Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199829.roa
File: AS199829.roa (raw, json)
Hash identifier: ImeSTmNDi4oAUlbMc8EjJJLluDHTiWJJ3HbVcTer+E0=
Subject key identifier: 6B:38:97:59:81:14:32:15:4B:52:70:C7:FA:0B:DC:A0:D5:74:C1:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 126F689350BB831AE6E719B91C2D0B5DF5B6FA32
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199829.roa
Signing time: Wed 24 Sep 2025 05:12:03 +0000
ROA not before: Wed 24 Sep 2025 05:07:03 +0000
ROA not after: Wed 23 Sep 2026 05:12:03 +0000
asID: 199829
IP address blocks: 179.61.185.0/24 maxlen: 24
181.215.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6f:68:93:50:bb:83:1a:e6:e7:19:b9:1c:2d:0b:5d:f5:b6:fa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 24 05:07:03 2025 GMT
Not After : Sep 23 05:12:03 2026 GMT
Subject: CN=6B389759811432154B5270C7FA0BDCA0D574C180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:46:83:86:ee:dc:b4:fa:a6:a9:c3:eb:1e:
7c:0a:ea:3d:16:4d:9b:d2:41:5e:dd:f1:66:f3:06:
3d:48:e7:a7:c5:6f:dc:4d:44:b4:67:7f:8e:c5:27:
d1:47:6a:0f:73:5b:65:1c:cc:16:a4:90:0b:0c:c1:
a0:1f:54:7f:d5:58:fe:72:0e:20:65:19:38:17:bf:
59:40:6b:cc:23:1c:99:72:f2:2e:ed:04:93:67:6b:
17:28:0f:88:36:97:f8:05:6d:3c:42:82:ed:de:1b:
b7:b4:df:32:98:9a:93:b2:b2:fa:52:96:bc:21:43:
05:89:8b:d8:41:a1:c4:ec:d1:3f:9e:f8:ea:0e:c0:
9a:18:a8:16:78:43:98:d5:a5:82:2f:78:f8:78:76:
eb:e8:df:12:26:b3:10:cb:0f:e5:82:1c:b2:8c:54:
63:66:1b:41:ed:e0:50:70:09:d8:24:cc:d6:bd:9f:
06:57:52:bb:47:55:5a:7c:29:82:30:37:ec:f7:43:
ab:07:c7:02:bb:f4:26:e9:1c:46:ef:12:f5:35:a2:
73:3b:20:38:7c:ae:30:0b:ed:3c:21:a3:01:71:61:
ae:dd:62:04:e6:50:36:66:8d:6c:24:52:4b:8c:03:
76:1b:67:62:16:55:a0:2c:9d:cf:64:3c:56:67:90:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:97:59:81:14:32:15:4B:52:70:C7:FA:0B:DC:A0:D5:74:C1:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.185.0/24
181.215.45.0/24
Signature Algorithm: sha256WithRSAEncryption
67:48:41:0f:31:77:53:84:56:7f:7d:50:bb:84:13:52:97:51:
fb:53:10:7e:8c:d0:d7:02:7e:aa:62:1c:28:10:13:90:47:12:
4d:89:5c:0b:7d:db:7b:91:c2:cd:78:2b:97:af:5d:bd:a7:d7:
ad:84:78:d4:c6:5f:9c:2c:dc:2f:17:c3:a3:44:aa:a9:b1:0a:
4d:05:3a:26:2f:4a:76:a8:5a:d4:fd:27:d3:d4:e9:21:6c:2b:
d5:d1:92:c1:de:47:bd:2f:e6:ab:d6:cb:29:6b:8d:d2:12:0e:
ae:a8:ad:b1:08:d8:02:66:df:e4:81:9b:f4:66:ed:ec:6a:3e:
33:4f:03:0a:99:73:4e:bd:75:6c:85:3e:33:6c:5d:ee:bb:5b:
c1:b6:30:39:2e:34:89:6e:2c:de:7c:8a:b8:70:40:af:a7:fc:
b2:4e:fb:0b:b4:ee:23:56:a0:06:39:64:9e:fd:df:ed:6f:da:
93:63:47:81:0e:27:74:9c:08:31:d8:bf:8f:7b:65:b5:ca:37:
dc:ea:bd:33:5b:86:fd:7f:e8:5d:fc:25:27:97:0a:ba:0a:f0:
97:a3:73:68:06:eb:1e:3c:15:56:e0:80:c1:35:c5:56:c7:a4:
27:75:6b:e9:26:0a:93:89:6a:08:43:cd:fa:05:85:38:44:f5:
88:f0:72:49
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEm9ok1C7gxrm5xm5HC0LXfW2+jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA5MjQwNTA3MDNaFw0yNjA5MjMwNTEyMDNaMDMxMTAvBgNV
BAMTKDZCMzg5NzU5ODExNDMyMTU0QjUyNzBDN0ZBMEJEQ0EwRDU3NEMxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1c0aDhu7ctPqmqcPrHnwK6j0W
TZvSQV7d8WbzBj1I56fFb9xNRLRnf47FJ9FHag9zW2UczBakkAsMwaAfVH/VWP5y
DiBlGTgXv1lAa8wjHJly8i7tBJNnaxcoD4g2l/gFbTxCgu3eG7e03zKYmpOysvpS
lrwhQwWJi9hBocTs0T+e+OoOwJoYqBZ4Q5jVpYIvePh4duvo3xImsxDLD+WCHLKM
VGNmG0Ht4FBwCdgkzNa9nwZXUrtHVVp8KYIwN+z3Q6sHxwK79CbpHEbvEvU1onM7
IDh8rjAL7TwhowFxYa7dYgTmUDZmjWwkUkuMA3YbZ2IWVaAsnc9kPFZnkDABAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUaziXWYEUMhVLUnDH+gvcoNV0wYAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk5ODI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsz25
AwQAtdctMA0GCSqGSIb3DQEBCwUAA4IBAQBnSEEPMXdThFZ/fVC7hBNSl1H7UxB+
jNDXAn6qYhwoEBOQRxJNiVwLfdt7kcLNeCuXr129p9ethHjUxl+cLNwvF8OjRKqp
sQpNBTomL0p2qFrU/SfT1OkhbCvV0ZLB3ke9L+ar1sspa43SEg6uqK2xCNgCZt/k
gZv0Zu3saj4zTwMKmXNOvXVshT4zbF3uu1vBtjA5LjSJbizefIq4cECvp/yyTvsL
tO4jVqAGOWSe/d/tb9qTY0eBDid0nAgx2L+Pe2W1yjfc6r0zW4b9f+hd/CUnlwq6
CvCXo3NoBusePBVW4IDBNcVWx6QndWvpJgqTiWoIQ836BYU4RPWI8HJJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:35 2025 by rpki-client