Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: 8raIf9GoytL1VaH1rsJz5O3Hi4/NFm4AwIWHNrVovds=
Subject key identifier: 8E:DD:81:FD:6E:B8:7C:B3:CB:8A:B3:B8:B9:06:C1:E2:9E:50:7E:90
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 13AB3FE95C0761431179AF4BAB7DDAF3030C667E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
Signing time: Mon 14 Sep 2026 07:47:50 +0000
ROA not before: Mon 14 Sep 2026 07:42:50 +0000
ROA not after: Mon 13 Sep 2027 07:47:50 +0000
asID: 219427
IP address blocks: 82.21.66.0/24 maxlen: 24
82.21.127.0/24 maxlen: 24
82.21.136.0/24 maxlen: 24
82.23.150.0/24 maxlen: 24
82.25.132.0/24 maxlen: 24
82.25.197.0/24 maxlen: 24
82.25.202.0/24 maxlen: 24
82.26.111.0/24 maxlen: 24
82.26.123.0/24 maxlen: 24
82.27.40.0/24 maxlen: 24
82.27.66.0/24 maxlen: 24
82.27.70.0/24 maxlen: 24
82.38.202.0/24 maxlen: 24
82.41.210.0/24 maxlen: 24
82.47.60.0/24 maxlen: 24
82.47.192.0/24 maxlen: 24
82.47.197.0/24 maxlen: 24
84.75.36.0/24 maxlen: 24
84.75.42.0/24 maxlen: 24
84.75.50.0/24 maxlen: 24
84.75.65.0/24 maxlen: 24
84.75.68.0/24 maxlen: 24
84.75.131.0/24 maxlen: 24
84.75.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ab:3f:e9:5c:07:61:43:11:79:af:4b:ab:7d:da:f3:03:0c:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 07:42:50 2026 GMT
Not After : Sep 13 07:47:50 2027 GMT
Subject: CN=8EDD81FD6EB87CB3CB8AB3B8B906C1E29E507E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:1a:87:f9:11:b4:7f:af:f1:66:29:30:9b:
02:4e:54:62:b4:d1:38:ae:8f:16:08:3c:a6:83:5c:
7a:42:b7:1a:87:26:c6:0d:87:e3:d8:3d:55:a8:47:
bd:43:3f:c5:2e:6e:4c:4a:77:90:58:b8:a9:d1:a7:
5a:10:32:c1:9f:e2:b3:cc:2e:99:b0:ee:79:32:ae:
4e:a0:7a:6e:19:88:10:9e:e1:ec:66:15:69:fb:f2:
98:c4:1c:ef:6c:53:7b:cc:13:61:af:d9:e4:54:21:
85:bb:bc:4d:ba:7c:e4:81:4c:41:be:8d:f9:52:df:
0a:07:de:84:b8:e9:d7:b0:76:c8:b5:60:cc:75:2c:
ae:b0:07:05:6d:d4:66:19:7a:9f:44:94:db:9d:9d:
52:3d:72:aa:fd:a8:df:af:63:37:68:dd:9c:ff:0d:
f4:a3:f0:fb:05:fd:4b:cc:2f:7f:8d:e1:f4:fe:5e:
b1:15:97:a0:71:3b:dc:fa:e4:e9:0f:97:47:77:bd:
79:38:83:fc:9b:98:6f:3a:8c:3e:90:be:ea:e6:48:
88:80:83:05:00:50:7d:e9:4c:89:c1:43:d4:ca:ae:
67:0b:c6:18:f7:15:52:17:fc:73:52:91:7e:27:cc:
01:82:97:cf:03:c5:3a:d0:d4:59:43:ab:77:64:d1:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:81:FD:6E:B8:7C:B3:CB:8A:B3:B8:B9:06:C1:E2:9E:50:7E:90
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.66.0/24
82.21.127.0/24
82.21.136.0/24
82.23.150.0/24
82.25.132.0/24
82.25.197.0/24
82.25.202.0/24
82.26.111.0/24
82.26.123.0/24
82.27.40.0/24
82.27.66.0/24
82.27.70.0/24
82.38.202.0/24
82.41.210.0/24
82.47.60.0/24
82.47.192.0/24
82.47.197.0/24
84.75.36.0/24
84.75.42.0/24
84.75.50.0/24
84.75.65.0/24
84.75.68.0/24
84.75.131.0/24
84.75.247.0/24
Signature Algorithm: sha256WithRSAEncryption
47:92:ee:9e:eb:2b:d9:da:fa:fc:2f:63:e6:c6:37:5a:0c:50:
df:c9:90:1b:ea:3e:74:23:a8:c8:1e:bd:7e:79:f9:ae:f8:c8:
85:88:1c:93:73:fd:9e:86:b8:b7:2d:25:46:3b:88:f5:3a:5b:
8a:cc:0d:50:8c:6b:d5:e6:3e:3a:2f:44:eb:e8:af:5a:8a:51:
06:37:58:68:cc:1a:8f:36:bd:1f:19:15:ab:63:17:c8:b2:22:
ad:55:4a:3a:28:54:81:e5:a1:9f:67:7c:e7:a5:3a:a5:ee:44:
53:4d:12:a5:0d:d5:ad:15:fb:0f:55:6c:54:ac:86:1c:1b:4a:
18:7d:f3:d1:98:74:11:20:d8:58:c8:4b:c8:4e:ba:5b:fc:59:
e8:29:1e:a5:87:9c:d2:20:03:71:48:ac:2a:a5:ab:58:f1:c4:
50:0e:ca:94:19:53:e8:22:70:48:01:9a:3a:5e:76:5c:50:63:
b9:1b:64:dc:03:a1:64:f7:aa:96:f0:61:8e:67:d6:44:2d:8f:
2a:7e:f4:30:2d:ac:92:a7:34:49:2a:a5:3a:b2:c9:57:15:fe:
b6:ad:b1:e2:f6:56:2c:ee:f8:c6:ac:a6:c6:6e:50:62:f6:f8:
a7:57:a3:a1:d8:08:db:2d:f2:58:7f:02:f2:3b:a2:cc:b4:b7:
72:a6:e8:80
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUE6s/6VwHYUMRea9Lq33a8wMMZn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTQwNzQyNTBaFw0yNzA5MTMwNzQ3NTBaMDMxMTAvBgNV
BAMTKDhFREQ4MUZENkVCODdDQjNDQjhBQjNCOEI5MDZDMUUyOUU1MDdFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UBqH+RG0f6/xZikwmwJOVGK0
0TiujxYIPKaDXHpCtxqHJsYNh+PYPVWoR71DP8UubkxKd5BYuKnRp1oQMsGf4rPM
Lpmw7nkyrk6gem4ZiBCe4exmFWn78pjEHO9sU3vME2Gv2eRUIYW7vE26fOSBTEG+
jflS3woH3oS46dewdsi1YMx1LK6wBwVt1GYZep9ElNudnVI9cqr9qN+vYzdo3Zz/
DfSj8PsF/UvML3+N4fT+XrEVl6BxO9z65OkPl0d3vXk4g/ybmG86jD6QvurmSIiA
gwUAUH3pTInBQ9TKrmcLxhj3FVIX/HNSkX4nzAGCl88DxTrQ1FlDq3dk0dPhAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUjt2B/W64fLPLirO4uQbB4p5QfpAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE5NDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAD
BABSFUIDBABSFX8DBABSFYgDBABSF5YDBABSGYQDBABSGcUDBABSGcoDBABSGm8D
BABSGnsDBABSGygDBABSG0IDBABSG0YDBABSJsoDBABSKdIDBABSLzwDBABSL8AD
BABSL8UDBABUSyQDBABUSyoDBABUSzIDBABUS0EDBABUS0QDBABUS4MDBABUS/cw
DQYJKoZIhvcNAQELBQADggEBAEeS7p7rK9na+vwvY+bGN1oMUN/JkBvqPnQjqMge
vX55+a74yIWIHJNz/Z6GuLctJUY7iPU6W4rMDVCMa9XmPjovROvor1qKUQY3WGjM
Go82vR8ZFatjF8iyIq1VSjooVIHloZ9nfOelOqXuRFNNEqUN1a0V+w9VbFSshhwb
Shh989GYdBEg2FjIS8hOulv8WegpHqWHnNIgA3FIrCqlq1jxxFAOypQZU+gicEgB
mjpedlxQY7kbZNwDoWT3qpbwYY5n1kQtjyp+9DAtrJKnNEkqpTqyyVcV/ratseL2
Vizu+MaspsZuUGL2+KdXo6HYCNst8lh/AvI7osy0t3Km6IA=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:09:37 2026 by rpki-client