Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: yrQ1M52SCyYz1zR5ZDwLagAc4qugAIHVEh/WaNoaFkY=
Subject key identifier: 6A:B7:48:BB:A3:60:62:B1:AE:DC:A5:0B:85:C0:64:30:CC:9F:F5:82
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 47E617A3BB68E73F53988CEB7B1D2F9CC28F1428
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219393.roa
Signing time: Mon 29 Jun 2026 14:17:18 +0000
ROA not before: Mon 29 Jun 2026 14:12:18 +0000
ROA not after: Mon 28 Jun 2027 14:17:18 +0000
asID: 219393
IP address blocks: 82.38.201.0/24 maxlen: 24
82.41.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e6:17:a3:bb:68:e7:3f:53:98:8c:eb:7b:1d:2f:9c:c2:8f:14:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 14:12:18 2026 GMT
Not After : Jun 28 14:17:18 2027 GMT
Subject: CN=6AB748BBA36062B1AEDCA50B85C06430CC9FF582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:78:9c:0c:0a:3a:dc:c4:e5:44:b9:86:28:2d:
f4:47:23:44:f0:38:44:6c:32:54:00:06:bb:3d:e8:
e5:0c:ef:68:14:15:c7:94:ed:03:43:07:7c:b0:da:
45:13:f5:04:16:9a:d7:75:1c:05:9b:2c:e4:0d:9e:
e2:0e:e9:07:83:f5:32:0c:e5:e5:ba:cd:27:7f:24:
6e:3c:2d:61:cb:da:6c:6b:7c:69:cd:f7:3b:19:30:
3f:ad:fc:31:f9:7e:1e:e5:f5:d6:61:f2:e3:54:7a:
7f:6b:60:d8:b6:1d:a0:9c:50:d0:d1:b6:af:3e:a0:
d5:d7:41:70:1a:40:f0:cb:6a:27:15:38:a8:22:0d:
bd:6d:ef:c9:4f:de:fd:75:75:63:c8:3f:18:33:5c:
c5:9c:a6:16:3f:4b:42:e1:1a:99:60:f0:94:84:26:
de:b5:e1:81:84:0e:d4:e6:aa:00:ca:43:46:0e:e6:
b2:78:50:bd:a0:56:71:df:dc:49:bb:6f:b7:c1:cc:
70:71:56:be:ba:a4:c0:7e:60:41:de:d4:fc:90:03:
e6:84:57:ff:6f:31:41:95:3e:65:02:52:29:08:6e:
59:5b:83:67:ad:0c:b3:07:d5:33:20:c4:89:eb:33:
eb:53:fc:1f:29:79:be:90:e8:3d:42:c6:ea:7f:56:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:48:BB:A3:60:62:B1:AE:DC:A5:0B:85:C0:64:30:CC:9F:F5:82
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.201.0/24
82.41.75.0/24
Signature Algorithm: sha256WithRSAEncryption
13:df:88:86:24:93:55:c1:a0:73:51:54:11:21:6f:e9:85:95:
12:a8:4e:48:3a:4b:81:66:7a:69:7e:a7:8a:97:fe:84:ac:0d:
2c:af:ba:ab:20:22:4e:f1:a8:46:a1:3e:fb:76:ec:10:f0:bb:
ff:02:27:e5:6d:ae:13:55:1e:4d:4c:7f:24:e3:b0:78:d8:d6:
21:a2:61:85:3d:c8:5e:4f:4e:a9:32:90:73:ac:9a:1c:4a:6d:
f6:d2:57:99:ef:8f:cc:8b:0a:a0:01:58:1a:87:64:3a:52:4c:
20:98:17:6a:09:b2:25:d0:b7:c7:c3:ca:41:7a:cd:73:ea:c0:
4c:e2:31:e3:56:f1:00:2e:c0:ae:73:80:75:5a:10:9d:96:08:
25:71:f5:60:65:4f:66:bc:10:99:59:a0:a5:70:fc:52:64:be:
13:38:d0:55:7d:63:a6:64:2e:b6:fe:d9:19:55:94:01:5c:1d:
e2:99:00:6d:ec:65:5f:1c:31:c5:e6:7f:30:18:06:84:96:04:
b7:9a:d2:1c:93:c1:52:e9:d6:53:30:62:26:57:5d:96:27:28:
23:55:34:1b:ec:06:73:a2:2e:77:8e:f3:ce:cd:88:26:dd:71:
51:18:a5:be:9b:73:dc:29:2c:10:a3:e0:89:0f:de:ab:96:19:
cf:c6:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:55:55 2026 by rpki-client