Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: gn5oSH1H8rTLQHfSIkJQ2OwSvBvCtllXcQUaW/0TeEM=
Subject key identifier: ED:BC:2F:62:12:90:12:11:F8:78:18:03:75:53:32:40:46:0E:2E:BB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4937EE275E1A83010D0CB7BA997DBF9400EF9BC2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
Signing time: Tue 06 Oct 2026 17:17:11 +0000
ROA not before: Tue 06 Oct 2026 17:12:11 +0000
ROA not after: Tue 05 Oct 2027 17:17:11 +0000
asID: 219075
IP address blocks: 178.83.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:37:ee:27:5e:1a:83:01:0d:0c:b7:ba:99:7d:bf:94:00:ef:9b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 6 17:12:11 2026 GMT
Not After : Oct 5 17:17:11 2027 GMT
Subject: CN=EDBC2F6212901211F878180375533240460E2EBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:7b:78:f8:eb:c4:57:42:eb:0d:77:6f:4a:
19:63:89:ce:72:c3:19:b1:a2:9d:c8:aa:fe:20:6a:
fe:fd:70:4d:67:21:fa:3a:1f:e4:ac:9f:f1:ee:67:
f3:50:14:6d:48:c5:d1:0c:eb:09:4b:91:3a:04:7d:
1e:77:fb:69:b5:79:f6:98:bf:d8:61:c8:0a:da:ae:
1e:68:fb:16:24:9b:81:dd:9b:54:e2:e9:2a:5c:f7:
09:ef:ae:4f:2b:d6:a9:66:63:d1:f5:aa:a5:02:5b:
9a:f9:43:ce:17:e3:5a:f8:7a:aa:f8:b1:e5:ce:6d:
13:6b:91:d8:0a:b0:07:7c:79:31:ea:7c:dd:d9:e2:
6c:75:52:ea:a1:0f:97:78:af:ae:d5:29:af:f9:ea:
13:b2:4d:c0:b3:ef:01:da:db:a9:22:bc:18:a9:25:
0f:19:eb:96:b2:3b:a8:c2:5b:41:e6:98:61:49:e0:
75:d6:86:20:6a:fa:b2:9f:70:02:6c:e3:6b:57:84:
6f:a2:d3:59:87:0e:74:c3:d5:76:50:ba:20:70:16:
df:f4:cf:73:ef:33:78:1c:cd:14:21:f8:94:2e:65:
db:8b:2b:74:24:35:b7:0c:57:20:80:71:04:f4:58:
cb:33:35:85:a7:77:a8:45:51:2e:b5:db:bf:26:e8:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:2F:62:12:90:12:11:F8:78:18:03:75:53:32:40:46:0E:2E:BB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9a:6d:b2:29:15:12:40:ba:c0:eb:f6:5d:e9:b0:c5:67:71:
25:16:b2:7a:ba:37:7d:24:eb:84:35:03:2c:c2:5f:3a:d7:21:
08:28:07:6e:b6:82:d1:4c:6c:4f:4d:e0:19:fb:ef:cd:1b:17:
55:c8:f1:67:c2:d4:84:be:45:4b:38:71:6e:37:21:35:15:3b:
e0:50:a8:43:7a:81:75:a4:bc:72:77:10:85:5a:1b:2e:e1:ab:
d5:ef:8c:64:f0:29:83:7c:39:01:19:10:86:9e:40:6a:64:9f:
9c:8b:5b:a5:a6:56:fd:54:96:ba:e3:63:61:d1:33:92:fa:16:
0a:82:42:3a:62:24:2e:c9:52:6d:4d:4d:20:55:da:65:3a:aa:
76:a0:43:ac:5d:24:c8:b4:fe:f2:66:74:f3:6e:18:1b:9b:7f:
3f:78:4f:19:c0:1e:4e:1a:87:6b:52:6a:1c:eb:c7:20:3a:88:
b3:8d:d9:70:b8:07:53:30:6a:54:03:51:67:da:8e:3e:8e:ca:
b4:72:05:8f:30:f0:31:9c:53:16:33:92:44:08:77:d8:3d:b2:
51:05:98:b0:9a:85:25:56:58:d9:6f:93:90:cc:93:e2:38:26:
aa:a0:e2:e7:b0:bd:dc:90:78:e4:a4:16:7e:7f:4b:40:bb:4e:
a1:f4:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:32 2026 by rpki-client