Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199734.roa
File: AS199734.roa (raw, json)
Hash identifier: qvmQUGaCfVYRKuV9p9n8OXkqzEBjq0pJ2UHQwowpuOw=
Subject key identifier: E8:DC:F6:51:7D:27:EB:C8:0D:E9:11:A4:3C:E7:32:35:47:8E:1F:87
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5215ED65B05A924057A0857CCC870D6D5655EB49
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199734.roa
Signing time: Tue 09 Jun 2026 11:38:11 +0000
ROA not before: Tue 09 Jun 2026 11:33:11 +0000
ROA not after: Tue 08 Jun 2027 11:38:11 +0000
asID: 199734
IP address blocks: 82.47.244.0/24 maxlen: 24
82.47.246.0/24 maxlen: 24
82.47.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:15:ed:65:b0:5a:92:40:57:a0:85:7c:cc:87:0d:6d:56:55:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 11:33:11 2026 GMT
Not After : Jun 8 11:38:11 2027 GMT
Subject: CN=E8DCF6517D27EBC80DE911A43CE73235478E1F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:ce:a3:44:3e:7f:b1:1f:69:8d:d0:aa:39:
81:0e:d7:49:72:9e:ab:28:af:dd:ab:6f:19:3f:57:
dc:fa:13:2c:b0:76:6d:64:71:a4:bf:c5:67:91:1f:
49:bd:4c:a8:c6:fe:e2:48:93:b3:f8:63:b1:1d:25:
a4:e0:3b:ac:00:ec:29:da:c9:80:34:91:e7:ab:bf:
a6:ad:b1:a3:b5:b7:3a:54:96:80:f4:87:a9:63:d9:
0c:ef:5b:67:47:2c:20:af:a9:f6:1f:e3:40:25:6b:
e5:0a:73:a4:b6:20:a6:e7:24:2e:76:65:ff:a4:ed:
b9:0a:d5:5c:4e:f4:72:80:1b:5b:7c:b7:69:a1:e0:
84:a5:fe:fc:c1:87:be:30:f2:85:ce:aa:68:84:a1:
0a:76:bf:d4:a7:c8:1c:10:82:4d:1b:fa:68:08:bf:
5b:d3:03:ce:e9:30:2e:6b:58:ad:6e:8e:d3:7a:9c:
e9:34:a8:8a:a7:6d:62:c9:3f:a7:aa:8d:ed:17:bd:
0d:3b:b5:58:52:b1:46:01:29:29:12:47:db:fa:b7:
69:57:32:55:aa:c5:22:e9:2c:0d:ab:6b:f9:0c:09:
7b:5a:09:1b:49:ee:86:09:ae:81:24:64:06:cc:79:
66:93:8b:40:26:5d:ab:46:ef:d8:26:82:8b:b5:ed:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DC:F6:51:7D:27:EB:C8:0D:E9:11:A4:3C:E7:32:35:47:8E:1F:87
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.244.0/24
82.47.246.0/23
Signature Algorithm: sha256WithRSAEncryption
44:bc:d7:83:02:ad:fa:6d:19:1d:c4:dc:ca:a8:39:d9:3f:53:
ae:0b:c2:7a:3e:d5:4d:97:e8:55:3d:17:8e:58:20:e6:73:0f:
67:dd:e2:4f:a5:50:bd:80:e9:ef:83:fc:0d:66:dd:53:3c:7a:
7b:fa:d7:7f:ed:91:d9:b5:05:e9:db:9b:36:3f:99:ca:3b:9c:
fb:de:17:ce:b2:b9:85:80:11:73:89:1b:66:61:13:c0:ea:ac:
b1:f6:df:ea:a4:0a:ec:2a:86:2a:a9:e2:a4:25:5e:5c:6a:f2:
aa:4e:16:82:e2:85:9b:13:ad:4b:eb:f3:97:62:2e:d6:e1:04:
ec:63:79:aa:90:4d:a8:4d:c4:9c:8f:4f:66:d1:ab:c0:ea:2a:
4a:53:fa:4d:cc:fc:1b:39:f5:d8:b7:b6:44:45:d0:7c:c1:28:
1a:28:c3:85:ef:55:90:1b:cb:d6:7b:cf:6e:f3:77:35:9b:b5:
fb:28:be:f5:b4:ba:0b:0c:4f:c5:35:90:26:5c:f1:14:57:0c:
bc:da:03:29:e1:a4:b0:3d:8d:46:33:a8:46:79:d6:9e:30:f0:
97:62:7b:50:ca:62:ef:62:12:36:11:db:1d:b3:29:74:5a:c9:
43:dd:7a:11:91:80:81:01:0b:f4:20:d9:a9:a8:ee:76:02:7c:
92:87:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:51 2026 by rpki-client