Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219425.roa
File: AS219425.roa (raw, json)
Hash identifier: VSxm38NSNchURQ0s6onlxO+5psdYO7mu0FP7FG9Q0Ac=
Subject key identifier: 52:61:12:03:EA:E6:21:8F:4A:F5:98:CE:48:50:51:00:E1:80:FA:9F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6813FE100D21A88A96F7778A94C4CA493D1F9D32
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219425.roa
Signing time: Mon 22 Jun 2026 01:43:46 +0000
ROA not before: Mon 22 Jun 2026 01:38:46 +0000
ROA not after: Mon 21 Jun 2027 01:43:46 +0000
asID: 219425
IP address blocks: 82.40.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:13:fe:10:0d:21:a8:8a:96:f7:77:8a:94:c4:ca:49:3d:1f:9d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 22 01:38:46 2026 GMT
Not After : Jun 21 01:43:46 2027 GMT
Subject: CN=52611203EAE6218F4AF598CE48505100E180FA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:f6:42:1d:d8:50:fa:94:5c:a5:48:e6:2f:
e1:2a:24:90:16:32:e3:da:3a:a1:11:f1:df:d7:88:
a1:ef:b9:4c:b6:07:ef:e6:1c:4a:a8:cd:98:b2:46:
84:84:22:06:5c:ef:b3:b0:f4:f1:8d:35:2b:f1:9e:
dd:be:92:30:ef:53:0d:2e:80:14:09:6f:09:5e:8f:
c1:82:2b:f2:ef:ff:30:f5:bc:99:54:ca:11:29:18:
f5:c1:95:3b:d5:8f:36:be:ac:a0:e9:6d:b3:72:52:
66:92:63:11:29:6d:8e:3f:48:63:15:02:36:ce:5a:
b7:35:b0:4e:1d:4f:14:8b:d8:f8:8d:6b:01:46:e4:
25:ab:6d:32:fe:7e:2e:95:f1:79:9c:48:a7:8e:d5:
85:29:2c:6f:3e:59:38:a4:f2:46:82:58:b3:7f:1c:
c0:f8:25:bb:af:f7:20:62:41:5a:0b:8c:ce:f1:4c:
45:c6:9e:60:a5:3d:5e:9e:a3:72:c8:da:a6:1b:fd:
a7:f9:07:6d:57:34:3f:ce:42:4f:6a:4e:ba:97:39:
18:00:16:a7:6e:fa:fc:13:2d:7c:20:ab:c6:90:79:
86:90:c2:fe:7a:ca:ca:0e:e9:6a:70:9f:62:d3:cb:
3e:ca:f0:b6:eb:06:44:cf:8a:01:3f:24:74:4d:e4:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:12:03:EA:E6:21:8F:4A:F5:98:CE:48:50:51:00:E1:80:FA:9F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.40.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:2d:a1:d2:c4:65:33:f2:e9:5d:ce:2f:51:f3:fa:22:f2:69:
a8:2f:56:9a:16:f6:89:3c:8f:4d:f1:5d:68:87:b2:be:75:08:
79:9f:57:8b:29:22:e6:88:b4:13:8f:ed:ee:9e:fd:d0:f3:c1:
4a:2b:19:46:23:2a:f1:3f:ee:45:0d:ba:7f:22:6f:1b:39:6d:
79:23:98:df:d6:ac:f1:c4:06:a7:c2:b3:7e:76:13:82:0d:82:
9b:ff:4d:38:bd:b5:bc:a7:d2:4a:61:bd:18:93:b1:54:84:b9:
89:36:35:cf:e0:5d:40:70:2e:84:e9:f1:15:49:6c:ca:61:23:
33:15:1b:70:16:c5:65:3b:28:be:8f:f0:d4:bc:48:0f:28:5b:
08:c3:36:45:cc:bb:71:52:d1:24:e7:87:0e:28:5f:06:8f:57:
20:34:2a:38:f9:e7:da:f2:00:50:35:80:27:2f:af:89:72:77:
75:ab:a7:33:b5:f6:ef:1f:be:85:c7:eb:0b:74:91:dd:e0:d3:
86:08:87:a8:b1:1e:76:a2:7c:fb:61:2b:6e:07:a8:c0:cb:5f:
f8:d2:de:53:f2:35:9e:40:91:32:d9:be:d3:04:81:9d:68:d2:
92:79:7b:4e:39:25:aa:ce:c6:ae:91:50:40:a7:1d:65:ed:f5:
18:f0:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:18:33 2026 by rpki-client