Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219160.roa
File: AS219160.roa (raw, json)
Hash identifier: BqrVGWjqegZRG+o9N3OHsMuOSdBY0IB2q3VHj3vkCnw=
Subject key identifier: 5E:35:D5:8C:07:8F:1D:D9:63:90:6B:F9:C3:59:3E:0C:45:59:64:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5CEB17DCFB74C24D313646D9ADEDCD2FCC103D03
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219160.roa
Signing time: Fri 24 Jul 2026 18:43:05 +0000
ROA not before: Fri 24 Jul 2026 18:38:05 +0000
ROA not after: Fri 23 Jul 2027 18:43:05 +0000
asID: 219160
IP address blocks: 82.39.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:eb:17:dc:fb:74:c2:4d:31:36:46:d9:ad:ed:cd:2f:cc:10:3d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 18:38:05 2026 GMT
Not After : Jul 23 18:43:05 2027 GMT
Subject: CN=5E35D58C078F1DD963906BF9C3593E0C4559648B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:e0:a1:da:e9:e5:a9:84:c0:96:4e:5f:42:
f0:d5:0c:9c:ce:71:e1:8f:8b:88:5c:2d:99:94:50:
9e:db:23:f9:03:ee:2f:69:91:aa:a4:d6:75:88:ac:
74:65:ce:db:e0:54:38:41:04:86:b9:67:4d:14:0e:
bd:c6:ba:e6:1f:27:d2:5a:f3:02:2b:21:8b:87:14:
0a:be:e1:63:29:2c:59:f8:a7:07:a9:87:48:90:be:
5a:82:39:60:a3:60:1a:2f:1f:15:6a:d4:79:45:bd:
72:c0:63:23:60:d7:d3:95:50:1c:b4:5f:c3:2b:bd:
1f:bd:86:8e:7b:75:1c:1f:f6:8a:62:03:00:9e:c5:
c5:66:8e:38:f8:a4:78:e8:fc:91:f0:14:b0:f8:ba:
6b:d3:96:2d:f3:8b:94:f3:d1:f4:d7:0b:ab:92:42:
43:c7:da:30:76:13:0f:6f:21:87:99:02:91:55:a3:
dc:9b:05:4e:b9:3a:b8:82:0e:98:93:71:aa:9b:35:
a1:6d:8a:39:49:e8:ba:3e:fb:55:55:f2:01:2e:f1:
fe:ce:b9:8c:99:3a:73:b4:d3:da:fb:8a:c2:a3:4f:
da:44:e0:45:df:bd:df:d6:89:28:21:f3:c9:67:aa:
e0:d2:7e:95:99:27:a2:70:b6:f5:24:a8:0b:03:df:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:D5:8C:07:8F:1D:D9:63:90:6B:F9:C3:59:3E:0C:45:59:64:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.251.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2f:e4:57:9f:84:77:ef:67:f8:28:c6:0c:4c:55:81:6c:37:
b9:f8:df:55:7f:53:7b:04:7a:c5:50:ce:80:d5:d7:33:fa:91:
40:07:9c:9f:96:42:ea:9c:a0:13:20:6d:53:f7:f0:bc:ca:61:
31:4a:23:a2:bc:c1:83:89:02:03:70:26:f5:90:2a:a1:4e:c1:
85:60:2f:d3:c7:4a:f2:54:e5:e9:a3:f7:2d:b8:6b:d5:41:ea:
f6:3f:87:a8:20:06:06:0d:b6:7e:f4:00:fe:6d:14:e7:cb:c1:
e7:c2:36:89:b1:6c:c2:3c:db:ad:65:19:85:05:64:ac:7c:02:
e9:45:65:1c:42:a8:a1:50:5f:57:63:f3:48:01:b1:c4:21:1c:
a1:5f:29:93:51:00:10:a6:b0:87:52:ad:6f:29:53:e8:06:ec:
6e:68:30:76:64:b4:b6:cf:36:84:58:a8:de:f1:92:72:19:d5:
63:7d:a2:18:c4:12:6d:45:05:0f:7a:0e:76:6f:e7:a5:86:0e:
dc:0b:b3:df:77:04:f5:90:f1:e3:b6:88:ca:1f:fa:a3:d3:a0:
bc:80:64:65:45:1c:2f:9b:e0:32:28:19:de:a3:ca:d8:f7:e0:
8c:a3:6e:c4:10:c2:05:6f:dc:f1:fb:27:74:9a:85:cc:66:4b:
a7:b4:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 11:37:19 2026 by rpki-client