Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199592.roa
File: AS199592.roa (raw, json)
Hash identifier: jR9jS+F88b6HesTHPpfmX9w09Lw3BR/oFv6jqrZW/Rc=
Subject key identifier: 51:61:81:4F:F8:40:F0:34:8E:CF:35:97:27:8C:4C:AE:62:16:CA:89
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31B4B686890C607D4E53EB2FDA70C9FC936946B5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199592.roa
Signing time: Wed 01 Apr 2026 14:02:27 +0000
ROA not before: Wed 01 Apr 2026 13:57:27 +0000
ROA not after: Wed 31 Mar 2027 14:02:27 +0000
asID: 199592
IP address blocks: 82.22.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:b6:86:89:0c:60:7d:4e:53:eb:2f:da:70:c9:fc:93:69:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 1 13:57:27 2026 GMT
Not After : Mar 31 14:02:27 2027 GMT
Subject: CN=5161814FF840F0348ECF3597278C4CAE6216CA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:9f:98:e5:22:b9:9f:93:2a:67:19:76:6f:
21:d8:63:12:7d:a1:0f:2d:03:71:98:09:fd:90:9b:
4b:31:49:92:e2:5f:60:a7:c6:27:8b:fa:40:aa:84:
12:fd:4d:db:a8:47:52:24:f5:ff:68:24:cb:b3:6a:
62:a3:17:8c:68:5d:18:c7:a7:51:a6:db:20:13:20:
0b:d3:b9:72:8a:cd:a1:9e:90:e2:b9:c4:db:49:94:
b2:be:95:85:ae:d0:f9:a8:9e:e2:aa:0a:9d:f2:90:
96:11:46:a8:9e:67:5e:57:79:b9:58:8e:93:2c:63:
a3:27:5a:f5:d3:60:ea:77:07:bc:2b:b8:0a:2d:27:
57:a1:a9:28:9f:9f:8d:f2:92:03:31:67:1c:16:13:
19:5f:ba:f4:20:6a:81:a7:5f:4c:45:9b:01:a8:f9:
cb:f8:70:a5:9d:d7:e7:8f:30:2d:98:0f:2f:d7:5a:
77:7b:42:06:86:c3:95:94:ba:cd:d5:95:54:1a:59:
81:64:6a:4b:45:78:64:16:72:90:51:96:99:bc:d1:
30:e4:1a:79:e3:c2:21:11:17:af:f5:3c:b8:46:ec:
b4:92:97:e0:57:9b:80:88:a4:a6:8b:6d:f0:a4:9e:
0e:f2:2b:a4:f8:b0:04:11:36:4d:a9:07:57:fb:57:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:61:81:4F:F8:40:F0:34:8E:CF:35:97:27:8C:4C:AE:62:16:CA:89
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.205.0/24
Signature Algorithm: sha256WithRSAEncryption
79:be:5f:9f:6b:09:af:3e:e9:58:50:08:84:55:40:17:e8:bf:
0d:3a:8e:7f:62:fa:ba:1e:00:a6:09:47:28:d5:0e:cb:a5:cc:
ad:1a:97:37:6a:6a:e7:9e:53:f8:ab:4f:70:56:18:af:f8:30:
1d:e0:4d:e2:7c:df:d9:db:2b:73:84:36:09:22:7f:6f:29:73:
2d:b0:77:31:34:88:dc:29:e4:53:0b:b2:35:2e:fd:a4:5c:16:
21:bb:1d:c4:eb:e5:33:dc:77:12:ee:87:7e:3f:4a:99:38:f1:
9f:d1:f5:a3:d2:a4:00:e2:26:9e:ac:61:73:3a:09:bf:bf:2c:
18:0a:44:d9:96:de:33:22:6e:1a:dd:9d:b1:6b:18:af:c4:0a:
3c:c1:57:98:b4:e2:86:f9:9d:38:c3:dd:a6:01:44:2a:99:69:
cd:6b:68:59:b8:d6:31:f2:bd:6f:2b:47:e9:7c:20:eb:3a:9d:
44:fa:40:fc:73:b1:40:d2:0a:cd:1e:f1:fa:ca:86:a9:d8:d3:
e2:4a:7f:e1:4e:5d:b6:65:e5:cf:a5:44:77:fd:95:79:47:8b:
b5:3a:9b:b3:80:53:47:e8:bc:2b:1a:70:3a:37:12:96:86:20:
47:9d:1f:8e:ad:c7:3c:1e:03:5e:ed:39:6d:f5:d0:59:4a:a3:
78:70:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:04 2026 by rpki-client