Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219493.roa
File: AS219493.roa (raw, json)
Hash identifier: GUJw+FUNzpH+QYd4ufMaGzHxZ5EWTRR6e1Fk3pkgtBc=
Subject key identifier: B7:3A:AB:02:3B:68:28:C0:27:F1:14:68:0F:B1:5F:09:0C:FD:E1:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53E0E297A034B09B54B876E1B7CADA0D57D5B7C4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219493.roa
Signing time: Sat 13 Jun 2026 10:46:15 +0000
ROA not before: Sat 13 Jun 2026 10:41:15 +0000
ROA not after: Sat 12 Jun 2027 10:46:15 +0000
asID: 219493
IP address blocks: 82.24.52.0/24 maxlen: 24
2a13:9500:191::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e0:e2:97:a0:34:b0:9b:54:b8:76:e1:b7:ca:da:0d:57:d5:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 13 10:41:15 2026 GMT
Not After : Jun 12 10:46:15 2027 GMT
Subject: CN=B73AAB023B6828C027F114680FB15F090CFDE1C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:a2:d3:9f:2d:ac:ce:6f:f2:03:2a:86:1f:
f4:63:bf:64:01:ee:e5:f0:a3:70:7a:3f:9c:b6:03:
d6:42:5d:ca:13:ca:d9:d1:2a:6b:86:e0:d0:60:78:
92:ff:46:97:78:dc:5f:78:61:55:9a:6f:cb:41:b5:
49:ed:98:b1:23:10:5e:24:92:01:f0:4b:02:09:aa:
74:17:9a:aa:38:e2:c3:47:7a:de:98:3f:55:8e:4b:
80:de:a2:3f:17:8a:04:40:05:b7:3d:7b:c1:93:87:
c0:18:39:80:3c:42:a4:09:fd:20:9a:87:ac:67:2f:
b4:f2:35:5d:54:66:6b:07:37:9d:90:6d:4e:cf:7d:
8b:58:a3:62:58:6f:bd:7e:03:ec:57:4a:24:c5:ff:
80:32:62:63:cd:f5:a4:e6:ed:05:d1:03:40:26:20:
02:26:eb:33:01:6e:6f:27:4f:77:be:a7:59:3a:fc:
fd:48:f7:3e:9f:4f:06:2f:ce:2c:48:db:87:3f:13:
ae:3b:dc:a5:49:ce:1b:d6:35:3e:3b:f6:cb:76:4f:
71:3f:c2:5d:ca:67:8f:4a:5c:3f:06:fb:58:7f:85:
22:6e:85:cf:30:da:4d:d6:84:fd:cc:4f:68:87:a5:
b1:a4:84:28:89:e3:c7:7e:10:0e:32:f6:6a:e5:80:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3A:AB:02:3B:68:28:C0:27:F1:14:68:0F:B1:5F:09:0C:FD:E1:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.52.0/24
IPv6:
2a13:9500:191::/48
Signature Algorithm: sha256WithRSAEncryption
1d:15:d9:c7:d9:21:17:10:a6:c7:c8:18:ba:9a:f7:9d:71:b8:
42:f7:a2:88:25:cc:a9:74:bf:4f:02:17:f3:98:96:6e:25:ba:
ce:c3:c3:91:d8:be:53:38:4c:bf:7f:44:2d:8a:c6:27:36:1b:
31:aa:09:44:a8:a4:5c:b3:42:56:85:78:65:11:45:c3:00:3d:
10:78:e8:9d:d3:74:9f:e4:79:b5:49:d1:02:26:45:5f:a2:5d:
eb:33:8e:5a:4a:e5:c8:6e:70:ab:2f:e4:a2:c4:b4:ad:1f:ee:
ea:d4:02:48:f9:a4:e3:60:83:8b:7e:04:34:43:d1:83:14:be:
df:f3:67:db:95:6f:e3:54:a6:f0:f2:1b:e4:fb:f4:5d:98:f2:
04:46:5f:c1:42:6c:c4:71:b4:e3:bd:1d:cd:8c:92:83:c7:83:
22:22:d7:8d:81:43:81:1b:ed:d0:60:3c:19:2c:e8:a8:16:2d:
08:14:e2:4c:77:ed:83:26:9d:30:4b:5a:05:cf:6a:4a:61:1b:
e6:ce:5f:f5:0d:90:b9:a2:93:86:01:2e:cd:77:88:49:d3:0d:
bf:03:30:d4:39:a8:74:51:72:61:29:d1:f9:01:c4:84:16:e4:
5a:76:f5:cb:0a:08:45:d4:b7:f3:da:68:b1:21:74:07:90:30:
df:d4:c1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:15 2026 by rpki-client