Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199783.roa
File: AS199783.roa (raw, json)
Hash identifier: fQFg8AJsAyKi0mSmhNLGL8qY0TzrbzWdXcjq4+97PMs=
Subject key identifier: 80:4D:7D:EE:29:B4:62:3C:F5:3F:21:44:5D:17:C2:2C:02:67:87:BA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A17703A3665E21F285E69B89D7C76B4D836E085
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199783.roa
Signing time: Wed 03 Jun 2026 16:35:00 +0000
ROA not before: Wed 03 Jun 2026 16:30:00 +0000
ROA not after: Wed 02 Jun 2027 16:35:00 +0000
asID: 199783
IP address blocks: 178.83.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:17:70:3a:36:65:e2:1f:28:5e:69:b8:9d:7c:76:b4:d8:36:e0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 3 16:30:00 2026 GMT
Not After : Jun 2 16:35:00 2027 GMT
Subject: CN=804D7DEE29B4623CF53F21445D17C22C026787BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:05:7d:4d:c3:df:74:de:9e:71:53:17:ef:
f6:bf:6d:99:8a:17:90:cb:48:3d:84:6a:e5:54:97:
7f:52:db:62:c6:05:27:b1:18:45:e4:a1:13:82:cf:
f8:eb:97:88:05:23:d5:e1:32:44:6d:d9:c3:81:18:
84:21:f2:c2:f7:2a:76:38:ed:b7:26:03:43:23:5d:
ef:77:47:1c:e5:00:56:3d:27:01:a1:aa:56:7e:45:
95:85:f1:aa:38:16:46:a2:47:b3:f0:f9:02:86:f2:
3e:c8:58:7e:d6:32:9d:86:cf:ef:08:59:e2:94:07:
67:5d:d2:09:0f:93:55:d1:f0:48:46:b1:f2:f5:0a:
44:8a:eb:ce:01:3b:7f:7a:d7:07:b5:aa:25:37:07:
13:e2:93:4f:4d:2a:23:4b:9b:9c:82:86:74:5d:71:
7a:8c:60:5b:b8:ac:12:1d:29:92:20:83:90:25:29:
5a:35:25:81:fa:fc:c5:08:20:96:55:b6:2c:f8:51:
5b:39:5e:90:33:d5:a5:d2:2d:06:14:e9:19:32:d3:
be:87:1d:8e:04:c5:0f:15:8d:64:25:26:67:d6:2b:
f1:89:78:d5:02:a1:5e:4f:15:33:ac:db:dc:15:1a:
70:1c:4d:71:86:d0:99:02:48:dd:24:f4:49:22:aa:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:7D:EE:29:B4:62:3C:F5:3F:21:44:5D:17:C2:2C:02:67:87:BA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.114.0/24
Signature Algorithm: sha256WithRSAEncryption
39:83:84:0d:42:cc:ee:43:f1:c1:65:dd:8e:1e:f5:81:53:11:
78:42:38:da:c8:1a:9e:3a:6b:59:3a:b8:fc:f5:51:f0:71:6d:
96:ca:5b:05:18:73:24:ac:82:8c:83:31:73:1b:7f:76:cd:58:
cf:a0:61:95:b5:93:0e:e5:ff:97:56:54:7d:40:44:fd:46:31:
ee:6b:0e:34:1a:b2:45:72:97:e1:c7:93:a5:45:77:c4:7b:a7:
64:63:cf:c4:ff:21:06:d2:02:55:4a:57:f6:84:a7:ef:03:47:
d8:20:e6:d6:b4:b1:91:60:77:a5:cd:d3:86:43:3a:28:95:d9:
13:93:df:56:98:3e:82:80:48:46:08:ee:8a:04:61:27:70:5b:
0d:a9:05:e2:1c:cf:dc:ce:6c:3f:f4:75:44:f0:33:12:c8:f8:
26:a6:e7:5a:e2:21:69:86:38:02:34:3a:ef:e5:ad:f9:31:f2:
7f:8f:3d:da:a6:bf:fb:65:ab:52:7b:c3:a2:39:62:f4:8f:4e:
7d:a7:fb:72:d1:3e:ec:92:c4:94:3c:a1:34:96:e1:1f:c9:5c:
d8:31:ed:ed:55:60:d3:fc:1b:80:da:2f:d2:c7:a3:64:96:2b:
47:02:f0:16:b3:92:0e:8e:82:5f:2d:67:cd:97:bd:e6:e7:98:
66:39:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:47 2026 by rpki-client