Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: z+SCiAkx7pynvxg38at2jEsF5bMXaaMpMi9/W4a061U=
Subject key identifier: 81:09:27:5E:CA:66:E9:A6:E8:22:FE:AE:0E:4F:6C:B2:0A:74:89:58
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 31310C9BF1B98967E37ADE0833BDF30B06BBB562
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199707.roa
Signing time: Thu 17 Sep 2026 07:38:39 +0000
ROA not before: Thu 17 Sep 2026 07:33:39 +0000
ROA not after: Thu 16 Sep 2027 07:38:39 +0000
asID: 199707
IP address blocks: 91.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:31:0c:9b:f1:b9:89:67:e3:7a:de:08:33:bd:f3:0b:06:bb:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 17 07:33:39 2026 GMT
Not After : Sep 16 07:38:39 2027 GMT
Subject: CN=8109275ECA66E9A6E822FEAE0E4F6CB20A748958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:a1:12:0e:87:fb:3f:a7:9d:d1:bf:b6:3f:
0e:79:0b:4e:04:c5:73:ae:e8:06:9b:01:0c:c8:b3:
52:a6:7c:1b:f6:bd:89:db:5e:68:d0:4c:66:7c:4f:
e5:40:08:5b:05:0a:47:d9:a5:ed:ca:10:91:27:df:
ba:71:1d:67:a7:76:c5:4f:82:89:f5:ad:67:de:a8:
e7:14:7a:d7:17:02:51:4f:3a:b9:59:72:97:5d:08:
56:ee:24:44:8c:01:35:21:29:95:6a:74:93:46:d3:
33:02:36:64:44:6f:c7:07:a5:7c:89:8f:67:57:bd:
5f:36:42:2d:2f:ad:b7:29:66:b6:3d:f1:84:2e:fa:
7c:3e:f2:f5:5e:01:c4:27:16:3b:d4:24:04:0c:bd:
d3:6c:40:ad:b9:c6:bf:ce:d6:96:7a:80:ed:09:62:
76:89:ea:c3:25:07:74:aa:5f:33:a5:ba:a9:63:f8:
dc:42:8c:09:0e:a8:f8:aa:de:ed:73:8a:b9:9f:84:
d2:2f:2e:ee:d5:3b:4e:f3:1c:68:2c:05:4d:f8:25:
e3:24:6d:56:4a:af:4c:f0:f5:5e:98:6e:46:cf:cd:
64:63:39:2a:b6:6f:f0:3c:34:d3:ba:3f:a8:50:69:
80:c0:69:75:97:a3:94:62:c5:7d:cf:fb:c6:3b:88:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:27:5E:CA:66:E9:A6:E8:22:FE:AE:0E:4F:6C:B2:0A:74:89:58
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:43:1e:72:82:7c:5f:34:98:3b:51:06:9c:ab:96:40:87:c4:
d6:e6:6d:55:90:a7:6f:1b:b2:d3:38:10:ac:2d:0a:cc:b5:43:
4a:95:75:00:cb:b1:5b:b0:c1:a6:05:de:74:ca:6d:95:cc:0b:
cd:80:8a:eb:27:9b:a0:5d:9f:f4:00:6f:36:42:6e:32:a9:43:
3a:3b:01:47:69:f4:d1:00:ca:f2:aa:6a:6d:9c:bf:aa:85:02:
21:ec:30:bb:db:f2:1a:b0:47:30:15:ff:78:8c:d2:f6:f2:dd:
d2:ea:b1:89:df:be:ab:53:01:4a:b0:fb:84:ff:e1:00:f8:9c:
19:cc:cc:fc:c4:1d:26:36:72:90:a2:69:3c:f6:a1:f4:d9:fa:
c5:bf:42:55:94:33:41:85:7b:5a:1f:1b:6d:40:87:50:90:ee:
a0:c5:28:b5:66:2e:e9:da:b0:e8:07:59:a4:40:8a:11:d4:8f:
67:70:a5:69:b1:19:19:98:b2:d9:d5:ad:df:02:ea:25:3f:ef:
30:27:14:a1:75:35:07:13:c5:39:ea:3f:42:cc:14:b6:37:e1:
65:0a:da:3c:95:4e:fb:4f:f8:c4:4a:8c:4e:22:e5:78:a7:d2:
05:0f:f5:e8:5a:78:f8:96:b6:44:ac:5d:41:09:b9:ae:48:0b:
e1:10:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:20:10 2026 by rpki-client