Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: 6aY0pPuPKUD3stmQm0N3BYNRCIdYQdy7HBKE+Xxhle0=
Subject key identifier: 0A:13:90:ED:52:74:69:B4:2F:DA:90:9B:77:22:45:09:64:0E:EB:F6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 083DEFA7826BF84E018794CE03E6B26C4B158903
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
Signing time: Sat 10 Oct 2026 14:16:02 +0000
ROA not before: Sat 10 Oct 2026 14:11:02 +0000
ROA not after: Sat 09 Oct 2027 14:16:02 +0000
asID: 219427
IP address blocks: 82.41.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3d:ef:a7:82:6b:f8:4e:01:87:94:ce:03:e6:b2:6c:4b:15:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 10 14:11:02 2026 GMT
Not After : Oct 9 14:16:02 2027 GMT
Subject: CN=0A1390ED527469B42FDA909B77224509640EEBF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:1d:f4:bf:1a:79:5d:e2:94:0f:51:9f:3d:
aa:a3:ba:fb:4a:6b:2c:b6:82:36:d3:15:a5:c4:88:
2f:96:f9:d8:64:30:8a:ea:ff:46:b0:f1:bd:17:c2:
6b:f4:b5:77:eb:f8:80:76:6f:27:a0:bc:b1:2f:fc:
59:f6:a6:bc:ce:b2:26:f1:71:ea:31:c7:b1:53:fe:
4c:73:06:f4:dc:fb:ee:2f:31:0e:51:08:0d:8f:9f:
ad:27:6a:d7:4e:3b:a5:d4:ca:66:08:78:85:56:54:
74:c4:36:31:d9:7b:b1:45:31:1d:e0:b9:7a:59:a7:
8c:ab:2b:81:1c:c4:fb:25:fc:71:33:f1:e0:89:1c:
14:7d:ff:3f:03:5d:6f:1e:37:33:b6:10:e3:a2:7f:
87:6e:a9:0d:df:54:a9:3a:97:16:ea:af:f5:d4:29:
d8:6d:24:70:13:1c:c4:bb:40:27:30:74:5c:3c:a9:
db:b1:6c:15:7a:0b:2b:0a:91:7f:9a:64:9c:31:49:
ce:93:35:d0:af:69:1b:81:93:35:d0:d6:2d:5f:34:
9c:0f:52:db:80:a8:31:77:8f:d5:7a:fb:37:73:e6:
69:a6:26:8d:da:7c:a9:7b:07:bf:08:81:07:b9:e9:
c9:6e:bc:58:72:9d:2a:27:25:8a:49:46:05:68:ca:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:90:ED:52:74:69:B4:2F:DA:90:9B:77:22:45:09:64:0E:EB:F6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c6:25:66:b1:c8:ab:d0:68:b1:f3:61:05:2f:5f:25:38:3f:
04:aa:ed:8b:39:39:31:e2:8e:03:a2:6c:f2:12:93:87:21:8d:
a0:4f:f7:65:63:13:ee:0e:6c:83:f7:04:83:47:a0:9a:77:66:
14:20:3d:aa:af:d7:a0:78:c3:f8:09:36:b9:83:d9:85:24:63:
a6:3f:95:e2:e7:60:e8:eb:e6:de:43:ba:a9:b5:f5:77:a2:62:
3e:2d:6a:4a:42:2c:1f:5b:3d:89:24:85:ea:9b:56:b2:b2:b7:
d4:ca:fd:27:80:ac:c4:15:c3:5e:04:00:d5:6e:e9:81:da:a2:
70:d0:dd:5b:bb:fa:fa:e1:e4:1f:a2:6e:d1:e2:73:14:43:cd:
8b:af:44:b1:f4:b0:08:7e:a7:67:37:98:e3:0d:62:25:06:f0:
be:e9:48:c6:73:e0:b6:25:8f:df:a6:ad:93:c8:a4:63:38:51:
5c:52:fa:5d:99:6b:40:6a:42:2b:22:1a:e9:60:d3:7f:f1:be:
77:d9:05:d4:30:ac:a1:2c:14:72:f5:e1:f0:2e:6a:8c:03:25:
86:49:37:e6:97:35:58:06:ab:db:ce:c4:f4:52:4e:02:ac:06:
80:18:b0:69:28:0e:60:d5:08:19:11:43:e9:3b:34:9a:62:f4:
b2:e6:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:46:30 2026 by rpki-client