Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219393.roa
File: AS219393.roa (raw, json)
Hash identifier: upcASQ5T04LtaLx6RpLzzEuTgGJP7zzuVa8sRjNJGpc=
Subject key identifier: 37:EF:3A:52:6F:8A:63:1B:E5:70:B7:AD:25:F8:50:C5:0B:7E:53:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 36E0FBD97FEDECED8CD8B151F2E8E821A710F51D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219393.roa
Signing time: Sun 26 Jul 2026 09:15:03 +0000
ROA not before: Sun 26 Jul 2026 09:10:03 +0000
ROA not after: Sun 25 Jul 2027 09:15:03 +0000
asID: 219393
IP address blocks: 82.41.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e0:fb:d9:7f:ed:ec:ed:8c:d8:b1:51:f2:e8:e8:21:a7:10:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 26 09:10:03 2026 GMT
Not After : Jul 25 09:15:03 2027 GMT
Subject: CN=37EF3A526F8A631BE570B7AD25F850C50B7E53AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:86:89:27:7c:89:da:aa:4c:a5:9c:56:6a:
aa:19:25:c8:bc:c6:40:ee:52:b8:8d:70:d3:0f:3c:
91:2c:3f:3c:d2:94:95:43:cd:c3:79:f1:d8:da:02:
a8:e8:d3:70:b1:89:4e:10:98:e1:bc:e9:8a:2c:32:
aa:6b:00:6a:dc:b1:a8:6d:2a:b9:a3:3d:2d:98:24:
82:e6:a4:8f:93:ed:fe:76:4a:54:a1:58:39:ee:db:
e5:b8:f0:8a:ac:08:7f:55:42:78:25:d6:6d:08:ef:
fc:cb:1d:fd:01:58:e0:99:ad:3d:70:ac:b9:da:69:
c6:8d:af:49:19:34:34:f3:ff:81:0e:cd:61:1e:41:
ea:9c:51:db:c2:5a:29:0a:18:ea:cf:e7:c8:72:4a:
e6:0c:51:60:39:83:af:5d:55:ef:e5:19:94:59:cd:
04:15:19:45:44:0c:95:e8:95:fe:68:6a:53:8f:ee:
d4:f3:e5:25:ed:5c:14:4d:27:0b:4b:51:19:6f:83:
c7:fe:d7:95:c1:9a:83:94:72:e7:64:00:e7:a3:60:
5d:d0:40:f5:ed:f9:cc:69:8f:60:e3:fd:a6:42:e5:
21:22:89:48:0a:d0:bc:05:9f:a1:da:a9:d2:e4:0f:
2c:3d:c6:27:7e:34:d3:51:c6:5c:e0:59:cb:da:2d:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:3A:52:6F:8A:63:1B:E5:70:B7:AD:25:F8:50:C5:0B:7E:53:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.75.0/24
Signature Algorithm: sha256WithRSAEncryption
06:75:34:71:d8:db:7a:6e:1d:0c:0a:c3:05:f6:c8:79:ee:62:
d0:a1:90:60:e0:58:28:50:ef:9b:33:b8:0e:38:6f:d3:3b:0b:
18:8d:d5:a2:58:b9:a2:54:d6:fa:56:38:87:4a:7c:d0:ed:ba:
5c:a0:2c:ff:76:cf:20:a1:a7:8e:bb:4a:c5:fd:a6:1e:62:9a:
03:de:7d:b7:b4:0e:63:5e:5a:dc:db:2c:54:6c:8d:15:e7:62:
36:40:cb:68:07:e2:78:13:79:55:b0:59:40:26:e1:50:0a:86:
1b:9a:4d:37:03:fc:18:90:fe:dc:d3:a2:ba:73:dd:0d:8b:b8:
7b:10:e7:c5:e8:d5:26:88:a9:83:f7:11:dd:7c:32:c1:68:97:
40:9e:b1:01:c9:e3:2f:56:5a:7d:8b:30:aa:65:92:50:7d:00:
47:da:5e:99:78:22:81:d8:4a:6f:58:8d:b5:41:f1:57:a7:32:
b8:ad:7a:7c:11:a5:36:1a:24:ca:c6:43:c2:98:0e:bc:45:94:
cc:f8:cd:c6:2e:95:60:31:01:0f:cb:7a:77:95:aa:94:6b:fb:
e9:7b:67:86:d5:37:f4:bc:f2:38:80:78:30:50:2b:7b:a4:3d:
1e:43:ce:58:92:91:e0:f9:6b:2f:d0:a8:46:b2:11:58:d3:cb:
3d:9f:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:34 2026 by rpki-client