Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: apBiD+itbaC5sJY1I3F2DtYmYKeKUm5i8exjGQDHcnk=
Subject key identifier: 3D:49:12:2D:36:7D:81:3E:AD:E8:C1:8B:41:EF:AD:7E:F0:59:A6:BB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0848693AE2A4DB9AFAACFFD8D48A872BB7393A84
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199707.roa
Signing time: Wed 29 Apr 2026 11:29:47 +0000
ROA not before: Wed 29 Apr 2026 11:24:47 +0000
ROA not after: Wed 28 Apr 2027 11:29:47 +0000
asID: 199707
IP address blocks: 82.47.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:48:69:3a:e2:a4:db:9a:fa:ac:ff:d8:d4:8a:87:2b:b7:39:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 11:24:47 2026 GMT
Not After : Apr 28 11:29:47 2027 GMT
Subject: CN=3D49122D367D813EADE8C18B41EFAD7EF059A6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:95:fd:6c:f3:3d:ba:72:b3:a2:8c:d6:31:
53:d5:4a:df:b6:b6:4a:f7:ed:ba:65:b8:93:c0:03:
45:b9:a1:52:55:54:17:cb:a1:a9:d5:a7:78:19:f5:
1f:4c:88:48:a0:e3:42:d4:8c:c2:5f:49:5c:d4:68:
b0:61:df:ee:6a:0e:b5:03:3d:44:bf:a8:46:3a:34:
28:03:eb:02:f2:98:fb:cc:99:9c:c3:7a:32:95:d5:
c0:c6:3a:d2:d9:32:00:43:db:eb:5e:0d:fc:cf:79:
89:84:fd:97:2d:7a:56:34:42:fc:d6:78:a6:5b:49:
2f:f7:89:49:be:99:dc:eb:2b:f0:78:64:e3:ff:66:
5b:61:e7:da:96:6d:aa:46:e7:7f:3b:b9:42:96:02:
e3:80:4b:55:4c:db:26:40:fa:10:11:55:e4:7c:88:
f4:d4:8a:61:2b:a6:1a:c2:d8:97:a4:4a:cb:1d:75:
48:b3:92:15:ec:e0:30:ce:7c:b3:50:53:43:f5:4b:
81:f3:8e:6b:db:83:51:df:98:b0:24:ea:11:2c:4c:
f0:00:c8:47:f2:f1:14:29:01:e6:1d:79:e8:e8:98:
14:ae:a6:64:c0:f6:8d:c0:53:dd:2e:fa:8f:46:65:
4f:00:0a:5a:5b:d6:6a:7a:6a:3a:6f:e6:1d:49:85:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:49:12:2D:36:7D:81:3E:AD:E8:C1:8B:41:EF:AD:7E:F0:59:A6:BB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.181.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5a:b4:c7:f1:1b:06:49:ca:71:4e:a9:6a:f8:5c:bf:e2:3c:
af:0b:29:cf:dc:77:75:0d:83:bb:46:1e:3e:03:7f:81:fc:ce:
91:d3:be:44:3d:2f:76:28:67:61:e8:cf:c8:2f:8c:a4:e1:77:
4c:e3:4f:f0:c6:8b:cf:3c:e3:b2:69:41:57:cf:29:e4:b3:47:
3a:5b:29:59:72:55:39:de:f1:00:88:5b:84:95:46:e1:2f:e7:
e6:11:55:e1:33:91:5d:fa:58:eb:61:c8:93:9c:18:f9:c7:ff:
92:b6:79:f4:81:a7:0f:02:38:ff:4c:60:72:dc:9c:2f:f5:55:
b6:bd:f1:89:0c:ec:77:49:c3:c8:b0:6a:7e:4e:f4:fb:42:36:
d9:24:53:5f:e1:f7:ce:c3:dc:95:1e:dc:e6:63:67:91:a2:1b:
05:fe:a2:d6:34:9a:9d:f3:c9:43:c5:42:3c:76:f1:0e:af:b2:
4f:b4:ec:e0:0f:de:26:9a:d6:06:62:59:a6:83:a5:3f:d1:c9:
30:a5:4c:f7:d6:fe:6b:58:b4:f5:5b:93:b2:28:e5:f0:fe:19:
6c:7f:b9:a5:5c:8e:1e:01:d9:6f:1b:5b:b5:0f:f2:20:11:6f:
d7:c6:87:cb:1f:97:55:64:63:40:d8:53:1b:00:c2:d5:53:63:
af:53:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:19 2026 by rpki-client