Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219444.roa
File: AS219444.roa (raw, json)
Hash identifier: glwL0R/aLN7mvmr9Z1HuLipWrHBTQMg2P//yuZeAA2k=
Subject key identifier: 3F:45:E1:BE:CF:F0:BA:4F:68:65:C4:9F:59:B1:8F:42:04:5D:7D:63
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D151942383A6488551A4D602D15870FF87B42A2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219444.roa
Signing time: Tue 14 Jul 2026 07:17:49 +0000
ROA not before: Tue 14 Jul 2026 07:12:49 +0000
ROA not after: Tue 13 Jul 2027 07:17:49 +0000
asID: 219444
IP address blocks: 82.39.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:15:19:42:38:3a:64:88:55:1a:4d:60:2d:15:87:0f:f8:7b:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 14 07:12:49 2026 GMT
Not After : Jul 13 07:17:49 2027 GMT
Subject: CN=3F45E1BECFF0BA4F6865C49F59B18F42045D7D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:68:dc:82:cc:28:09:2a:8e:e4:2c:75:8d:
f0:dd:48:44:b5:7a:6e:bf:d9:30:73:d5:3a:ce:85:
be:c3:a2:ce:07:2f:16:7d:43:31:99:a1:34:50:f6:
38:21:68:df:0e:77:92:de:c5:7b:c5:07:3a:78:99:
c0:28:39:c8:68:89:80:c6:da:74:26:f1:67:25:00:
03:45:92:27:cf:d5:0d:05:34:cb:06:b8:19:1a:28:
c3:b8:59:57:dd:f5:93:97:bc:ad:90:39:a5:d0:12:
c5:66:f3:e1:33:66:17:ce:57:d7:5c:76:04:1b:d4:
c7:54:77:d4:50:e0:3c:0d:2f:9d:d5:95:cb:ca:21:
35:10:60:2c:e7:b8:fc:90:e5:a8:3c:25:59:c2:59:
d8:36:fc:7f:17:54:13:0c:2b:92:67:04:c2:49:c0:
2f:a3:15:bb:b4:bf:c5:dc:ce:a7:5d:73:ca:47:b4:
73:46:bd:22:31:87:25:88:00:91:72:bc:d3:da:2a:
86:27:3e:36:8d:50:82:f6:08:fd:e7:c9:87:3c:9c:
02:0b:95:6b:ac:c9:15:bd:6e:23:f0:24:28:05:05:
ba:54:3b:17:8d:23:a6:df:44:5b:fa:e5:e8:e8:be:
96:9a:dc:6d:52:30:94:6d:bb:e6:ec:bf:56:14:0a:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:E1:BE:CF:F0:BA:4F:68:65:C4:9F:59:B1:8F:42:04:5D:7D:63
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.116.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:62:99:05:ed:51:88:2e:c9:5d:93:2a:00:c8:5f:52:24:ef:
ae:50:0b:d6:9b:ab:9c:e8:21:05:e7:08:c6:a2:5b:72:cf:ab:
e3:71:7b:51:87:f8:31:38:ed:8f:1a:dd:f2:7d:c0:b3:e2:36:
04:f1:9a:ca:1d:94:2b:2b:f6:49:0e:d5:48:16:74:9b:cb:90:
3b:22:4d:70:82:6a:c2:f7:fa:83:45:a3:c8:1f:07:a6:d0:5d:
07:3c:fe:6f:79:88:51:76:d0:40:3f:37:58:32:1d:d2:70:0b:
a2:9e:ee:5d:9d:af:bd:15:72:1a:77:dd:1f:46:52:dc:bb:02:
13:6f:48:ba:eb:4e:61:6c:80:0b:1e:5e:be:0a:29:6e:e1:43:
ad:f5:a2:19:48:61:c9:38:8f:fe:5b:75:30:70:58:3c:5c:33:
41:fc:10:90:3a:94:d9:cc:ae:35:56:ba:ee:b2:46:6e:91:0c:
81:ea:17:f1:7d:6d:77:60:76:9c:68:84:d1:44:1e:a3:6a:08:
f1:61:72:e1:89:fa:a5:f6:56:5d:e7:a3:b6:07:6a:49:4f:94:
d3:2a:b6:ab:cf:4c:c1:0b:e7:08:9c:22:6e:f9:67:46:c3:01:
50:a6:e3:ab:a8:46:e8:f7:d1:90:fd:54:59:d9:ed:32:4c:dc:
43:2e:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:53 2026 by rpki-client