Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219410.roa
File: AS219410.roa (raw, json)
Hash identifier: 4Nl1ENkd66WHI2AijZb7rP3rNqRcYY7lGJofmkZaBmA=
Subject key identifier: 55:1B:30:9E:A8:FF:4D:09:B1:78:D3:28:93:FF:14:25:24:53:5D:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 70215461C086A5F46655ADE8FB3DF7802E314E13
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219410.roa
Signing time: Fri 31 Jul 2026 15:51:36 +0000
ROA not before: Fri 31 Jul 2026 15:46:36 +0000
ROA not after: Fri 30 Jul 2027 15:51:36 +0000
asID: 219410
IP address blocks: 82.47.152.0/24 maxlen: 24
82.47.153.0/24 maxlen: 24
82.47.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:21:54:61:c0:86:a5:f4:66:55:ad:e8:fb:3d:f7:80:2e:31:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 31 15:46:36 2026 GMT
Not After : Jul 30 15:51:36 2027 GMT
Subject: CN=551B309EA8FF4D09B178D32893FF142524535D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:dc:e1:bf:01:c9:f0:6b:f5:92:81:8d:28:
8c:69:d1:54:fd:17:50:e9:33:b2:9c:b9:d2:be:c5:
bc:a7:f4:22:b1:d3:7a:46:71:9a:0c:21:51:ca:94:
e6:5a:34:3e:23:29:61:91:61:b2:f5:c6:cf:38:5b:
f8:a0:02:bc:fe:e9:0f:44:8b:76:2f:d5:ae:46:7b:
a5:cc:b6:5c:f8:2c:7e:be:86:99:55:20:e2:13:2b:
a4:5b:7c:48:5e:1f:1a:57:7a:a9:08:ca:d9:82:d1:
85:c3:c7:01:86:21:7e:fe:38:3e:92:40:61:6b:08:
ac:aa:ff:39:14:ee:25:3a:97:93:09:99:62:3e:6e:
1c:d9:d1:10:16:b5:6e:ad:f1:ff:7e:b3:7d:ba:82:
06:1c:ec:95:7b:f0:57:0e:19:00:2b:67:ae:b6:6e:
6a:00:44:7d:3b:a8:a9:f6:b3:16:02:d6:5e:41:28:
fc:f6:89:e4:9e:c6:02:fc:f6:e5:92:b3:99:c4:f1:
3d:01:90:a6:62:06:43:70:1f:7e:26:c4:92:74:40:
f6:01:95:28:c4:52:db:81:ab:8b:5d:a3:af:44:bf:
c5:c0:83:70:6f:ff:9e:fb:f5:02:50:8e:71:8a:0f:
a2:7f:cf:ef:84:35:49:38:81:95:ff:67:e5:9a:b0:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:30:9E:A8:FF:4D:09:B1:78:D3:28:93:FF:14:25:24:53:5D:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.152.0-82.47.154.255
Signature Algorithm: sha256WithRSAEncryption
55:0e:e3:48:db:b6:81:e0:ec:0e:60:e4:56:dc:67:19:a9:68:
73:e7:72:18:7c:43:ac:99:13:33:42:61:57:91:2d:79:b0:4c:
5a:89:8c:0a:6b:8d:d2:7e:03:ac:36:41:2a:9a:f5:74:07:59:
d4:2a:8f:d3:8a:2b:cc:3e:11:f6:3c:50:9f:fa:d9:3b:f2:39:
dd:59:1e:24:64:d6:9a:52:e4:f9:69:32:7f:5f:54:5a:c0:97:
c4:9c:91:6c:92:a5:52:3d:c6:6f:f8:09:c0:6f:78:90:34:6c:
d2:38:60:b0:c1:bc:1f:d0:7b:de:f6:cf:66:a0:73:e8:f2:7e:
df:42:18:26:9f:b0:95:28:7a:93:9c:5b:85:e3:34:98:b1:9e:
df:ac:65:e5:fc:cf:dc:1b:2f:c0:bc:40:a8:23:15:a2:fb:7d:
46:e9:49:a9:6d:30:b8:92:33:68:a9:4a:4f:25:a6:1f:71:37:
95:f1:02:12:5c:6a:16:df:42:a4:46:be:b2:2b:28:ba:bd:11:
20:8e:73:f5:5c:f4:20:7c:7f:26:60:d4:32:cc:20:76:d8:84:
19:6e:94:8d:67:89:5b:8c:f6:af:a3:4d:83:9a:85:91:15:2e:
fe:1b:c7:9e:44:87:b3:fd:64:ce:65:8f:c7:73:dc:2e:08:ac:
28:0f:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:25 2026 by rpki-client