Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: DoKbcvvSkt4/7dgxwEbnDjHEqw6tsV1razVxhDuQUa4=
Subject key identifier: CF:44:5B:F3:4B:1E:F9:17:FE:59:1C:9C:92:50:42:7F:2B:0F:83:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D451E31C8A381C4681BAEBDC30B385D2D80345A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
Signing time: Wed 09 Sep 2026 13:32:32 +0000
ROA not before: Wed 09 Sep 2026 13:27:32 +0000
ROA not after: Wed 08 Sep 2027 13:32:32 +0000
asID: 219447
IP address blocks: 82.27.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:45:1e:31:c8:a3:81:c4:68:1b:ae:bd:c3:0b:38:5d:2d:80:34:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 9 13:27:32 2026 GMT
Not After : Sep 8 13:32:32 2027 GMT
Subject: CN=CF445BF34B1EF917FE591C9C9250427F2B0F83F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:ef:25:3b:47:f0:06:54:68:27:86:81:c8:
9d:cf:b5:d2:e1:17:56:5e:85:6d:98:5c:36:b3:b1:
68:8d:11:8c:11:d3:09:17:db:88:a3:ce:17:4d:5c:
31:90:63:1c:f7:60:72:81:f2:0c:af:30:3a:56:bb:
92:26:fa:4a:c3:25:c1:3d:82:ec:56:78:30:ff:f3:
89:62:c2:4c:31:b8:7a:36:2f:d4:9b:64:15:ed:a4:
21:38:58:03:b1:a2:ec:58:de:bd:4e:6f:55:fe:64:
61:e3:33:ab:0f:f6:2b:ec:88:5e:ae:8b:4d:c3:f2:
cf:c8:50:0e:56:ea:0f:86:97:8b:c7:70:e9:8b:06:
ef:61:15:21:71:37:6f:1d:97:12:8a:38:5c:8d:5f:
e4:1d:3e:54:1f:68:5f:7a:2d:c5:50:1c:62:61:68:
ca:2e:38:e7:8e:f4:6a:7d:32:b7:be:a9:57:31:ae:
f7:65:20:7b:22:8b:1f:ec:19:27:b5:59:d1:5d:e3:
08:1f:1b:03:91:3d:d7:17:50:14:c5:0c:eb:2c:42:
f4:12:c6:a7:f0:a7:b1:f6:aa:27:61:c0:d1:3b:1c:
b4:a0:a2:e1:5f:2e:94:06:58:7b:d2:9a:25:39:1f:
33:86:97:42:bf:29:7f:e7:14:68:9f:64:59:62:b9:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:5B:F3:4B:1E:F9:17:FE:59:1C:9C:92:50:42:7F:2B:0F:83:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c5:63:20:53:89:0a:d1:ef:6b:89:e2:dd:76:2d:3f:d5:49:
4e:d0:9b:f9:59:5f:ff:5a:ee:13:f1:f0:28:a0:c0:aa:1c:9a:
b6:aa:07:33:35:b9:e8:73:ba:12:09:ee:4e:2f:df:59:af:f1:
f7:f2:a2:97:7c:ce:46:83:3f:71:2f:43:07:27:0d:dd:dd:8f:
16:45:50:63:56:ed:05:e3:57:02:fd:32:9e:19:68:b6:16:72:
ef:9b:e8:ba:01:9d:31:4d:19:55:8a:5a:a4:dd:63:f1:3e:73:
e7:8d:cd:8f:6d:2a:6e:f2:38:24:b0:1b:60:56:7f:3c:5d:c8:
11:9d:37:f1:b4:c8:17:e4:06:d8:69:05:78:76:5c:1c:39:e9:
c7:18:66:fb:b6:63:4d:21:7f:d4:81:06:fe:33:75:4c:3b:ee:
e2:b8:81:3c:30:08:ac:39:be:d2:23:95:ee:1c:11:71:e4:45:
98:fa:66:97:bf:64:75:c8:b4:b7:d4:9e:e3:75:bc:94:ba:c8:
b6:66:88:b4:4d:eb:07:f6:ad:64:bf:7a:b8:53:b1:54:bb:95:
e7:44:ec:62:9e:e7:a9:61:10:0d:a7:80:05:94:f0:59:e0:7c:
dc:4e:28:c6:13:f1:9a:67:ca:d8:fd:b6:de:c3:7a:9d:fc:e2:
32:3c:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:20:10 2026 by rpki-client