Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: 56QsChzbkzrOJLlCo0NmAIoGW7UelotanAt4EbCLZQw=
Subject key identifier: 6D:91:6A:2E:0A:6B:ED:50:84:CB:48:D5:13:1B:AD:E5:A8:67:9E:8A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1403F72B44FD1950C0EA64DE07F8B07459229C45
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
Signing time: Fri 10 Jul 2026 06:33:59 +0000
ROA not before: Fri 10 Jul 2026 06:28:59 +0000
ROA not after: Fri 09 Jul 2027 06:33:59 +0000
asID: 219427
IP address blocks: 82.22.37.0/24 maxlen: 24
82.23.137.0/24 maxlen: 24
82.24.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:03:f7:2b:44:fd:19:50:c0:ea:64:de:07:f8:b0:74:59:22:9c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 10 06:28:59 2026 GMT
Not After : Jul 9 06:33:59 2027 GMT
Subject: CN=6D916A2E0A6BED5084CB48D5131BADE5A8679E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:46:0c:2f:b0:ba:7d:21:97:bd:60:37:69:
cf:62:ca:bb:f6:0f:21:17:ee:ff:aa:ac:10:25:6e:
52:3a:29:a6:30:cf:5b:17:ba:cc:6b:f7:98:d6:d9:
8a:a7:03:a0:58:a2:4e:49:2e:c2:1e:c9:27:79:bd:
06:c9:f1:b5:2a:b3:69:c1:95:a2:18:7c:12:26:df:
27:50:bd:16:31:0c:69:f6:86:77:45:db:a6:cc:7b:
b9:43:dc:53:7c:19:f5:92:44:ce:80:b0:24:53:c9:
46:ab:98:2d:ac:fb:2c:03:fa:cf:ca:27:77:f2:cf:
38:fe:b1:ce:59:c4:6b:7f:72:91:d5:e9:9f:37:88:
ae:28:c6:7f:08:89:0e:5f:51:3a:66:b8:01:7d:55:
7c:d5:1d:52:c0:75:8d:ea:81:55:cf:dd:09:f2:be:
d1:e4:a3:aa:af:a9:f2:bf:5b:c5:bb:53:8d:c4:4f:
07:0b:2c:23:fd:d6:ff:1b:87:ef:ae:f6:36:57:42:
b3:9c:40:30:a7:82:3e:e1:25:2d:0b:81:78:51:ba:
dc:6e:64:25:4f:0d:d3:d6:9d:c0:6c:4a:f1:79:f0:
83:7e:31:26:4c:b2:61:25:2f:c9:30:55:43:a9:8d:
f6:4a:18:a3:7c:80:b4:e5:36:50:91:86:2e:cc:b1:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:6A:2E:0A:6B:ED:50:84:CB:48:D5:13:1B:AD:E5:A8:67:9E:8A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.37.0/24
82.23.137.0/24
82.24.21.0/24
Signature Algorithm: sha256WithRSAEncryption
69:da:92:30:08:35:c6:37:a1:ff:d2:8b:57:31:cb:66:dd:5e:
b0:5e:ab:d0:13:cf:f6:ea:15:66:59:f0:6b:7f:be:ee:d5:b6:
26:8a:5a:3d:5d:44:14:49:c9:11:d2:1f:41:5e:1e:b2:91:9a:
53:15:ef:fd:8e:80:4f:28:00:8b:02:90:70:70:c9:29:17:33:
fc:c1:f8:38:ba:a9:a1:79:8e:14:a0:bf:db:2f:40:27:d4:90:
05:67:b6:37:50:9d:f6:d2:aa:ec:8a:1d:61:4e:79:36:cb:e7:
1f:22:b3:70:16:e7:2e:c8:3f:0a:8f:92:94:7f:27:e1:68:77:
10:75:de:8a:5e:35:b1:58:0f:2a:dc:89:41:df:cc:ee:63:94:
d2:e3:fa:5d:00:f6:0f:54:be:d9:fe:c9:9d:6a:12:b8:eb:7a:
ff:13:45:6f:ad:75:5f:bb:c7:67:32:2f:bf:4a:0d:72:45:ff:
fe:80:31:a5:35:39:55:4a:96:1b:89:7d:e7:e6:fa:e9:70:67:
51:b4:a1:0d:a8:92:0f:46:e3:f6:87:c5:35:8e:de:d1:39:c0:
d0:2b:d6:d2:b5:fc:a6:b7:b6:93:00:93:70:b2:2c:b0:b7:60:
52:50:74:d6:85:6c:4a:86:5d:43:c5:44:40:a1:5b:2a:56:fb:
a4:34:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client