Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS199929.roa
File: AS199929.roa (raw, json)
Hash identifier: KJ12RebQ2C3lbYAdlR8sDYZggbFpvSSri/rdgfTbB2g=
Subject key identifier: A8:CE:CA:4E:8B:19:50:81:89:32:04:99:7F:4E:73:A3:D8:B6:A9:D9
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 684A6D2FB9C0E88B7B804377E0469020A10DE97D
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS199929.roa
Signing time: Sat 18 Apr 2026 11:54:22 +0000
ROA not before: Sat 18 Apr 2026 11:49:22 +0000
ROA not after: Sat 17 Apr 2027 11:54:22 +0000
asID: 199929
IP address blocks: 31.40.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4a:6d:2f:b9:c0:e8:8b:7b:80:43:77:e0:46:90:20:a1:0d:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 18 11:49:22 2026 GMT
Not After : Apr 17 11:54:22 2027 GMT
Subject: CN=A8CECA4E8B195081893204997F4E73A3D8B6A9D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:55:d3:e6:10:1a:f2:2b:f4:de:fe:b2:8c:
ac:1f:0d:27:22:a0:60:a6:0c:d2:ca:26:8e:75:e5:
ff:b7:0b:a3:62:23:85:c7:dc:05:84:5a:49:35:f5:
b1:d8:76:6f:a7:88:82:91:07:f7:1a:f7:39:6b:7b:
df:c8:ff:fb:8b:64:66:93:58:fd:be:85:d7:19:f5:
12:ce:95:4d:bc:a3:15:75:55:fc:80:86:74:7a:80:
60:16:99:f1:cb:fd:5a:87:99:5f:f7:29:e3:73:5d:
6c:28:2c:94:02:81:4f:19:00:c4:ac:80:f8:74:2d:
70:30:c1:65:49:bb:a5:f3:fa:2e:9d:7b:96:c8:af:
ac:74:40:67:78:6d:cd:3c:1b:f1:27:c7:2c:54:cb:
b9:94:0a:db:2b:5b:06:ab:a9:49:22:cd:27:f6:9c:
a0:5c:c4:27:44:f3:b4:61:4c:67:6c:21:d7:66:b8:
e4:0d:00:c7:08:bb:9b:c7:ac:d0:e0:b3:59:7c:c6:
d2:ac:14:24:7f:43:3e:6c:12:25:70:a4:ff:a4:ec:
a9:ff:f7:3b:d0:62:e7:42:15:f2:b9:4c:e4:6f:40:
8b:1b:fe:4b:49:cc:6b:d4:ce:7f:fd:da:a8:98:3b:
bb:34:b7:fe:01:fe:63:e6:a8:c5:78:bb:c6:44:65:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:CA:4E:8B:19:50:81:89:32:04:99:7F:4E:73:A3:D8:B6:A9:D9
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS199929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.197.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a6:44:f7:18:5e:b1:a9:f8:fd:a2:b8:dc:f6:0d:f6:52:0e:
01:70:7e:51:11:23:3b:73:00:6d:4b:5e:88:73:25:65:66:04:
05:26:f2:9f:3c:2d:38:5b:74:06:ce:f3:71:8a:af:3e:9a:62:
d9:7a:1c:c2:61:c4:6b:7b:dd:3c:d1:97:9c:d6:b1:2c:8e:1c:
d8:3e:0b:35:62:0a:8c:60:a8:85:e4:ec:ca:cc:66:32:9d:9b:
35:bb:42:7c:61:9a:4c:f5:bc:7d:30:ce:50:5a:8d:4f:e1:f7:
f1:fa:69:d9:92:37:9e:9f:9f:88:b3:4c:37:01:fc:a2:15:4e:
42:fd:41:d7:2a:ff:5b:42:7d:18:b1:02:21:69:4d:35:90:53:
d1:27:a1:3e:ef:89:fe:7a:dc:4f:14:45:fb:aa:7f:8c:f6:ce:
54:fd:5f:dd:64:37:c3:f1:e5:18:f6:37:40:b4:79:cb:69:a0:
61:e7:62:8f:56:4c:2a:6a:0a:e5:ce:54:26:11:23:7c:44:93:
89:d0:f7:a9:d8:bc:dd:97:ce:91:e0:6c:e7:62:2d:b7:18:04:
e8:06:67:d6:b4:57:11:82:6f:37:f1:f3:89:7e:81:a0:f7:cd:
a3:d8:75:fd:b0:7c:e3:9f:7d:48:08:ae:85:bd:37:c4:b8:b9:
c9:32:5c:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaEptL7nA6It7gEN34EaQIKEN6X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA0MTgxMTQ5MjJaFw0yNzA0MTcxMTU0MjJaMDMxMTAvBgNV
BAMTKEE4Q0VDQTRFOEIxOTUwODE4OTMyMDQ5OTdGNEU3M0EzRDhCNkE5RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKb1XT5hAa8iv03v6yjKwfDSci
oGCmDNLKJo515f+3C6NiI4XH3AWEWkk19bHYdm+niIKRB/ca9zlre9/I//uLZGaT
WP2+hdcZ9RLOlU28oxV1VfyAhnR6gGAWmfHL/VqHmV/3KeNzXWwoLJQCgU8ZAMSs
gPh0LXAwwWVJu6Xz+i6de5bIr6x0QGd4bc08G/EnxyxUy7mUCtsrWwarqUkizSf2
nKBcxCdE87RhTGdsIddmuOQNAMcIu5vHrNDgs1l8xtKsFCR/Qz5sEiVwpP+k7Kn/
9zvQYudCFfK5TORvQIsb/ktJzGvUzn/92qiYO7s0t/4B/mPmqMV4u8ZEZSAvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUqM7KTosZUIGJMgSZf05zo9i2qdkwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTk5OTI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyjF
MA0GCSqGSIb3DQEBCwUAA4IBAQADpkT3GF6xqfj9orjc9g32Ug4BcH5RESM7cwBt
S16IcyVlZgQFJvKfPC04W3QGzvNxiq8+mmLZehzCYcRre9080Zec1rEsjhzYPgs1
YgqMYKiF5OzKzGYynZs1u0J8YZpM9bx9MM5QWo1P4ffx+mnZkjeen5+Is0w3Afyi
FU5C/UHXKv9bQn0YsQIhaU01kFPRJ6E+74n+etxPFEX7qn+M9s5U/V/dZDfD8eUY
9jdAtHnLaaBh52KPVkwqagrlzlQmESN8RJOJ0Pep2Lzdl86R4GznYi23GAToBmfW
tFcRgm838fOJfoGg982j2HX9sHzjn31ICK6FvTfEuLnJMlxM
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:50:18 2026 by rpki-client