Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: D+AAQa0FKJrC3sR1mX+NeY3FQDaBH+ESC3vN0ltuJII=
Subject key identifier: 5E:D5:33:50:33:DF:6F:9E:B9:C9:E7:CA:A4:46:37:63:7C:A0:91:9C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4924D281B0220E8485528CF3ADBF8F0D85848AA3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
Signing time: Thu 27 Aug 2026 13:05:56 +0000
ROA not before: Thu 27 Aug 2026 13:00:56 +0000
ROA not after: Thu 26 Aug 2027 13:05:56 +0000
asID: 19318
IP address blocks: 82.38.134.0/24 maxlen: 24
84.75.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:24:d2:81:b0:22:0e:84:85:52:8c:f3:ad:bf:8f:0d:85:84:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 27 13:00:56 2026 GMT
Not After : Aug 26 13:05:56 2027 GMT
Subject: CN=5ED5335033DF6F9EB9C9E7CAA44637637CA0919C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e5:b7:d6:1e:4a:f2:1c:9f:80:77:c3:a5:9f:
8a:aa:c3:51:d7:51:da:82:80:da:35:90:5c:d3:85:
84:74:15:c3:63:58:2b:83:61:46:29:87:d9:7a:60:
6c:0d:ee:5e:4a:59:71:91:0d:d1:ec:df:18:26:ee:
87:3b:6e:a6:9b:bf:31:13:3a:ad:01:93:72:3a:8a:
92:61:d4:0e:2f:55:8e:c5:32:4b:23:cf:3e:31:bd:
12:a4:6e:3b:c0:94:ab:5a:1e:5e:06:0c:13:71:f7:
26:b7:bc:b8:84:83:09:e9:c7:27:74:4d:c8:cd:0e:
82:a6:71:14:4f:e6:58:fe:46:41:86:3f:65:85:cd:
3c:b4:71:dc:b6:1d:fd:fd:a6:0d:89:b9:50:c2:e3:
58:c0:fc:11:85:94:f9:e6:07:1d:fd:70:84:4d:67:
9e:88:1f:ad:f2:67:5e:35:3e:bc:8c:49:b5:4d:7f:
7d:54:62:5d:af:4b:df:0f:4f:2e:0d:33:23:e5:0e:
05:7f:97:e6:de:ab:bd:bd:fd:d2:46:d4:4b:ab:42:
e6:82:f1:6e:d7:1c:8a:09:d9:4c:c2:d9:40:c2:ab:
c3:76:54:19:a8:77:6e:70:69:81:ed:c8:d0:68:f1:
d4:da:f6:cf:02:01:6c:d6:0a:67:bc:1d:2a:60:82:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:33:50:33:DF:6F:9E:B9:C9:E7:CA:A4:46:37:63:7C:A0:91:9C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.134.0/24
84.75.243.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d4:4a:9f:39:e6:ab:33:e2:2a:f1:a7:d6:f2:7f:f7:fe:3d:
63:0e:d3:14:9f:b8:0d:ac:61:00:66:82:3c:53:bd:47:da:b9:
2c:6c:e2:ac:13:84:e9:90:d8:ba:53:e0:8f:a2:06:58:09:c3:
b9:d3:19:d4:2f:ff:e4:25:67:f6:3e:66:34:1a:0e:85:22:77:
6c:49:46:c3:bc:c2:a8:c8:31:cd:c6:96:1c:fc:32:c7:62:8e:
62:07:dd:dd:fa:86:50:96:b4:0c:25:74:c0:62:56:34:bc:e0:
94:99:80:f3:92:3a:76:23:54:fe:88:06:00:f0:69:70:8b:22:
5c:8d:55:cb:d7:0d:5e:98:05:f2:90:6d:25:c4:da:8b:95:a5:
40:c7:16:e1:1d:16:31:c1:89:e3:7f:5e:07:83:b2:9b:c2:ac:
c0:0c:cb:8c:cf:b7:c3:91:84:42:2e:70:03:31:46:2c:32:16:
95:ca:8c:10:47:ab:ff:6d:b4:d8:51:f5:3b:d8:13:b2:a4:f3:
13:cd:13:f6:fe:80:e1:8b:0e:59:00:dc:ff:71:0a:94:01:f9:
6b:00:a1:80:a9:b5:a0:03:91:9e:ba:65:27:7d:ee:f3:81:a2:
f4:eb:13:bc:c5:db:a8:c9:af:d6:83:c8:7a:81:27:e3:42:81:
84:13:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:31 2026 by rpki-client