Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199959.roa
File: AS199959.roa (raw, json)
Hash identifier: bV0q5Ix8bxUPC0bydmT12L03NG858kMhcKkNDf2V9FE=
Subject key identifier: D8:6B:73:BF:62:E7:19:B4:7B:1D:77:3C:CE:3D:9E:80:3D:97:8F:47
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 45E371EF776F55BB7CC192767C93D05A2D76FCF7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199959.roa
Signing time: Wed 29 Apr 2026 05:32:14 +0000
ROA not before: Wed 29 Apr 2026 05:27:14 +0000
ROA not after: Wed 28 Apr 2027 05:32:14 +0000
asID: 199959
IP address blocks: 84.75.232.0/22 maxlen: 22
178.83.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e3:71:ef:77:6f:55:bb:7c:c1:92:76:7c:93:d0:5a:2d:76:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 05:27:14 2026 GMT
Not After : Apr 28 05:32:14 2027 GMT
Subject: CN=D86B73BF62E719B47B1D773CCE3D9E803D978F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:c8:5b:ff:74:30:f5:2b:72:3c:a8:b8:bf:
5f:ba:5d:e9:4f:64:69:e8:cf:6b:f5:66:69:d8:60:
7f:82:45:c9:44:1d:61:1e:71:29:3a:73:96:1e:db:
bb:53:cd:8f:8c:1b:a9:75:9f:4c:5e:5a:d3:96:9a:
3d:ea:c4:e4:c9:f6:51:ed:c3:cb:98:c6:ab:a1:03:
cc:0b:e8:5d:36:81:1f:9b:99:64:a2:e6:ce:0c:4a:
04:ac:4d:d8:47:1f:17:f0:f7:10:ae:40:9b:2e:bb:
80:70:39:66:75:3d:90:c8:cf:22:96:c5:60:f8:51:
2a:d5:90:14:02:21:bd:1d:54:67:91:f4:27:4b:a2:
50:bf:af:b7:df:b1:03:76:6b:7f:2b:f6:69:8c:46:
9d:82:7e:43:32:ce:c4:a2:60:d8:94:7d:32:9e:5b:
49:64:f6:82:23:4f:56:49:93:5b:1a:ab:84:4a:e7:
24:e3:05:e6:62:52:9e:ca:10:9d:65:13:90:8c:3c:
e3:05:55:d4:fb:41:9d:8f:f1:0b:f0:3e:8c:31:2e:
5b:a4:e2:9f:5d:67:28:64:fd:49:0f:1f:bd:35:70:
40:af:62:41:20:21:b0:b6:15:8e:f6:ae:d7:bd:84:
c0:46:57:3e:6f:d5:a0:07:a9:23:0e:20:77:8d:95:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:73:BF:62:E7:19:B4:7B:1D:77:3C:CE:3D:9E:80:3D:97:8F:47
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.232.0/22
178.83.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:fb:35:2a:46:0f:47:25:59:1b:18:cc:71:42:9c:01:36:10:
cc:05:aa:52:8d:17:70:c2:b9:cb:ab:38:31:6e:43:ff:c7:a4:
47:f2:b9:d5:8d:f3:dd:ff:a3:df:c1:02:d4:54:98:38:d2:2f:
f1:8c:4f:2d:64:eb:ee:66:01:da:23:96:25:79:92:64:dc:d8:
bd:7c:19:04:a1:f0:33:39:12:12:f4:29:1e:c2:08:1a:8e:01:
61:6b:0a:9d:c8:80:b9:6f:c7:9e:21:f1:58:fc:e1:d9:f2:05:
78:9a:b9:48:fe:3e:31:e1:6f:40:2f:a5:58:90:71:df:71:23:
f8:a6:ea:16:28:5f:7d:15:76:cb:e6:5e:f1:8e:4e:54:9b:7d:
a1:23:2e:5b:98:70:75:b4:b3:b4:b8:2a:36:f4:75:fe:8a:d5:
b9:27:fb:1f:eb:f5:42:26:bb:62:fb:da:61:31:98:cd:05:a6:
ac:7a:b1:1d:1b:12:d9:dc:01:f2:31:59:f7:1d:77:36:34:d4:
e1:d8:39:33:dc:91:48:a9:ad:84:0c:4f:a6:21:ab:71:fb:62:
ae:e8:16:f6:db:bf:46:c1:8f:bf:79:d0:65:ec:29:22:b3:17:
a9:92:ca:fc:80:4f:2f:b1:33:14:7b:29:f4:82:32:d1:17:b3:
da:80:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:32:22 2026 by rpki-client