Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: 0l5PFJ0U7qfBTFWeEszbtBLGqTgv8Qncgrd/xt2qxMc=
Subject key identifier: 5F:E5:A8:EC:04:1F:87:5C:55:11:7C:E9:75:37:2F:F3:AE:A2:18:65
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5FA7BBF0653356EB20C9F25E656060188654E91E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219105.roa
Signing time: Sun 02 Aug 2026 08:41:18 +0000
ROA not before: Sun 02 Aug 2026 08:36:18 +0000
ROA not after: Sun 01 Aug 2027 08:41:18 +0000
asID: 219105
IP address blocks: 82.21.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a7:bb:f0:65:33:56:eb:20:c9:f2:5e:65:60:60:18:86:54:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 2 08:36:18 2026 GMT
Not After : Aug 1 08:41:18 2027 GMT
Subject: CN=5FE5A8EC041F875C55117CE975372FF3AEA21865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:6c:98:a2:44:71:73:75:75:cf:f3:8f:4e:
8f:21:48:93:69:8d:4b:ee:26:b7:71:f6:79:69:0e:
51:b1:55:0b:d4:00:02:0d:b7:b9:90:cb:40:86:36:
f2:76:cc:22:c6:c0:57:7c:95:ae:70:87:91:45:2b:
55:ad:f2:1d:1f:66:36:11:dc:50:a7:8d:52:23:fc:
af:86:2c:c3:75:3e:3b:b8:73:2a:9d:e1:60:81:1f:
b9:c8:58:18:bc:49:ef:80:16:b4:16:e1:64:6b:36:
f0:0b:bc:aa:e7:47:32:c3:35:f5:39:97:fe:1b:9b:
0f:33:46:9d:e1:64:2a:30:71:aa:03:bf:73:70:92:
a5:ea:36:a2:b1:8b:6f:79:9d:77:1b:53:be:f2:0d:
59:b9:e2:87:bf:bd:aa:13:fb:f2:25:fe:78:5a:78:
c1:f4:4c:7b:ab:ca:04:e7:bb:83:83:9b:8e:06:a4:
ad:e0:09:7c:08:39:b1:e9:65:f0:50:d7:08:35:b2:
cf:62:24:14:ac:b3:05:03:af:52:90:63:e9:31:87:
c3:32:15:7f:1a:ea:9e:4d:0f:4c:6d:13:db:33:c9:
18:9f:e4:b9:ed:6c:1c:c5:a2:19:07:67:74:13:50:
01:21:c2:ba:12:9a:9b:b6:52:29:20:ac:ac:e8:40:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:A8:EC:04:1F:87:5C:55:11:7C:E9:75:37:2F:F3:AE:A2:18:65
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.196.0/24
Signature Algorithm: sha256WithRSAEncryption
81:75:e0:f9:cb:1b:52:e8:52:07:e2:ce:21:55:93:b5:d9:8b:
24:96:1b:3f:7c:9a:e1:8a:6a:ec:b7:c5:90:4f:50:42:e6:6e:
38:5e:7d:32:51:70:9b:2a:35:eb:85:44:00:87:fc:e0:f8:e8:
83:c3:eb:98:d0:2a:a0:33:c6:7f:f2:79:2c:f7:5a:a5:16:0b:
8b:be:22:40:eb:00:1f:05:47:25:95:b4:ad:93:fb:55:98:a0:
d1:6b:f5:4c:98:8f:5e:6f:48:81:70:f9:93:bf:4e:4e:f2:38:
e9:66:2e:0e:b3:a5:0e:eb:db:be:fa:77:8b:a5:4f:3b:e1:c1:
f0:9a:1f:98:e8:5c:30:18:0d:59:84:d8:03:ed:82:22:62:9b:
fb:31:8c:9c:47:65:67:d9:13:3b:ef:b8:8e:33:75:fe:61:d7:
11:28:65:b9:16:d9:72:57:2d:fc:e0:89:a3:9f:6f:59:96:db:
78:6c:fe:3b:63:67:38:2c:64:52:72:50:27:6f:9d:79:11:91:
37:ab:df:ff:08:53:47:fd:ac:4d:af:4c:0d:7e:3b:8c:ac:44:
aa:d7:92:df:3b:db:2c:b1:82:7a:51:ca:ed:4e:1d:56:56:38:
19:14:39:6f:9c:0e:ed:b2:e3:89:0c:c8:1c:f7:fb:c2:01:03:
72:83:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:19 2026 by rpki-client