Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: KoXgh+94SWU6Ka9DAjxwaul0zRhIWAC/M/dRGWHhGC4=
Subject key identifier: 23:C2:FE:2E:1F:C4:81:17:48:20:A7:D2:49:15:78:A5:4D:BA:73:87
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F87FBAA24F62594C373FF73196C45E1565D37DA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
Signing time: Tue 25 Aug 2026 17:00:43 +0000
ROA not before: Tue 25 Aug 2026 16:55:43 +0000
ROA not after: Tue 24 Aug 2027 17:00:43 +0000
asID: 219427
IP address blocks: 82.41.238.0/24 maxlen: 24
82.47.60.0/24 maxlen: 24
178.83.131.0/24 maxlen: 24
178.83.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:87:fb:aa:24:f6:25:94:c3:73:ff:73:19:6c:45:e1:56:5d:37:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 16:55:43 2026 GMT
Not After : Aug 24 17:00:43 2027 GMT
Subject: CN=23C2FE2E1FC481174820A7D2491578A54DBA7387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:a1:ad:6f:c2:9f:06:53:63:f5:da:30:4f:
ae:6a:fa:78:db:e4:85:b7:fd:7c:74:47:0a:05:07:
e2:a8:a9:67:0f:ca:56:b4:22:a4:6c:3d:56:a7:f6:
e8:4e:b5:9f:58:74:ee:8a:af:d2:8e:ef:f2:62:af:
8a:d2:94:b0:2a:70:ac:1e:87:14:36:7e:3e:31:b9:
53:37:fd:7b:8f:7f:38:7c:b6:36:49:9c:36:dd:e8:
3c:5b:dd:fc:f3:a4:5d:3a:96:e4:04:54:a4:e8:5e:
37:35:90:2a:3b:84:10:9e:dd:da:85:74:88:69:3b:
9e:92:9b:66:3e:b2:d9:bb:50:90:ea:61:5b:97:dd:
fc:8f:44:c3:92:c8:12:35:39:5c:45:74:19:c7:e9:
4f:b4:07:02:8a:1f:28:31:8e:48:94:b2:5b:14:58:
36:6a:17:72:c8:e7:7c:ba:c8:67:2d:5c:19:98:f8:
df:d1:fa:d5:f7:89:91:93:11:ca:d4:1b:9e:d4:51:
f7:47:48:70:6a:98:65:0e:69:28:d3:2f:e0:6c:64:
da:72:ec:8f:6b:62:36:2c:e5:7c:5a:20:44:08:5a:
94:90:99:b7:c5:42:9f:27:38:14:0b:82:41:34:1b:
f5:ca:48:10:00:b3:d3:2d:35:cf:fa:78:0f:9d:82:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:FE:2E:1F:C4:81:17:48:20:A7:D2:49:15:78:A5:4D:BA:73:87
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.238.0/24
82.47.60.0/24
178.83.131.0/24
178.83.231.0/24
Signature Algorithm: sha256WithRSAEncryption
74:66:d5:f9:8a:16:57:3e:08:20:78:16:fe:6b:2a:72:6b:06:
9f:24:a6:59:93:0d:43:a8:b6:f5:6e:4d:5e:0c:6f:19:56:63:
29:b1:43:e8:00:66:8a:1c:9c:7a:3d:3d:3b:69:6b:5f:f0:c8:
8c:a0:aa:9f:7e:97:b8:b4:ee:3b:d2:3d:62:ce:6c:c0:fd:53:
94:35:27:5f:13:27:68:01:c3:ab:3a:d9:8f:71:e6:16:0d:1b:
aa:a5:e4:0d:df:a1:ff:ef:55:26:28:67:b0:43:c8:53:b6:99:
09:98:e3:46:10:50:97:d8:6b:83:c9:00:e8:2e:c2:44:da:8c:
ea:14:c1:78:1d:fa:ec:98:f9:72:da:94:7e:b5:ac:8d:60:3d:
97:d5:c9:b8:39:d3:6f:5d:1b:9f:34:66:38:01:2b:70:3c:c4:
b1:98:92:69:87:e7:9f:38:9a:c9:e6:d6:42:ea:21:47:81:71:
1b:5b:3a:cc:c9:05:f2:b0:29:df:c1:ed:db:94:d4:83:94:44:
e4:da:6f:3e:44:4d:e3:c7:9f:e4:0d:bc:bd:39:7d:30:e1:8a:
8d:10:2b:68:33:0f:69:f5:21:55:fd:29:95:c3:c6:11:ce:8c:
a8:cb:ae:87:25:e0:08:e8:b2:80:ca:ec:c4:c4:0b:ba:f9:e6:
dd:df:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:34:34 2026 by rpki-client