Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
File: AS199186.roa (raw, json)
Hash identifier: 9ROgnrmm7jbdi/9Q4oV5L9gH4+wHeYB9eGPvjvJVpH8=
Subject key identifier: 8D:B3:DB:7E:C7:79:87:F5:6F:7C:0D:3C:36:4C:F2:77:6E:5A:69:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31120F5EB27862F9F56C89FA2F25E964BE2A6B8D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
Signing time: Fri 22 May 2026 11:15:54 +0000
ROA not before: Fri 22 May 2026 11:10:54 +0000
ROA not after: Fri 21 May 2027 11:15:54 +0000
asID: 199186
IP address blocks: 82.40.39.0/24 maxlen: 24
82.41.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:12:0f:5e:b2:78:62:f9:f5:6c:89:fa:2f:25:e9:64:be:2a:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 22 11:10:54 2026 GMT
Not After : May 21 11:15:54 2027 GMT
Subject: CN=8DB3DB7EC77987F56F7C0D3C364CF2776E5A698E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:2c:68:c2:52:7b:e6:51:f0:4a:44:50:1b:
26:c7:18:f0:b1:cf:8d:4a:06:ae:9a:2e:72:9b:c8:
6e:69:1c:a8:59:f5:a8:1d:c7:43:d2:f7:32:e3:ea:
6c:b5:66:42:1b:e3:b0:2d:35:8f:9d:93:c7:7e:12:
2d:6d:8c:ad:30:19:e5:f2:b2:66:b7:f8:9a:11:f8:
75:11:47:45:26:14:74:52:d9:bc:02:cd:00:38:74:
02:df:75:30:83:dc:cb:ad:af:54:e9:94:25:33:c1:
3a:2c:f9:41:91:c0:51:75:28:08:05:1f:e2:a1:e8:
c5:01:ca:55:20:13:4e:ab:7c:33:4a:97:32:8b:c9:
c6:1a:37:de:aa:7f:79:5c:f6:3c:e9:fc:ec:78:9c:
59:1a:dd:54:d4:aa:df:4e:d3:ce:94:be:2c:5e:e4:
ad:2e:d9:fc:30:7e:da:a8:87:a8:1b:6f:19:a4:ed:
f0:d4:33:b8:11:e5:c9:1b:ca:bd:a3:0c:c8:99:10:
e8:5e:11:55:9c:1b:8d:2b:9e:37:4a:ac:0c:c4:0f:
86:d4:bb:a2:c1:cf:68:49:89:70:c9:50:f1:70:90:
66:0b:30:17:06:f2:76:da:da:4a:89:7f:6a:05:00:
60:8c:1b:51:27:b4:0b:53:ab:2a:f2:85:a4:64:d7:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:DB:7E:C7:79:87:F5:6F:7C:0D:3C:36:4C:F2:77:6E:5A:69:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.39.0/24
82.41.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ae:9a:77:80:51:79:ba:c0:16:4a:98:87:f9:cf:06:80:9c:
46:ac:3a:f6:50:90:13:e4:46:87:55:66:45:ff:68:6d:05:de:
59:61:e9:ff:2f:50:5e:95:78:05:eb:90:2a:fd:60:ac:db:d9:
b7:37:c5:c9:0f:ce:7e:0a:08:25:7b:e6:54:5a:48:9c:74:6a:
bb:86:9e:aa:bb:73:fa:41:a1:23:33:9b:08:d9:78:25:a3:fa:
0f:25:f3:89:f3:96:ad:ea:a5:7d:ee:74:a5:85:1c:21:d3:7e:
39:5a:9c:1f:56:62:b3:74:12:0e:c1:ed:fb:a4:da:8d:40:8b:
b0:93:db:08:1a:63:33:70:72:0b:a0:b8:4b:86:16:64:4f:0f:
0d:19:9d:72:9c:da:05:a8:01:b2:3c:0a:45:bd:ef:7a:63:6e:
b1:2e:24:56:23:91:35:ef:2d:58:12:06:07:1f:fe:68:2a:2e:
19:b8:5e:35:4d:d7:f5:45:36:63:a2:ea:a0:bf:7e:f5:87:2b:
07:ff:55:1d:b6:5d:62:20:97:95:4e:22:f1:3e:39:95:06:83:
c9:fb:e6:c5:e3:f6:5f:65:61:da:21:5f:d4:ce:02:45:9a:c6:
53:52:c9:60:cd:f8:a6:ac:b3:66:c1:4d:59:f2:b9:05:4b:b1:
74:fa:66:6c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUMRIPXrJ4Yvn1bIn6LyXpZL4qa40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjIxMTEwNTRaFw0yNzA1MjExMTE1NTRaMDMxMTAvBgNV
BAMTKDhEQjNEQjdFQzc3OTg3RjU2RjdDMEQzQzM2NENGMjc3NkU1QTY5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdDyxowlJ75lHwSkRQGybHGPCx
z41KBq6aLnKbyG5pHKhZ9agdx0PS9zLj6my1ZkIb47AtNY+dk8d+Ei1tjK0wGeXy
sma3+JoR+HURR0UmFHRS2bwCzQA4dALfdTCD3Mutr1TplCUzwTos+UGRwFF1KAgF
H+Kh6MUBylUgE06rfDNKlzKLycYaN96qf3lc9jzp/Ox4nFka3VTUqt9O086Uvixe
5K0u2fwwftqoh6gbbxmk7fDUM7gR5ckbyr2jDMiZEOheEVWcG40rnjdKrAzED4bU
u6LBz2hJiXDJUPFwkGYLMBcG8nba2kqJf2oFAGCMG1EntAtTqyryhaRk14NJAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUjbPbfsd5h/VvfA08Nkzyd25aaY4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5MTg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUign
AwQAUinoMA0GCSqGSIb3DQEBCwUAA4IBAQAcrpp3gFF5usAWSpiH+c8GgJxGrDr2
UJAT5EaHVWZF/2htBd5ZYen/L1BelXgF65Aq/WCs29m3N8XJD85+Cggle+ZUWkic
dGq7hp6qu3P6QaEjM5sI2Xglo/oPJfOJ85at6qV97nSlhRwh0345WpwfVmKzdBIO
we37pNqNQIuwk9sIGmMzcHILoLhLhhZkTw8NGZ1ynNoFqAGyPApFve96Y26xLiRW
I5E17y1YEgYHH/5oKi4ZuF41Tdf1RTZjouqgv371hysH/1Udtl1iIJeVTiLxPjmV
BoPJ++bF4/ZfZWHaIV/UzgJFmsZTUslgzfimrLNmwU1Z8rkFS7F0+mZs
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:52 2026 by rpki-client