Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219252.roa
File: AS219252.roa (raw, json)
Hash identifier: ENA4qWpNu4tjG3XR/WTMCVl/cSZNiNCozFor3EWcTS0=
Subject key identifier: 25:6F:7B:E2:4E:26:05:85:30:95:AA:74:C6:4D:8E:24:4D:40:FA:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16E99DA191D97DA68741132A048371E6819F0FC6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219252.roa
Signing time: Wed 08 Jul 2026 12:21:53 +0000
ROA not before: Wed 08 Jul 2026 12:16:53 +0000
ROA not after: Wed 07 Jul 2027 12:21:53 +0000
asID: 219252
IP address blocks: 2a13:9500:18c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e9:9d:a1:91:d9:7d:a6:87:41:13:2a:04:83:71:e6:81:9f:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 12:16:53 2026 GMT
Not After : Jul 7 12:21:53 2027 GMT
Subject: CN=256F7BE24E2605853095AA74C64D8E244D40FA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:2e:96:c3:ee:75:c0:6b:78:3c:f6:5f:ec:
00:a0:6b:fe:5b:fb:9f:2d:59:22:73:56:3e:bc:1d:
be:46:e6:c7:a5:12:d6:87:8e:32:80:f9:e0:e8:73:
16:12:0e:73:c6:78:28:99:09:95:ac:47:b5:81:c6:
5f:3e:72:e0:17:6e:39:bf:84:5d:12:e6:4d:93:44:
8d:f1:68:cd:24:10:f4:cf:d4:55:e8:ba:04:92:87:
90:3c:27:d6:27:eb:41:10:5d:5d:93:45:c4:f5:44:
31:c5:52:b7:4b:ee:e3:01:b8:c1:9c:e5:b7:33:f8:
63:de:25:c7:0d:f3:4e:d7:e1:41:7f:d1:d3:12:d3:
f3:46:59:3f:fb:fe:02:ee:65:bf:36:dd:54:c2:c6:
ea:23:4d:72:ac:22:33:3b:56:6d:2f:59:30:dd:8a:
67:7b:d5:90:1b:07:af:df:8e:d3:bf:43:a4:32:8d:
8b:71:11:0b:0f:0b:c0:72:f2:0f:24:f9:9e:f0:08:
98:44:fb:80:d0:50:2b:c4:95:1e:ee:02:76:8d:68:
60:dc:4a:ea:2d:dd:41:71:c4:9a:5f:d1:80:0f:3a:
9d:41:ed:f8:3d:3c:53:1e:4d:19:d2:ef:0e:54:a7:
ff:a1:d1:db:fe:27:47:69:55:1e:4a:03:0d:32:ee:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:7B:E2:4E:26:05:85:30:95:AA:74:C6:4D:8E:24:4D:40:FA:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:18c::/48
Signature Algorithm: sha256WithRSAEncryption
11:6f:85:31:e7:90:04:37:ac:d3:53:9d:0d:c4:e6:c9:a2:10:
7e:dc:a2:86:a0:c3:d1:f3:82:6e:72:c1:8d:f4:82:ea:2c:9f:
bc:42:0a:95:9f:5a:db:69:c6:49:32:4b:a6:ab:63:30:ca:1a:
e6:65:c0:1f:db:ef:a8:b5:b4:f4:c0:ff:9e:0c:95:7f:49:00:
4a:c7:4e:af:cc:d6:cb:4a:17:e0:34:3c:01:a1:5f:13:eb:44:
08:d0:60:2d:9c:71:b7:57:38:dc:66:03:d7:13:c7:e6:3c:09:
e0:7a:b8:f7:c6:4d:7e:d9:96:27:9e:50:92:6c:6f:86:8d:67:
a1:cc:de:8d:79:7b:33:ea:1b:f7:95:de:f0:72:9a:74:ce:97:
97:58:85:11:e1:c6:0d:df:f8:2f:ac:d5:14:a4:41:5b:9c:c4:
18:99:70:70:cf:39:30:20:60:e5:71:e5:ad:c7:e0:87:ae:13:
f4:32:56:5f:69:ac:64:44:41:69:c6:75:f7:6c:1a:41:ac:91:
23:55:99:72:5f:14:8a:73:67:f0:7a:14:ac:52:35:be:0f:61:
16:46:78:16:2c:be:86:f0:51:b7:69:98:5d:fa:4d:43:cf:f7:
ee:08:ad:bf:fe:f7:8f:01:77:fb:09:d3:e4:6b:86:05:43:03:
f8:da:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client