Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: N0xwaHTsul+r1cQF2y4sMlAd00xzsfhlDJhy4d8dGic=
Subject key identifier: B6:5F:0D:FF:EA:13:A4:89:29:DE:DD:1F:56:BC:85:B3:1A:F1:A2:87
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 21A25BCCFF58E5136861FBBB6F5716CC2B58AF82
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199741.roa
Signing time: Thu 15 Oct 2026 09:41:25 +0000
ROA not before: Thu 15 Oct 2026 09:36:25 +0000
ROA not after: Thu 14 Oct 2027 09:41:25 +0000
asID: 199741
IP address blocks: 5.181.124.0/24 maxlen: 24
5.252.78.0/24 maxlen: 24
181.215.226.0/24 maxlen: 24
181.215.229.0/24 maxlen: 24
191.96.110.0/24 maxlen: 24
191.96.209.0/24 maxlen: 24
191.101.59.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a2:5b:cc:ff:58:e5:13:68:61:fb:bb:6f:57:16:cc:2b:58:af:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 09:36:25 2026 GMT
Not After : Oct 14 09:41:25 2027 GMT
Subject: CN=B65F0DFFEA13A48929DEDD1F56BC85B31AF1A287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:46:0e:ae:6a:32:60:7a:d1:ed:25:7e:11:
4d:d8:44:49:cc:c1:8b:53:d4:4e:2d:d8:4c:cb:84:
76:cd:a8:42:b9:b8:be:1e:3c:70:20:5b:25:30:85:
4e:f0:81:1f:63:fc:a9:98:67:e5:4b:8a:69:37:18:
59:b5:df:d9:ab:10:66:71:e2:8c:19:3b:1b:83:a8:
1e:93:6e:f4:40:d4:9e:06:bb:98:94:1b:33:e6:c5:
2f:4d:0a:e0:a5:15:d6:27:7c:cc:10:d9:77:03:97:
cd:0b:6f:6e:1e:7f:b2:9d:82:db:15:ef:e9:ed:ee:
f9:a5:02:eb:70:fc:4b:28:73:e3:81:29:72:35:45:
a1:7e:49:88:a8:99:1d:cc:fc:38:18:22:bf:25:30:
b9:97:0a:b6:36:d4:e8:c4:23:a5:6b:a2:ca:94:48:
c4:7f:19:49:e3:e8:2e:2e:25:9f:6e:1e:6a:02:0c:
cb:0b:3a:52:7f:88:3f:67:18:f8:2a:c8:36:ad:a2:
d2:22:78:2a:54:fb:21:ae:5d:6e:69:40:8d:1f:2f:
0b:45:6d:b0:f9:61:c7:9b:9b:53:03:53:eb:df:63:
c7:df:2e:46:f4:a5:6f:04:9a:ea:ab:9d:87:fb:9d:
78:62:29:4f:76:a5:19:d6:69:cb:62:f4:2c:20:b9:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5F:0D:FF:EA:13:A4:89:29:DE:DD:1F:56:BC:85:B3:1A:F1:A2:87
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.124.0/24
5.252.78.0/24
181.215.226.0/24
181.215.229.0/24
191.96.110.0/24
191.96.209.0/24
191.101.59.0/24
191.101.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d3:2a:f8:71:3d:64:21:c7:f2:c2:4c:a6:18:00:02:82:50:
16:dc:e6:58:71:80:71:4d:87:87:cd:4b:1f:a1:2d:46:fd:a5:
f4:9f:2c:91:00:c3:18:8d:f7:4a:b7:0b:08:60:62:ad:83:59:
ff:48:d5:d1:04:94:4c:13:dc:98:c5:8c:29:7d:15:da:d1:be:
95:c7:e1:84:3d:39:2a:8c:0b:3f:f2:16:67:01:de:a0:48:a2:
2e:85:89:5a:61:2e:fd:72:05:bd:d8:9c:ba:45:2d:15:9b:8c:
6f:86:94:eb:b4:a0:c5:a5:13:b3:80:45:7e:41:4a:b6:3c:e6:
85:94:1a:11:8c:06:22:be:a2:6c:47:73:8a:19:0f:36:dd:e3:
ae:c6:b7:9e:d1:d2:e4:37:6b:96:95:d5:77:d8:64:c3:86:08:
a6:12:de:71:c1:aa:c3:17:6a:ef:1b:c1:09:84:bc:38:d7:9d:
0e:6d:46:ed:15:87:ba:39:52:ef:27:86:1d:3d:d0:e4:01:91:
13:13:74:ac:aa:79:1d:c2:f6:2b:62:d1:26:53:e5:37:77:9f:
a9:b2:76:35:1f:55:26:80:8e:de:c6:2d:b7:9c:0d:bd:ad:3b:
93:1e:62:7f:7b:d1:46:53:52:d8:5b:ef:c3:ac:e7:86:fc:c8:
8c:8c:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 09:37:07 2026 by rpki-client