58l5KuSI1idn
kTlZiYqKc+snh6wqGvvpOEEIuTRsv+2FJ9Q3KIebDKYRb8u4w56R94Rl3rTBAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTbkemg98KtXRjwydwQlcIw66B5AwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5MDA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhsm
MA0GCSqGSIb3DQEBCwUAA4IBAQAHr4DtYXkVq9yC5hP8qy4S8Q6j2kzGGyy8Tku3
9Jq0SkX5prsa6WdqV6z6xZP2cSanze75yskB05RUjhxljmHnKGiQ0ePxwjKtTYJ3
+gmnufaTDr5wcjZlMf19pqHG4jGNgsSiek0IoyMLyNPcuDmF4WyghoCdz/kVuwpw
2zOUmPbq+fxJBx/MWdrz1MFl3jE31q46VPMcDbpafupa6dAXa7BerA1KvSE0K+G2
anMu64O7P8svrhef4YLIZjR/CE+x5zbyBE/ub8u3HMoqfx+bRHLqxXsf5Oh547dk
WkQ9yWltZgmeNyEVYD/KpBXVjBZPOlon36Y6wvBasUBqtt0y
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:04 2026 by rpki-client