Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219071.roa
File: AS219071.roa (raw, json)
Hash identifier: bdJpsleGCTIZjznROQB8wD5tM1kgpR0kvLonv2W8mBU=
Subject key identifier: BD:E4:23:96:4A:BB:CA:AF:C2:88:E6:87:F1:71:06:1A:93:4A:45:5A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 41B45F9AAAC9888B58E0D0B5552E2F444FDB840D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219071.roa
Signing time: Fri 07 Aug 2026 03:42:06 +0000
ROA not before: Fri 07 Aug 2026 03:37:06 +0000
ROA not after: Fri 06 Aug 2027 03:42:06 +0000
asID: 219071
IP address blocks: 82.21.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b4:5f:9a:aa:c9:88:8b:58:e0:d0:b5:55:2e:2f:44:4f:db:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 03:37:06 2026 GMT
Not After : Aug 6 03:42:06 2027 GMT
Subject: CN=BDE423964ABBCAAFC288E687F171061A934A455A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:6c:58:52:35:ac:90:1c:95:3e:bc:88:a7:
1b:ae:d4:92:be:00:52:01:50:4a:17:b0:32:e7:81:
20:ff:22:52:7c:a5:69:97:0f:bf:3b:54:cf:ff:de:
f8:19:b3:f6:4f:58:88:37:23:97:20:fa:e8:4d:32:
fd:0c:91:55:ca:ef:2c:8e:83:15:17:91:f5:1e:35:
73:69:3a:a5:4a:0a:04:bf:ac:dc:5a:84:de:ff:6f:
10:02:af:08:5d:45:d8:7f:be:70:ec:83:20:9b:9d:
8c:5f:71:e1:44:eb:2b:0d:c6:e2:96:04:79:59:1c:
8e:71:a5:09:c7:e4:57:88:c5:5d:a9:99:47:29:82:
59:37:63:cb:07:ea:b6:10:0b:e7:f5:c7:be:ac:01:
87:94:c1:cc:bc:53:58:63:49:9d:49:cc:f1:cf:3a:
7a:7a:47:63:b4:e4:23:15:ed:40:4f:5a:89:84:17:
95:67:83:ae:1e:ea:1f:4f:ac:51:a6:0a:e2:f6:81:
c0:ae:3a:8e:bd:ec:0a:e8:52:b3:bf:31:83:28:23:
50:11:12:23:42:76:4b:79:25:f3:c0:c6:8d:b2:2f:
02:bc:bb:44:b5:ad:53:a2:c0:2e:76:de:32:c4:7e:
72:2b:b6:07:e4:3b:a1:b6:e9:37:dc:2d:fb:e8:86:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E4:23:96:4A:BB:CA:AF:C2:88:E6:87:F1:71:06:1A:93:4A:45:5A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9b:83:18:43:c2:a2:16:ab:0b:61:d4:d0:03:c8:84:bd:2e:
ff:92:cd:cb:fd:8b:d2:14:a5:c9:e2:dc:f2:3e:4f:a4:e7:8e:
28:1a:aa:5a:0e:b4:16:05:da:0a:7d:62:c6:08:fe:bd:fe:89:
7b:91:0d:1a:2f:a5:20:b3:2c:0d:5d:df:f9:c7:4b:94:02:42:
c7:29:b0:21:d7:86:bb:44:70:7d:de:f1:b2:26:bf:23:df:b3:
c9:bc:3b:87:11:7e:64:8a:0c:dc:91:77:7c:5b:a3:6d:a8:5f:
2a:1e:7d:18:5b:6b:da:63:46:29:58:38:6d:de:89:b5:29:d3:
61:f0:e2:10:71:0c:d3:ef:d0:1e:3d:8c:35:7f:7d:3f:1c:1a:
87:b1:97:1f:1b:91:2b:41:48:1c:cc:cb:a3:b3:43:54:78:fd:
f4:3e:f1:4d:1a:13:84:42:29:9d:e7:7a:a4:03:2c:24:e7:c6:
7f:ae:f0:a8:67:c0:fe:f5:32:c2:73:1a:2d:87:53:d4:dc:1a:
b7:a0:62:c2:8c:5d:8f:ea:fd:d7:43:ab:bc:b8:12:eb:03:b4:
ce:e7:89:d0:2b:9a:d8:f6:49:5a:e9:b6:76:f0:d5:02:34:be:
9b:45:7b:de:88:4d:82:ab:26:78:b9:10:57:ab:10:fa:30:a5:
db:5f:1d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:05:08 2026 by rpki-client