Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: eA3x+j7zOqI/UV1i2CH0ATAhR0VQm5QwOoh1Tjsr1Io=
Subject key identifier: F8:53:24:05:F3:4D:5F:64:F9:29:46:0E:FA:C2:7C:70:DD:AC:62:85
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3EAAEA8D37219290AECFECE7F72F8E1E7DEA8FCD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
Signing time: Fri 09 Oct 2026 13:30:01 +0000
ROA not before: Fri 09 Oct 2026 13:25:01 +0000
ROA not after: Fri 08 Oct 2027 13:30:01 +0000
asID: 219447
IP address blocks: 82.47.191.0/24 maxlen: 24
82.47.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:aa:ea:8d:37:21:92:90:ae:cf:ec:e7:f7:2f:8e:1e:7d:ea:8f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 13:25:01 2026 GMT
Not After : Oct 8 13:30:01 2027 GMT
Subject: CN=F8532405F34D5F64F929460EFAC27C70DDAC6285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:b7:7c:e6:97:cd:b1:04:f2:fb:ad:5b:b1:
2c:c7:ab:1d:49:d8:09:03:b5:0c:4d:d3:7f:89:28:
12:79:f0:b7:81:78:b3:b2:f2:f3:2c:06:07:93:03:
67:cd:bf:75:d2:0d:57:30:98:65:f9:84:d6:f0:d6:
6b:55:1b:37:9c:2c:5d:bf:a9:a9:5b:2c:4c:8d:4c:
ba:b7:bb:0e:68:61:a4:69:93:cc:9f:c2:dd:47:02:
16:4b:15:1c:6b:17:fb:dd:b3:80:db:aa:31:51:5b:
08:0c:b9:79:f0:b1:e8:8b:83:2a:4c:06:ea:55:78:
c3:b7:ae:88:55:22:b6:18:b9:2c:2d:ce:95:b3:e6:
e1:f5:91:d5:5a:7b:8f:3f:88:4f:64:9b:ff:28:07:
db:69:86:49:e8:ff:db:c9:f1:53:91:66:47:2b:dc:
72:c9:a7:52:ec:3e:4b:14:f4:6f:d1:eb:b4:df:14:
e6:65:c7:b7:73:72:c0:1d:ff:ce:77:39:86:fb:7c:
3f:f7:6c:92:c8:4f:e5:48:f9:86:40:58:db:b9:95:
ca:ec:a2:c1:b2:cc:d3:ea:69:89:c2:28:06:8e:dd:
a8:a3:eb:40:34:1e:04:ed:31:cc:9e:eb:d8:5f:cd:
49:f5:39:8e:63:97:7c:53:8c:b8:37:6a:fe:39:2e:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:24:05:F3:4D:5F:64:F9:29:46:0E:FA:C2:7C:70:DD:AC:62:85
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.191.0/24
82.47.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b6:67:a2:78:80:78:d0:69:14:25:91:00:9f:43:e0:fd:90:
17:2a:fa:b9:3c:9c:49:b0:1e:24:29:1f:46:30:b4:62:7c:1b:
13:ad:09:b2:d6:66:b2:50:d8:ae:32:c9:ab:34:2f:ba:2c:de:
e2:2d:4b:59:3f:3a:d7:00:1e:5e:bd:c1:41:63:21:3b:cd:f6:
b6:12:4c:11:cc:7a:46:ad:b4:52:65:31:ac:fb:4d:3e:e6:11:
1c:78:df:ae:97:b1:dc:d3:70:5b:14:23:94:0b:de:5c:ef:82:
2c:4b:34:5c:05:67:e4:c0:4b:2e:a5:68:03:bb:f9:79:cd:cd:
8d:09:8c:22:26:8d:f6:12:5f:bb:70:a8:8c:1e:5e:1a:4d:31:
9d:06:2a:25:05:fd:13:46:5d:a3:02:3b:02:6e:1e:03:ec:45:
80:b3:7f:ab:ca:36:11:f3:42:97:4c:dd:03:27:02:00:16:ed:
c4:b4:ea:ac:10:ea:cf:29:70:02:90:15:f6:f9:67:d2:0a:d4:
9d:56:14:3f:2a:62:8b:71:26:7a:42:17:16:56:00:a0:e4:6d:
9c:15:6a:3b:b4:0f:ae:b4:87:ca:70:e8:5b:fa:ff:3b:e1:be:
c2:cc:09:8e:bd:9c:2b:a2:28:bc:58:b2:df:8f:8a:21:46:32:
51:c1:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:11 2026 by rpki-client