Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS199423.roa
File: AS199423.roa (raw, json)
Hash identifier: NKBneFzg+AgvFjJgEPgDHCbDsYpwsQfWgbIIWwA+cSA=
Subject key identifier: 2B:3D:00:98:C1:31:21:59:69:81:3B:F6:0F:78:1D:BF:9A:40:C1:07
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 54E7D0821731B38D6C03680E9967C19DA833118F
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS199423.roa
Signing time: Mon 13 Apr 2026 11:44:01 +0000
ROA not before: Mon 13 Apr 2026 11:39:01 +0000
ROA not after: Mon 12 Apr 2027 11:44:01 +0000
asID: 199423
IP address blocks: 193.187.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e7:d0:82:17:31:b3:8d:6c:03:68:0e:99:67:c1:9d:a8:33:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 13 11:39:01 2026 GMT
Not After : Apr 12 11:44:01 2027 GMT
Subject: CN=2B3D0098C131215969813BF60F781DBF9A40C107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:de:2e:26:88:93:1f:f4:39:ee:4c:d8:c9:
9a:f0:ac:49:0f:7b:bf:9a:60:85:33:f1:bf:51:ca:
61:34:86:93:c7:20:04:c7:52:5c:5b:bc:02:a5:e3:
00:c0:d8:26:c8:df:d5:82:13:f9:c8:da:2d:2d:61:
ee:c2:7c:76:47:87:56:39:d8:0d:0c:a5:18:1c:a5:
f6:e3:b0:b9:b6:f7:e9:19:14:15:ec:7e:42:17:e1:
90:ae:49:71:05:bd:91:5a:77:bb:a2:3e:a5:12:c0:
2d:69:77:58:e7:29:e1:b5:f8:5c:fb:c0:8b:20:5c:
5c:bc:f5:49:8d:3a:c3:68:53:73:10:b8:0b:31:06:
13:c4:82:6d:35:61:16:a6:c8:86:b2:8b:ae:c9:fa:
f6:7a:d4:62:80:c9:35:f7:48:a9:02:18:c1:9c:e5:
f2:eb:be:12:d2:f5:7a:bf:92:c1:d1:b8:fe:a8:01:
60:ea:28:5c:e5:11:5d:4a:ce:26:cd:b9:c9:23:92:
35:93:e3:09:eb:30:a7:d8:1f:32:95:99:c8:ae:c4:
3c:45:d6:69:3d:6d:ec:65:1c:85:e3:7f:da:a5:a3:
be:1a:85:91:70:bf:bf:14:c8:02:02:0b:73:f0:78:
7b:9d:34:ef:f3:63:61:49:37:84:c2:4a:3f:bc:33:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:00:98:C1:31:21:59:69:81:3B:F6:0F:78:1D:BF:9A:40:C1:07
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS199423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ee:84:0a:af:3e:a6:03:1d:ab:1b:09:c1:79:bb:9f:54:49:
ad:07:a1:2e:a8:f5:c6:63:17:bc:99:a3:fc:4d:3f:cc:a8:38:
81:dc:a3:00:ff:23:a6:54:d9:ac:da:ff:7e:a0:3f:db:74:3b:
7a:84:6b:a5:5b:b4:78:c7:50:bb:35:b7:e9:53:be:3b:3f:3d:
a2:60:c0:1a:2a:01:be:c0:82:8b:6b:7a:6c:de:2f:22:74:fe:
b6:98:42:c1:09:35:58:ce:20:73:5e:bd:13:78:4d:c1:36:3e:
79:b5:ac:af:6e:c4:ce:f4:0f:29:2a:dd:81:95:83:38:5a:b4:
78:24:c7:cf:da:fe:06:94:82:a1:65:e4:0f:09:16:82:6e:ea:
c8:ee:bf:fd:5b:9e:0f:76:6d:a5:c4:a2:5e:df:75:fb:82:30:
5d:cc:de:29:d6:87:52:2b:32:39:da:20:de:68:78:22:9c:f7:
4e:a4:10:a6:49:07:07:d1:00:27:e1:61:a3:b8:26:b8:3c:9e:
a3:c2:7c:5e:89:c7:ff:38:be:2b:5a:2c:9d:a3:9a:62:30:93:
28:89:90:b1:5e:c9:d7:bd:87:b9:2e:cc:24:54:f6:65:49:28:
46:ba:6d:75:9d:ee:5a:8a:63:f8:bc:5d:65:67:5e:be:cd:73:
20:2b:ea:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVOfQghcxs41sA2gOmWfBnagzEY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA0MTMxMTM5MDFaFw0yNzA0MTIxMTQ0MDFaMDMxMTAvBgNV
BAMTKDJCM0QwMDk4QzEzMTIxNTk2OTgxM0JGNjBGNzgxREJGOUE0MEMxMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzx94uJoiTH/Q57kzYyZrwrEkP
e7+aYIUz8b9RymE0hpPHIATHUlxbvAKl4wDA2CbI39WCE/nI2i0tYe7CfHZHh1Y5
2A0MpRgcpfbjsLm29+kZFBXsfkIX4ZCuSXEFvZFad7uiPqUSwC1pd1jnKeG1+Fz7
wIsgXFy89UmNOsNoU3MQuAsxBhPEgm01YRamyIayi67J+vZ61GKAyTX3SKkCGMGc
5fLrvhLS9Xq/ksHRuP6oAWDqKFzlEV1KzibNuckjkjWT4wnrMKfYHzKVmciuxDxF
1mk9bexlHIXjf9qlo74ahZFwv78UyAICC3PweHudNO/zY2FJN4TCSj+8Myf/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUKz0AmMExIVlpgTv2D3gdv5pAwQcwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTk5NDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbuG
MA0GCSqGSIb3DQEBCwUAA4IBAQBa7oQKrz6mAx2rGwnBebufVEmtB6EuqPXGYxe8
maP8TT/MqDiB3KMA/yOmVNms2v9+oD/bdDt6hGulW7R4x1C7NbfpU747Pz2iYMAa
KgG+wIKLa3ps3i8idP62mELBCTVYziBzXr0TeE3BNj55tayvbsTO9A8pKt2BlYM4
WrR4JMfP2v4GlIKhZeQPCRaCburI7r/9W54Pdm2lxKJe33X7gjBdzN4p1odSKzI5
2iDeaHginPdOpBCmSQcH0QAn4WGjuCa4PJ6jwnxeicf/OL4rWiydo5piMJMoiZCx
XsnXvYe5LswkVPZlSShGum11ne5aimP4vF1lZ16+zXMgK+qL
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:50:18 2026 by rpki-client