Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: hh+OyfnFyeAr7zptRkvLBgokaLFnxUWSei85qqZx5y8=
Subject key identifier: 0F:CC:59:23:0E:CE:68:E2:36:EB:D4:A0:86:9C:63:B8:C8:D1:9E:9C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 272E0F7BE946AA215D1900100A8DC3D64AB0ED01
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
Signing time: Fri 17 Jul 2026 05:16:36 +0000
ROA not before: Fri 17 Jul 2026 05:11:36 +0000
ROA not after: Fri 16 Jul 2027 05:16:36 +0000
asID: 19318
IP address blocks: 82.38.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2e:0f:7b:e9:46:aa:21:5d:19:00:10:0a:8d:c3:d6:4a:b0:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 17 05:11:36 2026 GMT
Not After : Jul 16 05:16:36 2027 GMT
Subject: CN=0FCC59230ECE68E236EBD4A0869C63B8C8D19E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:8c:82:6d:96:25:e9:7f:a2:08:5c:5e:88:
f6:6c:78:67:6b:f2:08:61:78:cc:2d:80:a6:96:0d:
ff:f4:71:06:cc:46:a5:45:77:f4:87:34:5f:1e:db:
69:3b:87:99:c6:b1:85:d2:58:3b:9d:50:e2:7a:35:
57:9c:cb:24:99:c2:e5:f5:4d:fa:fe:51:8d:19:7c:
d9:47:70:1e:92:58:d5:02:9a:ac:96:01:e1:88:a8:
ed:3c:40:8d:3b:d2:f4:83:a5:03:8e:94:5f:f5:8f:
b3:6a:2a:89:c8:14:ff:35:c0:a9:0c:1f:38:0e:0a:
54:46:49:8d:ee:be:4f:07:36:61:bf:86:24:f5:d3:
01:5a:3b:4c:5e:f2:b6:f5:34:6f:ef:a5:2c:19:9c:
9f:c6:a3:c7:01:2a:fb:87:a3:d5:b6:a3:85:54:49:
6f:89:c8:0b:b5:e0:8a:ad:24:52:12:85:97:88:1d:
58:a4:00:01:da:f9:f9:5c:18:81:3c:c7:19:f1:da:
4c:11:4b:52:1b:e6:18:bd:a3:cf:3e:14:43:9f:ee:
65:18:07:72:e6:a8:f0:7d:79:8a:2e:12:45:ec:df:
60:f8:ef:52:bb:e2:c8:f7:a5:51:a1:76:a8:1e:09:
a5:cd:06:50:6b:90:ca:10:b3:9b:2f:3b:88:65:4e:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CC:59:23:0E:CE:68:E2:36:EB:D4:A0:86:9C:63:B8:C8:D1:9E:9C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.134.0/24
Signature Algorithm: sha256WithRSAEncryption
80:74:d1:0c:41:f7:97:1e:c7:b7:fb:33:7f:5d:92:dd:4d:c2:
f6:c0:24:9c:88:e9:29:2c:1b:86:65:e5:80:ef:e9:46:61:c9:
78:0e:c3:04:1c:fa:e3:f2:7a:34:18:a3:03:5b:bf:93:c4:79:
cb:aa:70:b2:2d:fb:a9:f5:68:a6:67:ea:1a:c6:7e:41:11:74:
35:be:11:8a:e9:1d:63:e8:30:7e:cb:60:ba:63:ac:27:51:e9:
e8:41:6c:25:2e:b5:56:10:64:33:b1:ed:23:f3:96:bc:64:61:
b1:1f:49:67:f2:09:5e:95:df:ea:26:6b:47:e3:14:9f:21:ab:
81:f1:06:4f:6a:9b:a1:50:7f:c9:2e:a5:87:16:10:19:d7:e2:
3a:91:81:f7:c8:bc:82:6b:c7:ce:ac:8c:be:57:b6:84:52:73:
bd:2e:d5:c2:02:54:f2:c6:45:f7:d6:6f:43:98:38:db:f4:f0:
f6:8f:e8:81:23:c4:8d:e4:52:cb:39:42:eb:df:f7:fb:92:79:
4d:69:8b:1f:c1:f4:a5:4f:69:a6:b8:c4:bf:11:a0:ec:b1:43:
bd:3d:35:2f:91:c5:a8:d0:c6:e3:7a:17:af:1a:fe:21:c5:2c:
54:66:36:4f:a0:b5:fe:49:57:41:cb:30:9a:39:20:41:97:15:
1b:85:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client