Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219409.roa
File: AS219409.roa (raw, json)
Hash identifier: jV2VILP6cWCYHKSomaspBH08yL7u2id9MxaY+EI9cgg=
Subject key identifier: 7E:B7:B1:CC:53:94:21:92:B7:38:0C:3B:1D:08:D8:FF:0F:08:4C:F3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 68A3476E5B3F9B3A9334B40705B4CE4763F43AC2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219409.roa
Signing time: Mon 29 Jun 2026 13:56:32 +0000
ROA not before: Mon 29 Jun 2026 13:51:32 +0000
ROA not after: Mon 28 Jun 2027 13:56:32 +0000
asID: 219409
IP address blocks: 82.22.13.0/24 maxlen: 24
82.47.170.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a3:47:6e:5b:3f:9b:3a:93:34:b4:07:05:b4:ce:47:63:f4:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 13:51:32 2026 GMT
Not After : Jun 28 13:56:32 2027 GMT
Subject: CN=7EB7B1CC53942192B7380C3B1D08D8FF0F084CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:ea:6c:ef:0b:40:40:4e:18:09:85:90:99:
c9:b6:0e:b8:2f:b7:5d:3a:0a:90:72:31:49:90:87:
1f:67:31:c2:b3:2d:34:19:13:fb:34:cc:88:08:e9:
0f:05:70:14:49:87:7d:fb:9f:64:5e:8b:05:5e:25:
e5:56:a0:de:78:6a:9a:b2:be:33:74:7d:90:5d:76:
eb:f1:b1:65:a9:0b:86:d9:5e:a0:cb:32:36:be:ef:
b6:84:c8:96:d0:86:ea:0b:0d:8b:24:7b:a8:45:ca:
69:a5:53:09:1a:a2:ee:83:03:1f:87:f8:16:96:4c:
dd:9a:14:cc:b5:88:d9:0a:45:67:2c:47:7a:2f:1e:
84:52:a4:55:86:1a:94:0d:b8:c7:65:86:5e:fc:87:
58:95:8e:41:61:ab:c3:e1:1b:15:68:91:16:78:43:
aa:d9:4e:bc:d7:91:bd:9b:41:6d:1f:29:2d:1b:8e:
c0:03:96:56:0c:cc:6c:40:ff:34:1c:9e:b8:cf:0c:
ee:01:d2:01:1e:13:15:73:76:66:7b:59:3b:20:6e:
92:5a:6b:60:ec:52:31:5a:cd:c2:3b:7f:ce:e5:4e:
9d:03:ae:30:50:13:12:ba:72:2b:da:02:4d:44:c0:
11:3d:3c:50:b8:fc:7a:b9:d2:62:eb:b2:e6:65:11:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:B1:CC:53:94:21:92:B7:38:0C:3B:1D:08:D8:FF:0F:08:4C:F3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.13.0/24
82.47.170.0/24
178.83.165.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5c:26:66:d9:02:66:45:d4:db:9b:e9:f4:b2:1f:0f:d8:95:
41:e3:0b:2d:d8:8f:0e:db:17:ad:ac:78:f8:56:0e:08:36:a5:
46:91:17:79:3f:5f:1c:96:d7:c4:e8:b4:c2:61:d5:c5:c7:4d:
53:e8:23:b9:08:0e:db:ec:e8:ce:2e:59:00:89:bd:d6:72:d8:
e2:a4:5c:d2:e4:23:66:90:50:f7:77:36:c4:56:26:fc:f8:e5:
8a:db:13:1a:59:7f:db:3f:c4:6d:72:27:ae:69:3f:2d:05:d7:
90:c6:0f:a4:8f:5f:cd:a1:05:67:de:04:78:70:5d:17:97:92:
7e:95:3a:c2:50:af:74:05:dd:3e:8f:2e:80:10:50:e1:a8:2f:
78:e6:72:26:f3:37:88:8a:12:d0:15:06:e9:c6:30:9f:fc:fa:
61:98:52:3f:ea:12:5c:40:96:5e:2f:71:88:62:0a:c6:a9:68:
66:fc:9a:7e:81:76:25:2c:ca:32:8b:e9:b1:aa:c8:89:17:48:
ca:e5:96:2d:84:b1:81:1f:7b:33:85:42:43:38:0a:22:7f:db:
8b:a5:2e:c4:7d:61:23:bf:1c:66:06:20:14:a4:bc:79:53:22:
f9:92:2b:c4:a5:30:b5:8d:25:9f:15:6d:53:1a:cc:25:c8:15:
99:2a:d7:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUaKNHbls/mzqTNLQHBbTOR2P0OsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MjkxMzUxMzJaFw0yNzA2MjgxMzU2MzJaMDMxMTAvBgNV
BAMTKDdFQjdCMUNDNTM5NDIxOTJCNzM4MEMzQjFEMDhEOEZGMEYwODRDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nOps7wtAQE4YCYWQmcm2Drgv
t106CpByMUmQhx9nMcKzLTQZE/s0zIgI6Q8FcBRJh337n2ReiwVeJeVWoN54apqy
vjN0fZBdduvxsWWpC4bZXqDLMja+77aEyJbQhuoLDYske6hFymmlUwkaou6DAx+H
+BaWTN2aFMy1iNkKRWcsR3ovHoRSpFWGGpQNuMdlhl78h1iVjkFhq8PhGxVokRZ4
Q6rZTrzXkb2bQW0fKS0bjsADllYMzGxA/zQcnrjPDO4B0gEeExVzdmZ7WTsgbpJa
a2DsUjFazcI7f87lTp0DrjBQExK6civaAk1EwBE9PFC4/Hq50mLrsuZlEW2zAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUfrexzFOUIZK3OAw7HQjY/w8ITPMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5NDA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhYN
AwQAUi+qAwQAslOlMA0GCSqGSIb3DQEBCwUAA4IBAQBBXCZm2QJmRdTbm+n0sh8P
2JVB4wst2I8O2xetrHj4Vg4INqVGkRd5P18cltfE6LTCYdXFx01T6CO5CA7b7OjO
LlkAib3WctjipFzS5CNmkFD3dzbEVib8+OWK2xMaWX/bP8RtcieuaT8tBdeQxg+k
j1/NoQVn3gR4cF0Xl5J+lTrCUK90Bd0+jy6AEFDhqC945nIm8zeIihLQFQbpxjCf
/PphmFI/6hJcQJZeL3GIYgrGqWhm/Jp+gXYlLMoyi+mxqsiJF0jK5ZYthLGBH3sz
hUJDOAoif9uLpS7EfWEjvxxmBiAUpLx5UyL5kivEpTC1jSWfFW1TGswlyBWZKtd5
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client