Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219252.roa
File: AS219252.roa (raw, json)
Hash identifier: CfmdrMC6FWL6Oz1g9M5GoddK/Kh3XCPUOOnWGLi5QOM=
Subject key identifier: 11:65:F6:B2:7F:FD:B1:28:4A:91:0B:94:B1:A3:8A:AD:01:75:EF:00
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 475A91234C3C13C7967FD54D5D9ACF251FBB9536
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219252.roa
Signing time: Sun 16 Aug 2026 11:22:03 +0000
ROA not before: Sun 16 Aug 2026 11:17:03 +0000
ROA not after: Sun 15 Aug 2027 11:22:03 +0000
asID: 219252
IP address blocks: 82.47.159.0/24 maxlen: 24
2a13:9500:18c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5a:91:23:4c:3c:13:c7:96:7f:d5:4d:5d:9a:cf:25:1f:bb:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 16 11:17:03 2026 GMT
Not After : Aug 15 11:22:03 2027 GMT
Subject: CN=1165F6B27FFDB1284A910B94B1A38AAD0175EF00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:54:6c:43:ae:7a:9c:08:5e:49:b4:22:d0:
10:05:2c:54:47:f3:b4:12:69:89:98:f6:43:3a:c0:
63:0c:58:02:00:a2:d6:6b:52:91:23:34:78:8c:91:
6b:c5:78:5a:7d:6e:09:bd:3f:02:73:0a:f0:20:c6:
da:d0:99:81:40:ec:00:9f:e2:39:98:43:d7:a2:ca:
ca:3f:33:b8:ed:fa:9e:c4:98:79:09:0f:19:46:00:
42:b9:62:96:79:f4:f1:5a:3a:f9:cf:49:ff:c6:f4:
a8:58:8f:6b:1f:12:57:fb:57:d9:62:1c:c2:91:2b:
ca:12:9a:d0:f2:c0:c8:4d:c6:0a:4d:7c:54:de:94:
90:51:be:b3:31:1e:a4:97:d6:16:96:16:66:24:7a:
59:69:62:c0:dd:86:f8:99:29:5d:94:84:ad:7f:ed:
49:5d:c4:cb:5e:0b:b8:52:a8:45:ea:92:8a:8d:b4:
c7:d5:ed:42:56:dd:e8:8d:0b:47:15:2b:c8:3a:9e:
0c:d5:b4:74:06:92:c9:2f:3a:be:47:ea:a9:f0:c9:
87:5b:57:60:3b:db:3c:0c:a4:2b:68:75:70:99:ca:
f8:f6:be:59:48:af:a5:b2:9e:a3:c1:d9:ec:3a:ac:
c5:57:4b:bc:c3:e8:5b:41:9d:e5:d4:0f:f0:0c:3a:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:F6:B2:7F:FD:B1:28:4A:91:0B:94:B1:A3:8A:AD:01:75:EF:00
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.159.0/24
IPv6:
2a13:9500:18c::/48
Signature Algorithm: sha256WithRSAEncryption
72:6b:28:d0:fc:9f:76:4c:1f:70:2d:13:6d:fe:b1:68:16:22:
4c:c6:7e:e8:53:90:1a:73:91:95:84:d6:db:18:7e:41:a9:d9:
dc:4e:d8:6e:67:4c:82:c2:e0:7f:ed:4f:76:6b:a3:d1:61:c0:
c7:b1:e1:22:a1:e4:2f:67:85:c0:7c:c8:d6:0f:1e:b1:da:a7:
b3:e5:32:92:0f:b0:85:87:cd:bf:bc:dd:ca:2f:51:a7:54:b0:
fb:fb:30:f2:63:43:e5:94:22:f5:a8:5b:1d:62:85:d4:ee:57:
c4:46:91:24:6f:12:1e:55:58:4c:3b:40:56:58:b8:03:8f:15:
08:27:11:a5:7b:9a:ae:06:76:12:4e:eb:3b:85:9f:d7:bf:45:
eb:1f:e5:5f:b3:d9:40:75:55:05:18:30:b9:c7:a8:29:8e:32:
b0:56:26:f8:60:aa:fb:c7:8f:e9:53:c0:89:ff:66:47:41:9a:
74:82:61:7a:50:f9:5d:95:23:85:84:84:05:04:49:3c:a5:06:
38:db:fc:c6:ed:70:5b:96:21:c9:46:ca:ea:6a:4c:4a:51:01:
c5:08:39:f5:d1:b8:d2:71:b7:6b:22:93:cf:af:5d:d5:a9:42:
75:15:00:73:4c:9a:be:17:83:eb:74:79:bf:23:bf:e2:45:50:
2e:a6:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:21 2026 by rpki-client