Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219476.roa
File: AS219476.roa (raw, json)
Hash identifier: kBI0MCye7Q1wU8H9Q7PxdpvCYfGCAdiE7AMHbG3SuTw=
Subject key identifier: 6B:31:A8:E8:56:D7:17:40:D0:23:CD:A9:5D:79:D5:73:30:46:9F:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2D8732959F473F3A35CC0DBBEF52BC648F0EB637
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219476.roa
Signing time: Fri 26 Jun 2026 09:55:56 +0000
ROA not before: Fri 26 Jun 2026 09:50:56 +0000
ROA not after: Fri 25 Jun 2027 09:55:56 +0000
asID: 219476
IP address blocks: 82.38.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:87:32:95:9f:47:3f:3a:35:cc:0d:bb:ef:52:bc:64:8f:0e:b6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 09:50:56 2026 GMT
Not After : Jun 25 09:55:56 2027 GMT
Subject: CN=6B31A8E856D71740D023CDA95D79D57330469F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:79:88:73:07:75:5b:92:4a:66:78:4a:e8:
b0:48:c7:cc:31:44:03:08:70:b8:2b:92:13:36:6e:
83:a6:e8:01:6d:0d:0f:60:f3:1c:c6:91:1e:06:e6:
e8:7d:ba:a0:26:d0:03:8b:a7:f1:25:f9:33:51:2c:
63:53:45:26:d1:33:02:3e:8f:2c:71:f9:ab:51:46:
45:8f:d6:f0:ad:03:7d:4c:13:81:20:5f:27:3b:2f:
db:93:4b:d2:ef:2b:fb:87:7b:05:1d:15:09:a4:45:
95:69:7b:de:79:95:01:f3:a4:52:f1:0b:98:c6:b5:
ea:b4:3d:91:d7:d6:54:d5:cb:3e:c6:14:f6:1d:a9:
51:72:07:f7:f2:a6:50:37:b1:8e:15:e2:9d:37:9a:
f2:54:7e:5b:a9:78:3b:91:4a:64:21:43:eb:31:c0:
19:77:de:e7:1a:14:db:ac:46:5c:bb:dc:6b:9f:0f:
d4:3c:ce:72:23:ad:6b:b6:81:c2:06:ce:cd:3f:6f:
b6:89:84:83:f0:65:6e:33:56:ab:54:0b:6e:b3:89:
0c:d3:44:80:c9:cb:09:a7:12:03:7a:04:10:c5:46:
16:ad:82:af:45:5e:ed:eb:41:95:ff:74:75:c5:d2:
73:95:67:1b:a1:d4:22:c9:50:28:22:a3:f4:c3:7f:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:31:A8:E8:56:D7:17:40:D0:23:CD:A9:5D:79:D5:73:30:46:9F:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.201.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1f:e9:89:a8:bc:a6:f5:ab:f1:1b:70:bb:f3:b9:80:72:c0:
28:16:14:7f:c4:65:5d:a9:f8:ed:e0:48:20:6c:b9:56:08:24:
86:94:9a:1f:e9:c6:0c:9e:bb:55:cb:f5:1d:56:e4:5d:bf:00:
01:9b:36:0a:76:37:25:6b:ed:6f:12:ac:3b:da:3b:8a:f8:e4:
27:bb:87:e3:a6:20:be:d9:27:7b:53:02:90:61:bc:72:ab:6c:
d7:69:d7:df:08:a9:a7:aa:ad:3f:c1:48:e7:f7:63:84:9d:db:
4a:90:1b:4a:c4:d2:4b:71:d5:97:9c:4d:5b:bd:1c:99:06:a7:
30:67:4d:a9:b0:96:5c:21:5b:d0:39:ef:39:e2:6d:2e:b6:c9:
a3:8d:ae:58:87:a5:e7:f2:63:7e:bd:67:34:fd:46:bd:e4:cd:
14:52:05:92:94:bc:37:90:72:c6:0d:93:8b:2f:ee:4c:1a:b3:
3c:b3:95:2c:0d:ad:23:ac:93:6e:9b:74:46:b6:78:9e:1d:65:
70:e5:8d:2b:f7:dc:8d:7c:e8:24:b5:a2:82:6c:1f:b5:6b:c3:
c6:56:c5:12:36:a0:34:14:a6:4f:ec:37:3f:14:60:ce:1c:fb:
6d:1e:11:dd:4e:2c:28:48:46:95:91:71:17:65:67:6c:a6:ec:
f8:f4:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:55:28 2026 by rpki-client