Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: C71+DDCFIzCLtGrsuEQrOrX/qcizbC7mD0FE3MDe970=
Subject key identifier: 3F:DE:47:B2:45:85:FE:50:7E:9B:2C:C7:50:1E:48:75:D9:E8:91:75
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6459FF0910C9C166B3685E103F002626E164C781
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
Signing time: Mon 21 Sep 2026 11:48:28 +0000
ROA not before: Mon 21 Sep 2026 11:43:28 +0000
ROA not after: Mon 20 Sep 2027 11:48:28 +0000
asID: 199741
IP address blocks: 82.22.37.0/24 maxlen: 24
82.22.125.0/24 maxlen: 24
82.22.160.0/24 maxlen: 24
82.22.200.0/24 maxlen: 24
82.39.130.0/24 maxlen: 24
82.39.207.0/24 maxlen: 24
82.39.210.0/24 maxlen: 24
82.39.221.0/24 maxlen: 24
82.47.20.0/24 maxlen: 24
82.47.28.0/24 maxlen: 24
82.47.114.0/24 maxlen: 24
82.47.126.0/24 maxlen: 24
82.47.128.0/24 maxlen: 24
82.47.166.0/24 maxlen: 24
82.47.175.0/24 maxlen: 24
84.75.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:59:ff:09:10:c9:c1:66:b3:68:5e:10:3f:00:26:26:e1:64:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 21 11:43:28 2026 GMT
Not After : Sep 20 11:48:28 2027 GMT
Subject: CN=3FDE47B24585FE507E9B2CC7501E4875D9E89175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:ac:dd:35:46:29:84:11:b5:75:01:3a:58:
5a:82:ba:1d:55:5c:34:7b:ee:c0:27:59:6f:07:68:
85:8d:61:fc:95:73:a1:93:ee:35:ab:68:33:81:83:
ea:cf:c0:1c:b7:89:e8:03:32:3f:09:81:64:fa:51:
dd:0a:38:59:75:77:6d:e2:a3:23:f8:16:5b:7b:ad:
da:2b:e9:0d:8b:df:01:bd:44:06:89:02:c3:d1:72:
0b:84:8c:49:11:e4:d3:7a:b5:77:2d:83:72:79:70:
d8:71:74:a3:f9:5e:1d:24:ff:7f:e4:0f:73:e9:a7:
46:69:dd:98:54:fc:51:48:83:b8:43:d8:e1:85:b7:
b7:1c:82:90:b1:06:ea:8e:af:cd:3e:9e:98:97:de:
f8:f0:a8:4e:b3:bb:ac:ea:3a:9d:65:aa:2a:24:61:
70:4a:a3:3e:7c:08:58:b4:3c:0e:c6:24:dc:41:e4:
a1:eb:14:d7:e3:31:ee:74:cd:7e:0f:23:98:40:b8:
a8:1f:7b:56:9b:89:bc:91:04:3b:3c:10:41:a3:69:
0d:70:31:5e:03:44:8f:9d:9b:65:75:06:f7:03:c5:
da:ac:90:19:54:f3:d4:ad:5f:cc:5f:f1:23:96:c0:
2d:74:bc:c0:4c:8d:d1:7b:97:f9:ec:71:1d:b3:3b:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:47:B2:45:85:FE:50:7E:9B:2C:C7:50:1E:48:75:D9:E8:91:75
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.37.0/24
82.22.125.0/24
82.22.160.0/24
82.22.200.0/24
82.39.130.0/24
82.39.207.0/24
82.39.210.0/24
82.39.221.0/24
82.47.20.0/24
82.47.28.0/24
82.47.114.0/24
82.47.126.0/24
82.47.128.0/24
82.47.166.0/24
82.47.175.0/24
84.75.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1b:fc:a9:d1:8e:6b:0a:2e:eb:dc:5f:07:e2:96:27:ea:56:
81:ff:4a:1d:1b:d4:da:49:a9:7b:f1:2c:67:b0:20:bd:46:76:
95:ad:13:6f:14:c8:2b:6d:78:ed:5f:83:d6:39:14:fd:d2:95:
34:b2:56:d5:4d:27:de:98:41:22:db:39:4e:eb:c7:ed:01:25:
e9:21:71:a4:51:64:bb:85:26:05:07:09:ca:09:79:60:9f:34:
9c:99:1a:09:f1:8b:40:6c:f3:65:59:56:3c:cf:d1:9a:9c:38:
12:2a:ee:d8:f4:4b:3c:58:a1:e0:b3:87:db:5b:58:1d:39:27:
54:31:7e:c2:fc:2d:3f:b1:ce:16:2e:bc:4f:1d:e2:6d:82:70:
d4:3a:42:c0:ad:4b:6c:ac:5b:16:d8:6c:99:40:1e:90:a8:bf:
4b:7e:ef:05:40:d2:44:a1:43:c9:ed:c2:66:c7:17:61:cb:3d:
cf:2c:93:0b:fd:0e:e1:d3:60:0c:b6:a0:21:2c:e9:c8:d0:00:
42:6d:a5:4a:f3:ba:c8:72:be:02:d4:ae:c0:b4:7d:fe:60:c9:
ae:81:41:89:84:5a:d0:3e:20:b5:3c:c4:76:8e:f4:f4:a7:7b:
3a:d5:d4:eb:e4:83:3d:0b:ec:84:89:df:5b:e2:3b:11:55:2e:
85:10:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:52:04 2026 by rpki-client