Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199592.roa
File: AS199592.roa (raw, json)
Hash identifier: j/IHVK2kv+E82xbWkMu3CBBfji5YCCPuB0Mv0oRGntE=
Subject key identifier: 7C:59:01:32:CA:29:53:3E:84:79:79:96:1C:21:BC:A6:A9:2C:36:0C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 20830711126030E04F5FC5BAED454811D774557A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199592.roa
Signing time: Wed 22 Apr 2026 02:28:51 +0000
ROA not before: Wed 22 Apr 2026 02:23:51 +0000
ROA not after: Wed 21 Apr 2027 02:28:51 +0000
asID: 199592
IP address blocks: 82.22.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:83:07:11:12:60:30:e0:4f:5f:c5:ba:ed:45:48:11:d7:74:55:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 22 02:23:51 2026 GMT
Not After : Apr 21 02:28:51 2027 GMT
Subject: CN=7C590132CA29533E847979961C21BCA6A92C360C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:5b:0c:9f:a4:f0:43:ec:cb:40:36:3d:b6:
c2:6c:83:27:cb:5d:ae:26:b8:16:e1:88:d7:6c:9c:
0b:00:9e:fe:0a:24:98:46:f2:67:f9:12:01:60:d7:
4f:3e:d1:c6:da:2b:16:2a:44:f3:b0:61:69:45:cd:
54:03:bc:f8:68:72:0c:35:6c:ca:8c:b8:34:27:90:
a4:58:a5:24:0c:bb:5f:93:67:3c:87:65:6b:d6:af:
c3:83:a8:3b:8c:08:15:e0:ff:fa:e1:5d:1e:18:be:
0e:11:48:8d:5d:45:f8:ea:e0:8c:b4:a4:d0:ea:d3:
12:c1:93:d2:be:1b:de:2d:86:bd:24:2e:23:48:74:
32:fb:85:af:fe:76:5d:a5:6a:2a:04:4a:fd:fa:ec:
72:dd:82:1b:20:b4:14:40:92:f0:43:3f:83:c7:3c:
39:08:76:72:bb:a7:5e:29:93:33:65:e0:e6:90:18:
c6:09:fa:01:9d:02:e3:12:53:23:a5:45:ed:ea:c1:
46:aa:ac:f9:86:b9:b7:26:ba:14:66:b0:1d:31:a5:
b6:a6:47:7d:c9:8c:74:2e:8a:92:48:00:24:a5:b8:
f2:24:74:a9:f7:e5:d1:e6:31:91:ac:39:6f:74:56:
63:f1:c6:e6:88:c2:3a:e6:9a:70:38:2e:fb:0f:e3:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:01:32:CA:29:53:3E:84:79:79:96:1C:21:BC:A6:A9:2C:36:0C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.205.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a4:56:99:a3:e6:31:52:16:43:e8:7c:aa:af:a1:99:9f:4a:
98:e9:86:81:26:83:bd:c5:a5:1a:2c:40:63:dd:3d:71:8f:f7:
e4:84:b6:7d:79:00:33:de:c0:47:6c:ca:bc:0b:ae:c5:9a:6c:
8c:4c:ca:69:ca:03:a9:45:38:62:24:9c:c1:3e:29:a6:ae:13:
f2:2a:71:04:3d:23:1c:57:80:2a:b3:a0:8e:58:4e:e4:9c:5e:
6f:e1:8b:30:db:2d:03:e8:cb:e4:ab:24:da:62:c7:ba:e8:d4:
c6:74:d8:a1:22:60:2a:b1:eb:2b:cd:71:a7:88:df:ca:ac:07:
55:46:08:75:e7:09:fc:8d:df:41:30:7c:aa:de:12:a2:df:ec:
ee:ca:8c:d3:1f:7e:b5:9d:a4:99:a4:07:79:68:48:1d:af:8b:
ed:59:9c:83:a3:5f:8d:42:7d:09:27:52:81:84:21:1a:57:06:
eb:e3:4b:ad:98:88:39:11:e0:9d:0a:6a:6c:b9:22:ec:da:92:
af:de:30:cd:58:d4:3f:85:40:aa:8b:00:63:23:d2:e2:08:f3:
2b:2a:e5:74:89:46:77:0a:36:8a:62:2c:e7:46:6f:7d:16:5b:
8d:2e:2b:3b:ef:c4:31:5d:c4:16:19:00:dd:e1:66:ab:87:dd:
04:d3:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:52 2026 by rpki-client