Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219487.roa
File: AS219487.roa (raw, json)
Hash identifier: iGH/rk2pZWkn5FnrfP56oFi++JwFaaNVx8A7Kzas1wo=
Subject key identifier: 3E:69:91:20:54:55:FA:99:BB:BD:2C:56:87:2B:A2:D7:E3:38:EA:8F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 66791E4B3BF6134317EC419A31F8010932737340
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219487.roa
Signing time: Mon 29 Jun 2026 12:30:05 +0000
ROA not before: Mon 29 Jun 2026 12:25:05 +0000
ROA not after: Mon 28 Jun 2027 12:30:05 +0000
asID: 219487
IP address blocks: 82.41.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:79:1e:4b:3b:f6:13:43:17:ec:41:9a:31:f8:01:09:32:73:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 12:25:05 2026 GMT
Not After : Jun 28 12:30:05 2027 GMT
Subject: CN=3E6991205455FA99BBBD2C56872BA2D7E338EA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:14:ad:2f:6c:6a:af:30:69:f1:22:13:b3:
ac:0f:ff:ed:2b:b0:64:28:11:05:01:97:5c:fa:15:
ad:ff:1c:bc:c4:b5:7e:64:fb:72:bf:53:d6:75:45:
32:c6:c3:2a:85:c5:75:78:d1:14:4b:c3:2d:7f:76:
79:76:dc:0b:88:fd:fb:66:7c:05:73:b9:53:f3:0e:
0b:6e:cb:fd:ca:a6:05:bc:aa:48:f8:de:c2:5f:5d:
ff:fa:4d:86:58:b2:bf:38:e7:88:a8:66:eb:f9:9c:
2c:6e:b8:74:0c:c3:0e:8c:56:f4:95:d2:8a:8e:82:
00:17:57:0a:a3:93:73:ef:23:d9:af:12:95:9f:82:
71:25:73:92:b8:ad:d7:c5:b1:3c:c0:ab:68:9a:f0:
5e:9a:c2:37:6f:c6:d4:5f:bd:78:93:d7:d5:07:b1:
fa:a9:14:27:be:da:d7:0d:b7:1c:c8:79:8b:3d:90:
79:a0:b8:46:d7:28:09:f1:de:8a:d2:e5:57:92:8e:
e1:97:17:b8:10:77:ed:b7:ea:f4:21:1f:a0:36:c8:
7d:33:3b:90:01:96:26:87:2d:48:f8:fb:e9:dd:55:
58:1a:6b:44:f4:07:fa:13:04:c9:dc:9f:df:c3:bb:
ce:4b:2e:d0:3b:57:ed:95:26:52:61:78:4d:93:33:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:91:20:54:55:FA:99:BB:BD:2C:56:87:2B:A2:D7:E3:38:EA:8F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:27:25:75:f3:46:d5:d2:87:8e:bb:c3:05:d3:5e:a3:a4:be:
67:59:85:65:8a:e1:43:86:82:21:f3:c4:80:8a:0b:e5:97:70:
71:ff:b3:66:e6:73:4c:f5:80:0e:d6:5c:36:05:be:6c:60:d3:
61:7b:bd:dc:87:07:46:44:50:e8:30:e6:7a:a0:d1:c8:b2:68:
2c:05:2f:2b:5b:d8:a3:6c:1a:57:7a:24:6b:7d:08:09:db:58:
76:3f:1d:a1:cf:fd:db:e2:31:4b:92:6a:2c:c3:6e:e4:ff:ed:
47:ef:7e:7e:c7:ff:3d:97:59:42:15:73:c8:17:dd:7a:fc:37:
3d:90:8d:4d:b3:5a:c6:79:f1:34:1a:8b:7f:1a:e2:aa:2c:f4:
c6:ad:09:e7:fe:8b:16:2f:3e:b4:8f:e0:d4:dd:4e:f2:62:88:
12:3c:e0:50:ed:3d:4b:a2:da:79:b6:44:5f:5d:99:18:1f:5c:
46:b5:b8:c8:05:43:9c:00:18:54:dd:fa:aa:30:2e:85:e3:02:
bb:c1:94:90:6c:f7:c1:af:2f:ef:a3:56:b1:38:8e:c6:6e:d9:
5e:49:7b:78:64:95:28:76:27:76:9f:06:98:fc:6a:a7:fb:67:
06:68:00:44:e4:1b:2b:89:ea:94:83:45:98:b6:6d:c5:74:3f:
57:93:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client