Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219446.roa
File: AS219446.roa (raw, json)
Hash identifier: sxA0zaNepncyf8RFheJzys4LhdOfgz27CMRvBv7GTkk=
Subject key identifier: C8:9D:0F:35:63:27:F7:93:63:0B:51:C4:1F:1B:83:FD:94:3D:1D:48
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 504123CB0E159E29B995640D49F3A1D8796248F0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219446.roa
Signing time: Wed 24 Jun 2026 23:06:26 +0000
ROA not before: Wed 24 Jun 2026 23:01:26 +0000
ROA not after: Wed 23 Jun 2027 23:06:26 +0000
asID: 219446
IP address blocks: 82.24.40.0/24 maxlen: 24
82.40.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:41:23:cb:0e:15:9e:29:b9:95:64:0d:49:f3:a1:d8:79:62:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 24 23:01:26 2026 GMT
Not After : Jun 23 23:06:26 2027 GMT
Subject: CN=C89D0F356327F793630B51C41F1B83FD943D1D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:5d:5d:91:11:e6:2e:95:22:eb:85:56:84:
bc:98:d0:dc:97:13:4c:63:98:2e:cb:2a:3f:1e:64:
32:ea:c1:6d:46:c9:2a:76:f6:cd:f6:86:cc:e2:ab:
30:46:d2:99:12:9c:40:0f:4a:f9:2f:b5:6b:34:71:
7c:16:76:b0:e6:2d:34:7d:38:4c:32:f1:37:43:6d:
8d:6f:d2:09:dd:7c:71:f5:ed:f1:19:f6:87:f6:e0:
8a:c2:1a:24:46:16:50:8f:cb:55:00:41:c2:52:4d:
1d:b8:c1:6a:0b:3f:76:ec:52:e7:51:9c:02:37:ee:
5b:94:68:5f:65:62:37:e2:75:69:8b:54:1e:9c:cc:
01:76:2c:64:73:e7:c4:e4:f3:6e:12:b7:f8:47:70:
97:ee:97:e1:9e:31:bd:1d:32:2e:51:03:17:12:50:
46:e2:8f:f5:d9:5f:cd:37:15:51:0b:8a:95:b4:d0:
66:ee:0b:b4:52:fa:bf:cb:b7:58:ff:73:e9:1c:21:
ba:f5:a0:c9:71:fa:4e:c8:22:68:a5:62:3c:45:ad:
2b:52:a6:73:9f:df:2e:ed:3a:21:b0:66:d4:f9:0d:
5d:5e:cb:84:24:75:b4:f3:8e:b3:d9:48:1b:84:ed:
26:b7:48:04:91:a9:9f:16:be:62:91:87:05:b5:b4:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:0F:35:63:27:F7:93:63:0B:51:C4:1F:1B:83:FD:94:3D:1D:48
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.40.0/24
82.40.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7f:78:fd:c8:0b:2b:bb:b1:c8:77:26:52:e0:26:64:a0:e0:
e2:9c:b0:6d:20:a8:c1:0d:ae:78:9d:b8:b8:30:f0:ac:b3:d5:
4d:3f:5f:f4:c6:95:82:0e:2f:95:53:5d:2d:3b:9a:6f:12:da:
fd:6f:c1:3a:c2:6c:b0:7f:c6:10:f1:24:81:a3:8b:aa:bd:74:
13:1c:52:40:1a:0a:cc:f6:1e:ad:60:af:6f:7e:9d:ac:8b:3c:
0a:1c:e9:3b:be:c0:d5:13:05:67:f7:3e:f0:8b:7c:eb:dd:1b:
f7:24:62:9a:75:33:a2:6c:c7:bd:9a:0f:4c:ba:0a:11:ff:62:
70:3f:e9:0b:05:7a:2b:26:5c:e1:e0:93:8c:6f:6c:6e:7d:44:
a0:8d:3d:7b:d9:96:bb:82:98:bb:e2:64:b8:ea:23:9f:cf:0a:
76:53:21:fa:dd:9d:98:78:17:c5:07:b4:79:79:6c:b8:19:cc:
0f:39:55:9f:9a:4b:86:74:b5:49:fa:0e:cd:30:2d:b0:ae:2e:
e7:40:71:27:51:15:e2:a0:5f:ea:68:c8:c6:8e:c3:24:84:dc:
79:50:68:d1:66:3e:c6:b0:15:31:bd:34:b2:f6:59:be:4e:16:
84:df:ab:e6:4e:fe:9c:91:90:08:13:91:24:30:54:55:60:9f:
b2:e8:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:08 2026 by rpki-client