Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219289.roa
File: AS219289.roa (raw, json)
Hash identifier: n3N3UgUfiN5Zg135KjuBn/R7b0l9DnFJRe1q8TYv7VY=
Subject key identifier: D7:C8:48:BF:5D:81:1A:CD:B0:7C:33:A0:3B:87:E9:78:70:7C:E5:14
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5695E104CFE0143C4E222949FBE5E30C38775840
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219289.roa
Signing time: Mon 24 Aug 2026 07:18:24 +0000
ROA not before: Mon 24 Aug 2026 07:13:24 +0000
ROA not after: Mon 23 Aug 2027 07:18:24 +0000
asID: 219289
IP address blocks: 2a13:9500:1c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:95:e1:04:cf:e0:14:3c:4e:22:29:49:fb:e5:e3:0c:38:77:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 24 07:13:24 2026 GMT
Not After : Aug 23 07:18:24 2027 GMT
Subject: CN=D7C848BF5D811ACDB07C33A03B87E978707CE514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:06:06:3b:75:9d:8d:95:a8:e4:bc:be:af:
6c:d2:0f:dc:11:fe:f9:3e:1e:c6:f9:60:17:33:e9:
07:fb:b3:f3:1d:b1:65:99:bc:48:a6:c9:d1:9d:ba:
21:ad:da:2a:c0:5c:de:71:36:0c:2b:a3:20:cc:f2:
d5:ca:a8:fc:05:1f:ed:81:0e:d9:e2:66:f8:b9:a2:
0d:aa:79:ee:a1:cb:bc:bd:a4:d2:42:40:32:a2:75:
dc:1e:b2:99:bb:47:11:7b:e4:68:d0:11:75:9a:ec:
3e:be:cb:e5:0d:8e:1c:53:b0:ae:4c:84:ed:2b:29:
36:7b:5e:c4:19:a6:26:f6:99:82:fb:13:67:84:c4:
97:12:37:21:1b:1b:e6:a3:e2:8f:9a:69:73:00:94:
73:99:75:e5:6c:e8:02:63:6e:12:aa:e2:0e:18:da:
59:ae:7f:c1:70:6e:e4:1c:d9:5c:ed:64:9c:85:8f:
2c:5a:f2:c4:ca:44:d0:1f:8a:dd:39:95:29:78:f7:
28:93:55:45:2c:db:6a:b7:97:66:ad:98:61:84:73:
40:75:5f:57:0b:aa:15:06:e6:8e:07:aa:7b:3b:3e:
fb:f3:10:ba:10:65:35:81:da:4c:06:f2:d7:fc:bb:
68:e1:ea:ff:72:9c:74:d0:b8:bb:0b:fa:1c:78:36:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:48:BF:5D:81:1A:CD:B0:7C:33:A0:3B:87:E9:78:70:7C:E5:14
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c6::/48
Signature Algorithm: sha256WithRSAEncryption
03:14:66:b0:fe:56:ee:86:a6:a2:9b:db:eb:3c:8e:47:df:eb:
b2:9f:ae:43:12:92:72:40:59:67:d4:a4:95:2f:ae:10:d0:5c:
88:c7:bd:a0:5f:e2:56:fb:13:0d:da:be:04:9c:10:d0:df:48:
d0:02:b4:6a:29:13:53:a4:09:2b:92:7a:77:6c:77:db:f3:b8:
81:81:28:99:dd:9d:80:e8:96:63:5b:b9:cb:e2:d6:98:29:56:
10:2b:c9:dc:23:0c:1f:9d:cb:a5:69:5a:4c:a8:10:aa:84:49:
00:d2:5a:46:f7:c0:dd:66:60:7c:10:59:cd:55:58:dd:fb:5f:
bd:4b:58:e6:23:4c:02:52:c4:fd:c5:69:4d:f9:6f:81:a9:7e:
bb:c7:c7:34:71:dc:62:1c:c7:84:20:97:57:a3:6d:5e:30:c9:
7a:6e:6c:ec:da:cd:2e:cc:82:29:af:c8:a3:e5:86:1b:1e:a2:
e5:05:7c:90:65:21:75:a5:cb:e1:b6:34:05:4f:90:17:a0:ac:
c2:ec:45:e5:01:ce:b3:9a:34:93:95:f5:d3:ea:ba:37:9c:63:
ea:17:28:2c:8b:77:fd:df:bc:8b:d2:42:1e:b7:40:35:4f:75:
2a:fe:0f:62:dd:69:f0:5c:72:27:bd:b7:32:e4:9f:3c:69:06:
de:60:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:23 2026 by rpki-client