Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219047.roa
File: AS219047.roa (raw, json)
Hash identifier: TQ4R4fimO91Fk0EazQuJFPLxX+2jk4mqucKXHNUaWc8=
Subject key identifier: 46:CF:17:A3:07:91:E8:64:29:E1:92:9F:87:44:E6:F1:E1:F6:05:70
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 434693B2190034EEE8A5290AC6188BDF9BC8AED1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219047.roa
Signing time: Tue 29 Sep 2026 07:35:50 +0000
ROA not before: Tue 29 Sep 2026 07:30:50 +0000
ROA not after: Tue 28 Sep 2027 07:35:50 +0000
asID: 219047
IP address blocks: 82.47.191.0/24 maxlen: 24
82.47.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:46:93:b2:19:00:34:ee:e8:a5:29:0a:c6:18:8b:df:9b:c8:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 29 07:30:50 2026 GMT
Not After : Sep 28 07:35:50 2027 GMT
Subject: CN=46CF17A30791E86429E1929F8744E6F1E1F60570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:27:fe:33:aa:9f:cd:26:53:68:53:0d:67:
52:f4:65:f2:02:96:80:b0:7a:0b:d2:b3:e2:bf:46:
ef:c6:68:a8:4f:59:b4:b8:8c:6b:60:f6:8d:72:35:
0f:6d:7c:25:49:66:55:fe:a3:51:ef:30:b4:5b:5b:
ec:8e:df:8b:66:de:97:b0:6c:70:6e:ff:35:9c:a7:
dc:1d:f2:08:f7:47:2d:dc:33:50:03:01:4f:6b:18:
e1:73:a3:57:3c:4c:f0:d4:5d:70:6a:9e:49:25:29:
86:26:7a:dd:38:27:c1:fb:9b:23:31:94:4a:f9:f6:
f6:f1:6e:5c:85:9b:13:f0:56:c8:a0:97:c3:d6:60:
dc:29:65:4b:a1:94:a7:98:ba:e3:3c:ce:c9:3b:0c:
cd:16:f5:1b:36:54:fd:e7:10:9e:dd:f6:9c:aa:36:
fe:d3:fb:61:e3:ac:ba:4c:cc:99:b0:c8:d7:c5:cf:
de:84:0f:7b:c0:f8:38:ae:c4:57:c5:66:45:45:7f:
9b:32:a9:3e:ed:0e:e3:f5:eb:b4:69:28:c2:45:fa:
b9:ac:23:06:62:e3:19:1d:b2:33:f8:03:6b:f7:4e:
44:cf:07:9a:02:df:dc:f1:49:b5:56:9f:b0:a1:8c:
d5:90:97:db:25:de:59:c0:a7:7c:97:75:9d:cc:62:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CF:17:A3:07:91:E8:64:29:E1:92:9F:87:44:E6:F1:E1:F6:05:70
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.191.0/24
82.47.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bc:c1:2c:c9:19:d2:f7:35:07:81:75:01:f8:db:b6:83:15:
d8:b2:52:d8:df:9a:c7:24:22:0e:df:4c:54:98:4e:48:8f:44:
fa:21:fb:e1:fa:f6:f0:2a:d3:ad:1e:96:d4:9e:c5:f1:4b:ad:
e5:b9:50:69:1a:8f:61:27:a9:1d:f1:41:b4:b7:42:d1:2c:04:
0e:c1:4c:d6:58:e2:71:05:2c:5f:60:05:0b:df:0f:7b:a2:f7:
d3:51:60:05:75:d1:bc:e7:4f:ea:d1:79:e9:02:e5:85:24:af:
c5:f9:78:45:f9:c3:29:1a:30:12:6b:e2:ae:e0:a7:9b:13:d6:
17:6f:2b:47:71:f5:e3:06:96:7f:e5:0f:be:0f:6e:ae:2d:65:
57:4e:a1:0e:ff:53:aa:53:e0:1c:4d:c1:31:d9:68:e5:aa:e1:
e7:09:72:84:15:9c:48:57:7e:c0:6d:bd:4e:8e:83:3f:e9:bf:
1b:a0:43:8d:48:89:14:a9:d0:11:b6:a1:97:ab:fb:dc:3d:54:
b2:c5:f4:bd:4e:2d:9f:75:b6:a0:ac:b1:19:ed:52:62:5f:f3:
92:66:ba:ac:0c:fc:9d:12:c8:2b:74:b8:79:b7:0a:dc:c8:0c:
8c:a6:31:2e:a7:c2:d2:b6:bf:0a:fc:6a:2d:51:55:a9:be:07:
d6:33:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 13:11:04 2026 by rpki-client