Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
File: AS199129.roa (raw, json)
Hash identifier: oRxcsEEiA5Xl6EQe4bd53oUzPAExsgGMV1lw81GK9Go=
Subject key identifier: C2:82:F4:24:D8:A7:57:A9:A5:DB:12:C6:92:54:BD:A2:B4:1C:BB:DC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 053D8AD34D332DF6C6372ED4C7541F00F8E69E1A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
Signing time: Wed 09 Sep 2026 00:01:37 +0000
ROA not before: Tue 08 Sep 2026 23:56:37 +0000
ROA not after: Wed 08 Sep 2027 00:01:37 +0000
asID: 199129
IP address blocks: 2a13:9500:1b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3d:8a:d3:4d:33:2d:f6:c6:37:2e:d4:c7:54:1f:00:f8:e6:9e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 23:56:37 2026 GMT
Not After : Sep 8 00:01:37 2027 GMT
Subject: CN=C282F424D8A757A9A5DB12C69254BDA2B41CBBDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:d9:c0:99:22:e8:14:19:4d:34:5b:8a:02:
02:2f:23:ec:96:b7:86:b4:01:4e:05:06:cc:40:37:
ab:8a:82:aa:54:71:95:f1:91:c9:99:e4:de:0b:99:
7f:45:fb:26:3e:c7:8f:d9:26:f6:0d:ae:e8:6c:7e:
e2:34:ed:d5:81:34:76:88:5f:59:52:93:44:0b:d7:
28:13:e8:a6:11:4e:c1:b9:55:80:82:35:fa:8d:f9:
fc:f3:5b:bd:42:32:58:59:ce:0a:87:43:ba:35:84:
cd:3f:11:b3:7a:5e:b9:d3:50:a4:29:bf:5c:03:bf:
fe:d0:9e:81:57:77:fd:ed:aa:f1:6d:fc:07:1e:17:
95:84:1f:47:55:70:43:cd:42:54:4a:97:cf:a2:af:
1b:9b:22:fd:d5:bb:bf:43:64:18:5d:4e:d5:38:4d:
48:7a:4c:e9:fd:ed:02:d1:5e:58:28:ff:23:e5:d3:
b4:6a:eb:61:33:a0:69:69:e0:11:5e:cd:4f:cd:38:
b5:0a:9f:3c:e1:4a:79:12:50:83:4f:a8:f7:45:95:
17:76:96:52:52:31:fd:9b:da:7b:14:5d:13:d0:15:
99:12:f1:49:85:d9:7e:da:f3:a5:c7:6b:5e:4f:f6:
80:86:1b:a7:4a:2b:ee:96:82:be:83:d3:01:24:79:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:82:F4:24:D8:A7:57:A9:A5:DB:12:C6:92:54:BD:A2:B4:1C:BB:DC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1b5::/48
Signature Algorithm: sha256WithRSAEncryption
94:d6:c7:bb:10:7e:b1:4f:a0:22:02:29:d1:2f:94:61:c6:80:
1e:6e:32:45:51:57:90:5f:ae:cc:e4:55:44:c3:4f:ea:f3:96:
91:4c:fd:e1:4f:da:5a:9e:5f:67:a9:19:94:09:e8:e2:79:38:
00:b7:33:b3:79:fd:42:d0:32:34:50:56:ec:fb:c0:08:d9:98:
49:82:a1:d7:ee:ae:d5:57:3f:a7:fb:94:ce:ec:79:de:4c:3e:
49:9b:6f:dd:c7:68:72:9c:48:e5:6c:03:b9:7a:82:f6:19:4d:
f3:ff:62:f3:74:b8:9b:cf:ee:fb:62:1c:db:d1:f1:94:d5:60:
bc:49:11:89:ac:51:65:6a:90:53:e8:ed:91:c7:fb:aa:e5:c8:
dc:89:d1:89:c1:11:be:86:bd:0f:a3:53:46:6e:e0:7e:fb:22:
88:e9:c9:a7:f9:44:42:65:49:0a:ba:ea:7c:3a:6a:2d:e8:6c:
d6:a9:af:18:43:15:19:94:36:78:c8:9e:9d:ba:61:25:b6:41:
dd:2d:ec:82:ca:3c:9d:0a:51:36:eb:51:db:f8:c7:a0:81:97:
1f:4b:11:0a:36:80:43:4b:96:e9:27:11:17:66:ca:b5:f5:70:
22:fd:b2:da:90:3a:4c:e9:a4:f8:78:32:5d:bb:5b:b9:e9:df:
a1:89:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:57:33 2026 by rpki-client