Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
File: AS199856.roa (raw, json)
Hash identifier: NyD2+BXr4c0Bl7cdsDkWCL/Z0XwWltnrA9I6bBmmHwg=
Subject key identifier: 2D:AC:F0:3F:F2:14:6F:B0:72:19:0F:77:E7:74:14:81:BE:5F:99:11
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 378BDC3E6ED2D352B3EDB7641551386D25BBFFFB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
Signing time: Fri 06 Nov 2026 14:49:40 +0000
ROA not before: Fri 06 Nov 2026 14:44:40 +0000
ROA not after: Fri 05 Nov 2027 14:49:40 +0000
asID: 199856
IP address blocks: 176.105.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8b:dc:3e:6e:d2:d3:52:b3:ed:b7:64:15:51:38:6d:25:bb:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 6 14:44:40 2026 GMT
Not After : Nov 5 14:49:40 2027 GMT
Subject: CN=2DACF03FF2146FB072190F77E7741481BE5F9911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:d2:81:c5:a1:22:68:53:10:4f:94:4c:0f:
3f:61:ea:03:4f:bb:d1:fb:d9:ab:32:d6:9d:14:19:
2d:d0:9f:e8:20:24:ec:02:7a:6e:c2:1b:76:d8:37:
68:34:e5:b6:0c:31:d7:de:6f:32:d1:ff:cb:5a:96:
57:5a:77:19:e3:8e:9d:83:c0:e6:87:16:3f:41:06:
8b:ac:80:0e:1b:f8:b9:2c:4b:be:5f:2e:20:34:31:
fb:59:10:50:7b:42:31:a4:7d:58:92:7b:77:85:3e:
50:d5:06:c1:9b:5e:26:e8:81:5c:6d:16:52:ec:1c:
38:5d:96:73:d8:1e:e6:73:7c:cd:42:b7:44:29:74:
a0:40:9a:ba:db:62:a0:62:4c:84:e5:7a:20:6f:7e:
35:78:36:13:28:42:2c:db:bd:65:b5:d7:e9:88:f9:
6c:2b:22:01:bd:67:03:49:98:18:6d:c8:15:fb:37:
3e:90:6c:93:b9:46:04:48:54:71:cc:ff:4c:bc:23:
c9:e3:69:ba:6e:17:03:20:58:3f:93:85:08:65:01:
9a:fe:58:52:49:6d:ce:70:77:50:52:f7:77:88:2e:
a3:9a:7d:96:65:b3:32:2a:1f:d4:75:80:9f:a6:79:
71:64:03:7d:9d:b1:29:92:f2:19:2a:3e:58:00:e4:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:F0:3F:F2:14:6F:B0:72:19:0F:77:E7:74:14:81:BE:5F:99:11
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ed:f1:28:fc:dc:d5:25:16:01:2b:8a:f9:8d:db:3e:7a:50:
c4:d8:1d:23:7f:4b:e4:1a:3a:71:11:1b:e6:7a:5a:5e:f5:2d:
13:8d:ee:ab:1f:41:75:b7:38:22:ec:9f:f8:6d:d2:2c:50:19:
36:73:71:a3:42:92:e2:42:fc:77:c4:4b:36:2f:a7:f9:77:b0:
fc:a1:5c:25:48:2b:09:cc:e9:38:24:c5:33:ce:c8:cc:08:0a:
77:de:1c:1f:ff:4d:7d:85:57:95:2d:33:97:76:fb:1c:e6:9b:
c7:cb:dd:8e:9d:ef:54:41:b2:97:af:9c:ab:f0:37:64:3c:56:
46:f6:f6:d6:35:22:0c:bf:18:06:91:0c:f1:4c:15:63:56:57:
28:18:ab:6c:f1:9a:53:b1:91:18:8b:96:6e:9f:be:d3:2e:35:
46:4c:d4:48:c8:f6:39:e8:c2:05:03:76:83:5f:d8:28:e8:be:
c8:12:aa:c3:c2:da:9b:9e:d8:e3:04:3d:e9:e2:24:94:1e:93:
36:f3:85:c5:eb:db:04:50:ae:8f:d2:09:b4:fa:46:ba:4e:bb:
a4:fd:95:70:1b:9c:04:ff:d1:2a:26:a3:dd:fc:fb:21:e5:41:
68:95:cb:73:54:b1:1b:f7:c8:77:a0:15:80:34:3b:94:04:88:
13:56:e3:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUN4vcPm7S01Kz7bdkFVE4bSW7//swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjExMDYxNDQ0NDBaFw0yNzExMDUxNDQ5NDBaMDMxMTAvBgNV
BAMTKDJEQUNGMDNGRjIxNDZGQjA3MjE5MEY3N0U3NzQxNDgxQkU1Rjk5MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xNKBxaEiaFMQT5RMDz9h6gNP
u9H72asy1p0UGS3Qn+ggJOwCem7CG3bYN2g05bYMMdfebzLR/8talldadxnjjp2D
wOaHFj9BBousgA4b+LksS75fLiA0MftZEFB7QjGkfViSe3eFPlDVBsGbXibogVxt
FlLsHDhdlnPYHuZzfM1Ct0QpdKBAmrrbYqBiTITleiBvfjV4NhMoQizbvWW11+mI
+WwrIgG9ZwNJmBhtyBX7Nz6QbJO5RgRIVHHM/0y8I8njabpuFwMgWD+ThQhlAZr+
WFJJbc5wd1BS93eILqOafZZlszIqH9R1gJ+meXFkA32dsSmS8hkqPlgA5OJJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQULazwP/IUb7ByGQ9353QUgb5fmREwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTk5ODU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGni
MA0GCSqGSIb3DQEBCwUAA4IBAQAG7fEo/NzVJRYBK4r5jds+elDE2B0jf0vkGjpx
ERvmelpe9S0Tje6rH0F1tzgi7J/4bdIsUBk2c3GjQpLiQvx3xEs2L6f5d7D8oVwl
SCsJzOk4JMUzzsjMCAp33hwf/019hVeVLTOXdvsc5pvHy92One9UQbKXr5yr8Ddk
PFZG9vbWNSIMvxgGkQzxTBVjVlcoGKts8ZpTsZEYi5Zun77TLjVGTNRIyPY56MIF
A3aDX9go6L7IEqrDwtqbntjjBD3p4iSUHpM284XF69sEUK6P0gm0+ka6Truk/ZVw
G5wE/9EqJqPd/Psh5UFolctzVLEb98h3oBWANDuUBIgTVuNs
-----END CERTIFICATE-----
Generated at Thu Nov 12 04:38:45 2026 by rpki-client