Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: LSSM7jW4LowlD8yTTTnqCIwh3zWFb9XB1+dlSESdWWk=
Subject key identifier: 3E:2A:B8:C2:4C:4A:0B:D4:2E:45:93:02:EC:9C:67:BC:C5:73:43:59
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 167A497C5FADBECCCE9FFC81DBED01807090D2AB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
Signing time: Sat 19 Sep 2026 23:43:13 +0000
ROA not before: Sat 19 Sep 2026 23:38:13 +0000
ROA not after: Sat 18 Sep 2027 23:43:13 +0000
asID: 199741
IP address blocks: 82.22.37.0/24 maxlen: 24
82.22.125.0/24 maxlen: 24
82.22.160.0/24 maxlen: 24
82.22.200.0/24 maxlen: 24
82.39.130.0/24 maxlen: 24
82.39.207.0/24 maxlen: 24
82.39.210.0/24 maxlen: 24
82.39.221.0/24 maxlen: 24
82.47.20.0/24 maxlen: 24
82.47.166.0/24 maxlen: 24
82.47.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7a:49:7c:5f:ad:be:cc:ce:9f:fc:81:db:ed:01:80:70:90:d2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 19 23:38:13 2026 GMT
Not After : Sep 18 23:43:13 2027 GMT
Subject: CN=3E2AB8C24C4A0BD42E459302EC9C67BCC5734359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:15:db:e4:df:36:a7:1b:8f:a1:f9:c9:82:
94:35:f8:42:82:15:5e:e3:b4:3c:f9:c7:6a:83:56:
8d:f5:a2:a9:76:94:34:e2:a4:45:87:73:7c:44:00:
7c:cc:d6:67:78:ef:9f:ca:46:55:e1:98:d5:9c:d7:
43:de:97:d4:2d:09:18:dd:c4:9a:25:15:7b:d0:9b:
39:32:73:ec:9e:e4:67:dc:c0:3e:7a:68:44:43:e8:
43:5d:b2:f8:f0:c8:a6:a6:54:07:a8:6f:c7:95:08:
2f:03:ee:b3:9b:17:2f:37:53:b7:22:e4:08:c4:83:
3d:23:72:a3:56:2d:db:73:08:1e:44:77:b5:f5:a2:
b7:9b:26:62:b2:ea:33:9b:ff:93:58:cc:bb:17:67:
6d:a9:77:d8:c2:98:98:e3:c6:96:5c:b3:19:82:47:
09:7e:f3:28:48:5c:e8:28:46:44:1f:4e:33:c0:ba:
de:ae:04:a2:9c:b3:b0:07:bf:8c:48:7a:5e:c7:1d:
b6:e1:63:48:5e:76:9f:fa:b6:04:2f:d0:a4:f8:e2:
6a:03:5b:bd:73:6d:51:51:75:df:bd:0a:8b:90:8d:
09:2b:c5:c0:10:bb:e6:4d:6e:db:a9:ae:13:27:61:
fa:8a:6a:64:bd:fd:60:8d:bf:4c:3a:d9:fb:e1:d5:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:B8:C2:4C:4A:0B:D4:2E:45:93:02:EC:9C:67:BC:C5:73:43:59
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.37.0/24
82.22.125.0/24
82.22.160.0/24
82.22.200.0/24
82.39.130.0/24
82.39.207.0/24
82.39.210.0/24
82.39.221.0/24
82.47.20.0/24
82.47.166.0/24
82.47.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:14:8b:58:53:4f:3f:7e:68:5c:3e:e3:48:7d:d6:7f:eb:53:
b3:1b:2d:e7:ea:79:9b:8e:ea:62:53:e3:6b:29:75:85:73:4e:
e6:9a:7d:ff:d3:4e:57:c8:e4:fd:db:d3:82:13:43:f7:66:67:
a5:68:9b:6b:74:2b:77:d4:70:ff:8e:b0:23:29:3f:70:1b:08:
d8:a2:5c:77:56:29:b0:17:60:7a:aa:d6:23:8b:75:39:12:7d:
15:8c:cf:f5:22:de:6f:15:ce:02:3b:08:b7:b4:e4:f2:6a:18:
30:2a:c3:c5:57:46:39:f2:d5:51:13:2e:41:10:f8:c2:c6:49:
c7:b5:5c:70:a1:68:4c:af:9a:63:9e:b5:bc:bc:cf:c1:c8:b7:
59:95:a9:1c:12:b6:e4:81:32:41:57:dc:5b:34:bf:01:f0:21:
92:97:15:b7:fb:cd:49:96:05:06:18:4b:02:55:da:8e:87:cf:
37:d3:bf:47:2e:28:13:d7:ed:81:db:a7:e7:9e:31:58:4c:fc:
ff:28:ae:42:71:88:fe:e8:99:e6:7a:bc:1f:7e:3e:5d:52:f4:
43:b0:cb:42:69:64:b4:1c:8c:a4:63:2c:62:79:9a:db:36:11:
a6:31:34:84:e5:e5:6c:e1:1b:ab:72:b8:7b:77:59:82:67:94:
41:e9:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:12:18 2026 by rpki-client