Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219005.roa
File: AS219005.roa (raw, json)
Hash identifier: N0+NKoZ0tlf/0yoCvUBfI/cAQcSZbMMR9YpBFAxsZoU=
Subject key identifier: 0A:F3:0B:A1:9D:A0:1E:01:B0:C7:9B:26:D0:30:C3:C1:41:9C:57:A9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 23877CD13103D6AA0BF97FF7916007EE4905E4C2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219005.roa
Signing time: Mon 17 Aug 2026 15:18:59 +0000
ROA not before: Mon 17 Aug 2026 15:13:59 +0000
ROA not after: Mon 16 Aug 2027 15:18:59 +0000
asID: 219005
IP address blocks: 82.21.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:87:7c:d1:31:03:d6:aa:0b:f9:7f:f7:91:60:07:ee:49:05:e4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 17 15:13:59 2026 GMT
Not After : Aug 16 15:18:59 2027 GMT
Subject: CN=0AF30BA19DA01E01B0C79B26D030C3C1419C57A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:18:a0:cd:d9:3b:e6:7b:79:24:67:ef:61:
d6:89:3d:22:73:8f:b6:b2:61:72:ad:36:67:42:d1:
dd:43:d1:51:f2:20:69:e4:f8:3b:56:b7:0a:32:59:
b8:4c:a3:a2:db:7b:48:13:11:0d:5d:36:45:95:28:
90:14:01:36:c3:9e:cc:27:7d:9f:16:70:53:d3:a3:
a2:f6:9c:bf:35:20:d6:0d:85:85:87:28:54:d9:16:
9b:36:ea:08:61:a2:d9:3b:f5:7f:b6:8f:8e:cf:ca:
ae:ee:60:8a:ca:85:d0:b1:ad:49:70:a9:b9:fb:2e:
16:48:91:15:27:86:dc:e2:e4:3a:db:34:0b:2a:6e:
a9:d0:de:69:13:da:6d:5c:33:bf:db:35:8a:28:51:
85:43:24:95:ea:c7:f2:74:19:b8:a3:29:bd:e1:be:
93:7a:10:2c:29:06:40:43:a7:fa:3b:ea:66:af:3a:
b4:41:e0:56:19:24:38:3e:41:7c:9d:8e:dd:e4:6b:
c2:af:cf:ec:a6:35:ee:3a:59:68:eb:0b:50:45:ac:
d1:5f:b8:a1:ac:05:41:b1:d0:0b:11:63:42:ac:b0:
df:aa:14:86:84:b4:f5:f5:9d:aa:6d:7d:24:63:d1:
a8:9e:c8:1c:f6:23:9f:e7:4e:de:e1:41:f7:c3:3b:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:0B:A1:9D:A0:1E:01:B0:C7:9B:26:D0:30:C3:C1:41:9C:57:A9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.197.0/24
Signature Algorithm: sha256WithRSAEncryption
93:60:9f:c1:a7:18:6c:fc:aa:04:c4:f8:64:7d:0e:20:58:1f:
9f:b9:0f:c8:ea:41:5b:50:ff:3e:c2:43:62:ec:f7:b3:19:52:
58:15:db:90:21:88:d4:2c:0a:ec:1b:49:00:4f:3c:4a:b1:e8:
59:69:94:db:4b:67:97:34:03:5b:58:82:0b:c6:20:b8:bc:07:
b0:3a:cf:39:0a:1d:58:03:aa:89:b1:6c:e8:de:4a:ec:76:9d:
0f:b7:10:95:46:b2:e0:f9:8d:74:2e:53:cb:8b:2a:ac:53:a5:
03:65:50:62:7f:e7:6e:a0:1c:d2:16:9a:1b:7a:b8:eb:7f:1d:
38:b2:c0:36:1d:df:77:9f:00:6d:12:c1:e3:8b:82:ca:d9:40:
cc:57:41:fe:a4:0b:cc:4b:c5:52:e7:4d:25:42:4a:6c:73:98:
e2:86:70:c6:b3:94:65:38:0c:c3:21:93:1e:1c:9d:a2:cd:1f:
f1:ac:1f:3e:36:0e:03:ac:c0:e4:e8:55:2b:fd:ff:99:c8:81:
19:b8:08:67:0d:9c:a7:ab:29:63:59:e2:58:76:89:4c:77:1f:
18:43:38:c0:2a:c4:61:95:3f:d9:5e:ce:2c:59:81:ea:ab:94:
39:b9:ff:71:5f:92:40:55:a9:c7:07:4a:95:d6:61:19:16:d6:
24:15:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:06 2026 by rpki-client