Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199109.roa
File: AS199109.roa (raw, json)
Hash identifier: fs7JIolDtEsj8EMWSsn1AMmPk3Rf5lZdSW00q52PLTo=
Subject key identifier: 2D:E9:77:89:85:5C:2D:56:32:39:15:CE:F6:90:03:D2:FE:32:ED:40
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 05607D83236867538001AC5BC14151466D3B058E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199109.roa
Signing time: Tue 14 Oct 2025 20:27:16 +0000
ROA not before: Tue 14 Oct 2025 20:22:16 +0000
ROA not after: Tue 13 Oct 2026 20:27:16 +0000
asID: 199109
IP address blocks: 2a0f:85c1:d6c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:60:7d:83:23:68:67:53:80:01:ac:5b:c1:41:51:46:6d:3b:05:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:22:16 2025 GMT
Not After : Oct 13 20:27:16 2026 GMT
Subject: CN=2DE97789855C2D56323915CEF69003D2FE32ED40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:44:be:a3:6b:f8:b1:4f:ac:50:1c:76:75:
67:1f:f1:d5:2f:5e:d4:49:8c:18:05:39:95:8b:47:
43:ae:d1:49:27:f9:43:55:84:9c:a7:9f:ae:fc:73:
b3:37:b9:96:f9:d1:ca:ae:91:ee:e4:3a:43:d3:f5:
51:93:54:0c:32:22:73:00:5d:84:e4:f7:8a:74:5c:
df:fe:59:12:95:70:3f:88:98:70:c0:fe:8c:c4:19:
76:56:39:9c:8f:c5:71:cd:b4:39:ac:69:43:b5:f0:
78:84:f3:85:35:98:ee:17:48:fc:a8:da:6f:f2:a8:
cd:ce:b5:ca:8d:c3:3d:15:ee:23:4d:39:2d:a5:58:
3f:f7:73:9a:c1:16:e7:fd:02:96:99:b9:8f:20:8c:
c6:cb:f0:39:47:54:af:f9:55:ee:c8:2b:50:af:17:
ee:64:7b:11:c4:a0:fa:3f:73:5c:f7:97:84:45:0d:
42:cd:ac:21:9e:7d:c9:48:f7:02:ac:6d:4e:8c:38:
13:f3:71:36:27:c5:b8:da:11:f4:54:6d:85:4a:90:
50:ba:f6:1f:be:9f:66:64:9c:11:f0:1d:8f:6b:9c:
bd:9b:c7:11:5e:22:f9:69:7d:da:60:8b:d8:f9:a6:
32:d9:0b:bc:01:d4:bb:be:d4:08:75:bf:f8:56:e6:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:77:89:85:5C:2D:56:32:39:15:CE:F6:90:03:D2:FE:32:ED:40
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199109.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6c::/48
Signature Algorithm: sha256WithRSAEncryption
51:d9:7a:0a:5c:a2:ca:82:6e:b2:22:ee:de:e5:85:60:61:16:
93:6e:7e:45:ad:a1:88:86:c2:a2:60:7e:56:94:7d:6d:02:f4:
42:12:3a:07:98:68:18:78:9a:73:07:4b:fa:5d:7b:23:bc:f6:
21:ef:3a:fe:2a:bc:00:78:9c:01:65:4c:a8:53:f7:c5:18:5c:
6f:62:d6:62:8c:b7:5f:03:6d:5c:b5:8a:5e:55:ac:11:74:ab:
56:71:8a:f6:bd:3c:96:11:2b:09:84:4b:04:05:8c:2b:b9:45:
e7:a0:92:f2:f5:98:92:8f:7e:e9:a8:da:23:2c:95:79:69:d8:
9a:24:68:8c:ac:93:54:66:a5:55:0a:b2:bf:67:7f:8e:a5:0e:
b6:15:24:23:dd:ac:ab:d5:f5:24:ec:4b:12:89:a4:1f:ed:1a:
97:01:b8:06:ef:91:80:02:08:1a:53:74:f6:5b:2c:5f:c7:f0:
ae:4e:3e:07:c0:f5:25:44:e3:be:77:54:b2:82:39:30:94:ad:
90:f7:46:73:69:6b:56:46:b3:9d:9b:f6:7a:89:0a:d7:3f:f3:
34:a8:2f:d2:02:e8:d1:16:ec:00:14:51:f4:a6:85:83:8f:0b:
8e:fb:f1:a1:d5:c8:fe:52:c3:8d:6f:88:22:88:43:e0:54:45:
36:ac:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:32 2025 by rpki-client