Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219328.roa
File: AS219328.roa (raw, json)
Hash identifier: RgA9XYqQyTQNi8fnT8ZyhJQO7nl7FV9xoHpZCAxANws=
Subject key identifier: 53:0F:D7:64:30:D1:B0:AE:FA:59:88:AE:34:FF:69:04:E5:CF:91:BB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62CF16A121075616F98BA8B82643937983D6B78D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219328.roa
Signing time: Wed 08 Jul 2026 08:19:18 +0000
ROA not before: Wed 08 Jul 2026 08:14:18 +0000
ROA not after: Wed 07 Jul 2027 08:19:18 +0000
asID: 219328
IP address blocks: 82.47.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cf:16:a1:21:07:56:16:f9:8b:a8:b8:26:43:93:79:83:d6:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 08:14:18 2026 GMT
Not After : Jul 7 08:19:18 2027 GMT
Subject: CN=530FD76430D1B0AEFA5988AE34FF6904E5CF91BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:01:1c:9c:ea:50:c1:ad:ba:45:60:a0:fb:
28:60:e3:20:8e:68:24:a9:63:6d:07:8d:64:3a:0d:
6e:a9:f4:37:f0:46:43:23:52:7a:76:2a:61:0d:b5:
f7:98:d5:e4:a2:f1:f0:6e:5b:57:58:fe:ab:38:65:
a4:b6:14:60:f6:e4:a1:2b:c7:2f:f1:30:4c:a5:cb:
2c:49:05:2e:83:f9:09:ad:b4:f1:74:33:20:5a:1d:
3c:ac:e7:ae:3a:82:8e:2a:90:3e:d0:08:3f:e4:49:
af:b3:5d:49:b9:be:a3:b7:97:b9:43:b5:c3:63:e3:
4f:0d:46:30:02:72:b6:b6:35:46:9b:ff:3c:b8:2c:
dd:f1:6d:37:c3:a1:aa:c5:d3:cd:db:ed:1a:31:ff:
ad:c5:bf:df:ba:63:72:94:3e:81:2f:48:c1:df:ee:
67:ea:2c:b6:31:69:46:c1:ec:d2:ec:da:ae:fd:f8:
70:df:d2:8c:d2:44:c4:43:00:fb:ba:58:e1:1d:c1:
70:82:ca:88:13:ed:84:a7:63:1f:4a:4b:04:d3:d6:
cc:68:9f:23:4a:ee:72:e0:16:62:cd:ee:2a:18:97:
a1:eb:ac:a9:88:b7:d9:46:1e:13:76:1a:9a:7d:2a:
8c:a4:7e:30:13:ca:4a:e4:2d:d8:10:a7:46:f6:ec:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:D7:64:30:D1:B0:AE:FA:59:88:AE:34:FF:69:04:E5:CF:91:BB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.45.0/24
Signature Algorithm: sha256WithRSAEncryption
22:39:36:d7:e5:dd:7b:b7:f7:ec:72:78:06:b5:9d:88:88:19:
0d:5c:d7:52:f3:32:00:5d:ab:c9:ed:01:a9:68:f2:06:9e:7e:
16:80:44:29:21:5f:ea:ae:64:fa:be:e4:d5:db:87:46:b9:73:
20:0c:4d:29:96:85:20:d9:55:0c:35:72:53:f3:41:79:de:99:
f0:df:0b:b7:43:9d:74:ae:a4:f2:b7:e7:c6:2e:5b:08:ce:5e:
8e:87:36:3e:79:41:6b:7c:91:31:b8:a6:db:dd:82:03:bd:fe:
68:ef:12:ea:4e:28:9e:32:51:56:45:ef:d4:9e:7c:e0:3f:a3:
39:2d:cc:5a:29:0d:95:6a:b7:65:5a:cb:4f:56:0c:7b:74:b6:
c8:ca:84:98:25:05:b3:ef:3c:c1:db:cb:23:ab:2e:13:36:e5:
43:d0:08:4a:5f:2a:18:1b:c2:4f:ea:2d:d0:02:be:04:f2:7c:
77:76:2e:87:73:d4:59:0c:74:1a:5f:1c:0c:cd:33:27:93:5f:
09:4e:73:eb:bf:65:aa:59:66:e9:84:af:c2:ba:df:a3:ae:6e:
d7:88:67:15:8d:2b:13:63:78:6e:33:e4:84:0e:e3:2a:0e:e0:
ca:b8:28:5f:70:86:62:66:3f:3f:75:74:ad:fa:f3:66:e8:96:
98:29:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client