Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199972.roa
File: AS199972.roa (raw, json)
Hash identifier: u0QCP7FcuVb9gt7ioeOaembRgqurf7tMandIgeQFbYU=
Subject key identifier: C5:DE:7B:99:53:80:97:A3:E6:A2:C7:A6:FD:3C:89:73:FB:A5:78:17
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 54B398812BBC11697DB85C0C104DDAE93B7E137B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199972.roa
Signing time: Fri 06 Nov 2026 17:36:54 +0000
ROA not before: Fri 06 Nov 2026 17:31:54 +0000
ROA not after: Fri 05 Nov 2027 17:36:54 +0000
asID: 199972
IP address blocks: 2a13:9500:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b3:98:81:2b:bc:11:69:7d:b8:5c:0c:10:4d:da:e9:3b:7e:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 6 17:31:54 2026 GMT
Not After : Nov 5 17:36:54 2027 GMT
Subject: CN=C5DE7B99538097A3E6A2C7A6FD3C8973FBA57817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:e7:00:c9:4f:39:19:1f:6e:24:20:9a:e8:
7c:6f:9f:a3:37:a0:c6:63:e2:a2:20:a5:9b:62:e5:
f3:25:6e:0c:ef:9b:90:3c:79:82:46:42:fe:d7:c1:
12:3d:8f:82:ce:3c:29:14:4e:0a:18:70:81:90:81:
5a:d2:db:7f:aa:ef:76:8d:e6:c3:42:db:1f:5a:04:
85:19:84:00:68:84:dc:0b:df:b7:51:f5:5f:78:a3:
e4:cc:8e:5e:ed:35:2d:2d:0e:db:57:c0:18:19:07:
dc:a5:b5:a2:37:47:98:19:58:a5:5d:bb:5f:7c:5b:
7d:97:30:90:57:7f:1c:9e:d4:dd:7d:39:bc:84:48:
46:1b:89:bb:70:bf:8c:57:a9:4d:d6:d3:e9:ec:ff:
5b:04:9f:53:c7:c3:8e:71:60:ab:70:9c:61:ab:28:
73:da:45:7f:62:61:7c:08:3c:e9:87:e5:54:b8:51:
61:63:62:7c:ce:dc:b1:12:e9:26:76:7b:0c:56:05:
ee:6d:ed:ec:c7:d3:2b:ce:59:e3:66:c1:93:c6:da:
49:c9:9c:11:b4:75:46:c7:0f:af:89:18:47:d4:7d:
b3:1f:34:7c:8d:87:10:4f:83:eb:61:a1:79:97:75:
0d:71:8e:95:0e:40:2b:5b:9a:f0:16:e5:94:dc:aa:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:7B:99:53:80:97:A3:E6:A2:C7:A6:FD:3C:89:73:FB:A5:78:17
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:200::/48
Signature Algorithm: sha256WithRSAEncryption
42:45:e6:1d:b8:b0:69:1d:10:20:8e:13:d5:b6:71:87:78:63:
68:f9:63:8c:5a:79:28:41:e2:ba:c9:aa:3d:b4:7a:d6:18:70:
fd:13:ca:ce:6f:ac:48:47:e9:86:0c:39:dc:90:8a:2f:68:b0:
f4:95:a4:7c:70:89:05:29:86:5b:5d:a5:7c:04:7a:a2:af:5a:
84:73:62:60:99:96:42:13:c1:7e:65:46:9b:ae:52:c4:ea:b7:
f3:39:59:79:1f:05:93:0e:de:5f:5b:31:59:52:41:79:bc:57:
05:14:54:7b:01:4c:be:48:5a:2e:1f:d0:70:27:ff:6a:c0:ff:
10:9f:0f:f4:b6:96:42:e9:40:97:5f:01:c7:48:15:9b:b6:33:
33:88:32:97:d4:07:fa:11:64:dc:20:ee:0b:f5:b9:5f:1e:dc:
c0:29:61:53:03:0f:ce:ac:4a:0a:df:42:c9:1d:e2:7a:b5:ec:
5c:47:a5:65:a5:a8:b4:ac:83:73:cb:a1:3c:2b:35:c5:19:4e:
a1:e3:ce:0e:d2:02:b3:4d:e2:e5:d2:12:60:50:c5:57:d8:82:
07:42:1c:bc:59:1a:8a:6f:a0:58:19:2a:ce:ff:a1:d6:b3:6b:
b0:c3:f3:a8:2d:dc:15:5b:7e:5f:2e:70:02:e8:a1:d5:88:e3:
00:c1:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:02:40 2026 by rpki-client