Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: Kjt67C6xRjMAY35CVyT8UFF0vIZm8xACEe9wj3XcreE=
Subject key identifier: 86:4B:FA:67:5A:D3:B7:E1:6A:7E:82:03:FD:13:8B:6C:97:6F:30:BE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 702ABCE6B095F91B19D568CC1A304F9D0AD9AEAE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
Signing time: Sun 25 Oct 2026 08:49:03 +0000
ROA not before: Sun 25 Oct 2026 08:44:03 +0000
ROA not after: Sun 24 Oct 2027 08:49:03 +0000
asID: 199741
IP address blocks: 82.22.37.0/24 maxlen: 24
82.22.125.0/24 maxlen: 24
82.22.160.0/24 maxlen: 24
82.22.200.0/24 maxlen: 24
82.39.115.0/24 maxlen: 24
82.39.130.0/24 maxlen: 24
82.39.207.0/24 maxlen: 24
82.39.210.0/24 maxlen: 24
82.39.221.0/24 maxlen: 24
82.47.20.0/24 maxlen: 24
82.47.28.0/24 maxlen: 24
82.47.114.0/24 maxlen: 24
82.47.126.0/24 maxlen: 24
82.47.128.0/24 maxlen: 24
82.47.166.0/24 maxlen: 24
82.47.175.0/24 maxlen: 24
84.75.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2a:bc:e6:b0:95:f9:1b:19:d5:68:cc:1a:30:4f:9d:0a:d9:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 25 08:44:03 2026 GMT
Not After : Oct 24 08:49:03 2027 GMT
Subject: CN=864BFA675AD3B7E16A7E8203FD138B6C976F30BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:49:cb:f0:e8:fb:7d:d1:07:57:ac:73:60:
d1:e8:45:32:5b:d1:b2:00:70:19:37:03:96:e0:7b:
8d:66:56:3c:74:07:5d:7d:ec:07:b4:7a:5a:3f:41:
df:d6:b3:f3:cd:3a:ea:ed:6f:36:7d:62:4f:1d:18:
da:8d:04:25:d5:4f:21:e9:79:a0:fd:ac:8e:6d:f7:
b9:9b:85:e2:39:e0:a9:d4:9b:b7:f0:f6:3f:34:99:
ad:47:ff:af:62:08:9a:13:cc:60:3e:89:f2:56:7b:
bc:2d:82:e4:aa:0e:7a:18:74:b1:b1:47:13:f7:c4:
ac:ce:21:aa:67:94:65:5a:50:8c:32:28:c8:d3:f9:
85:52:30:af:b6:81:cd:c2:2a:29:13:50:c1:6a:bc:
fe:a0:99:a5:32:ca:1b:f2:31:8e:54:05:62:a3:24:
6b:d5:39:09:3d:f0:3c:45:9d:e6:d9:67:df:d9:e7:
8e:3c:7d:e3:9b:35:a9:f3:93:22:28:eb:38:fa:50:
46:a3:db:2f:dc:6d:91:04:c0:87:32:2e:83:c7:ff:
1d:ff:46:20:76:73:78:a8:b6:9b:6a:6b:9f:92:78:
25:b7:bd:d9:13:98:20:1b:af:f2:c9:87:ed:55:8e:
32:4a:c4:d2:de:82:1a:61:b0:7d:72:47:8f:7c:39:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4B:FA:67:5A:D3:B7:E1:6A:7E:82:03:FD:13:8B:6C:97:6F:30:BE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.37.0/24
82.22.125.0/24
82.22.160.0/24
82.22.200.0/24
82.39.115.0/24
82.39.130.0/24
82.39.207.0/24
82.39.210.0/24
82.39.221.0/24
82.47.20.0/24
82.47.28.0/24
82.47.114.0/24
82.47.126.0/24
82.47.128.0/24
82.47.166.0/24
82.47.175.0/24
84.75.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1f:9d:5e:75:6b:bb:86:de:da:78:3a:b1:05:c4:8c:ba:d0:
11:47:d8:44:1a:44:2e:98:0a:a5:d7:af:83:ce:41:ec:e8:f3:
5d:77:16:40:a1:26:88:7f:46:6d:a2:23:b7:6f:18:42:5a:82:
db:fa:42:0e:b4:5b:3c:7c:28:c7:52:d2:10:cb:4e:5c:74:e6:
f5:5f:d5:97:c9:1d:60:c7:05:04:4b:96:99:73:1a:e5:94:a1:
6e:58:ad:e4:7a:4d:20:47:c6:d7:19:8c:d0:1f:6f:a9:fd:bc:
83:20:e5:6b:34:2d:57:a9:6b:49:78:82:7f:d6:59:e5:f5:f5:
b1:5e:d3:6c:20:a3:6a:f9:60:70:64:c0:d5:5d:07:cb:5c:68:
5b:5e:16:29:bf:c1:88:3c:b3:7e:56:ce:2b:95:05:37:c6:1a:
37:b3:28:7f:29:f3:d5:42:05:21:90:7e:c5:b9:ea:54:a1:24:
0c:80:d6:e8:98:7d:af:38:e2:8d:d2:62:76:65:95:41:b6:26:
d6:ee:4f:1d:7a:27:42:df:be:5a:39:79:c7:bd:fe:02:01:b8:
1e:93:18:93:34:af:76:b3:b1:42:c9:1e:bd:3c:3c:37:d0:46:
e0:85:23:91:a3:d6:ea:8b:0d:e7:fd:9d:52:ae:0b:6d:4a:8f:
40:1e:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:13:47 2026 by rpki-client