Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: ey6Ng1G5+oLU7X9bWfPzND0MYqOVMtT6PxQvDj3q+JY=
Subject key identifier: F6:98:5F:ED:B3:79:32:87:0B:74:EB:FE:2C:1F:6A:6C:EE:AB:56:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 340F2B8F8DEC6FBAD70BD77B147401B6BEFD1A5D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
Signing time: Sun 06 Sep 2026 17:21:27 +0000
ROA not before: Sun 06 Sep 2026 17:16:27 +0000
ROA not after: Sun 05 Sep 2027 17:21:27 +0000
asID: 219075
IP address blocks: 178.83.151.0/24 maxlen: 24
178.83.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0f:2b:8f:8d:ec:6f:ba:d7:0b:d7:7b:14:74:01:b6:be:fd:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 17:16:27 2026 GMT
Not After : Sep 5 17:21:27 2027 GMT
Subject: CN=F6985FEDB37932870B74EBFE2C1F6A6CEEAB56AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:c4:94:c6:88:76:d9:fc:3a:cb:fe:12:9b:
03:ac:5b:bf:f9:6b:ab:e6:02:4c:3e:dc:02:5b:da:
f3:9e:05:fe:14:95:b3:0c:69:3c:d7:ce:41:cb:bf:
82:f8:17:a7:6d:75:c7:cd:3b:2c:2d:0a:39:94:51:
d4:3a:e1:45:9e:ed:9b:35:2a:ec:96:9a:47:dc:ae:
d7:13:3c:e8:db:ed:31:54:98:8e:1c:50:6a:76:f9:
c6:24:20:6d:da:26:39:f2:3b:cc:63:08:99:af:fa:
59:4b:0c:c8:fc:e3:b5:fc:47:b9:0c:4d:b2:38:41:
86:83:11:e8:1b:57:54:39:c1:4d:bd:28:49:b2:95:
50:40:e3:cd:d8:80:cf:52:a2:2b:c0:57:b4:f8:fd:
62:69:20:56:77:50:f6:74:43:f0:6d:dd:8c:3b:b6:
46:48:5f:6c:22:52:3d:d6:5e:d2:cc:d4:08:64:23:
fc:2c:0f:27:1a:a3:ae:8d:9a:aa:9f:68:d9:0d:61:
f2:f0:21:34:6a:17:68:3f:7e:70:eb:39:92:2f:30:
7f:b7:67:0d:9c:0b:5b:d0:ad:e6:35:83:db:95:08:
2b:08:71:0c:a2:e9:00:6b:8e:5a:72:25:e1:6a:b5:
f0:7e:f3:44:d5:a8:93:68:b1:a9:5c:ac:d9:97:da:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:5F:ED:B3:79:32:87:0B:74:EB:FE:2C:1F:6A:6C:EE:AB:56:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.151.0/24
178.83.197.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bb:64:e8:2e:60:3a:cf:92:27:28:fe:4a:44:e3:5d:85:00:
01:05:e3:f0:60:f0:b6:42:64:d6:dd:62:85:b8:2a:62:c1:e3:
58:87:23:17:58:39:08:8e:cf:b5:f6:d4:b1:34:7d:5f:4d:3b:
3d:f9:82:05:1b:9e:59:43:7e:2a:0c:f0:6d:36:c1:8a:e9:1f:
4b:ba:99:5b:58:8c:e4:e4:a9:76:03:05:8b:c0:35:ad:4f:2b:
a6:1f:a7:b4:a9:12:08:9b:53:22:10:ac:91:9c:90:20:b4:b7:
18:c5:c7:a8:7d:3e:45:cc:b1:99:73:5a:77:ae:bf:64:5c:df:
b8:f7:41:52:25:b8:4e:71:08:5f:da:b5:55:df:f3:c8:79:56:
dd:0e:6c:5b:5d:a2:35:08:d1:6c:3d:22:dd:3f:55:30:97:8c:
93:3b:29:80:c3:08:cf:02:61:99:b8:a7:5e:6e:51:cd:e7:65:
33:7e:7d:8b:db:de:69:b8:10:ab:fe:28:5f:16:40:d5:af:fb:
7b:3b:69:19:b7:c3:e4:0e:f8:38:64:cd:92:3e:52:f1:99:75:
68:e7:7c:d1:be:54:31:2d:91:a1:11:3c:93:b2:6c:c1:fd:cb:
42:6d:43:84:27:14:60:ae:6a:96:30:e1:57:70:d5:58:26:9e:
ce:6d:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:49 2026 by rpki-client