Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199109.roa
File: AS199109.roa (raw, json)
Hash identifier: dVV4PkcjXlaDNqIjuXF1kzQF1tHpLRAosu0mxq3vpjE=
Subject key identifier: D3:E4:D6:95:FC:84:F5:B4:6B:D4:57:B4:99:AF:6E:B7:5C:71:E4:58
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 547506DBB05887532FE03E6D622747FA7EC242CD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199109.roa
Signing time: Tue 15 Sep 2026 21:09:11 +0000
ROA not before: Tue 15 Sep 2026 21:04:11 +0000
ROA not after: Tue 14 Sep 2027 21:09:11 +0000
asID: 199109
IP address blocks: 2a0f:85c1:d6c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:75:06:db:b0:58:87:53:2f:e0:3e:6d:62:27:47:fa:7e:c2:42:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:11 2026 GMT
Not After : Sep 14 21:09:11 2027 GMT
Subject: CN=D3E4D695FC84F5B46BD457B499AF6EB75C71E458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:11:f1:ec:58:55:af:48:7a:02:97:2a:7b:
31:ef:8f:26:78:b5:5a:57:93:25:56:8a:c7:32:e5:
6d:0c:bf:a4:47:11:51:07:3d:ea:22:72:26:21:dd:
d0:9c:44:77:73:8c:66:8e:87:3f:ae:93:d9:df:1d:
72:41:32:ca:94:55:56:e9:65:6c:14:24:af:d4:44:
53:c8:a6:93:7e:72:3b:fc:0b:68:f6:49:6e:95:94:
f8:e0:d9:f3:88:5e:61:2f:8f:fd:26:44:b6:1c:7d:
60:c9:b5:4e:41:31:95:0f:be:cf:99:ba:86:d6:ec:
a8:6d:be:e3:dd:7e:89:81:da:06:19:bf:dc:15:6b:
dc:74:8a:84:e5:75:30:ed:18:a3:21:f9:98:34:e7:
07:6b:d6:93:ae:d1:94:8c:10:60:84:10:1b:67:b5:
8d:fc:97:c9:7c:43:30:8e:ec:b5:31:44:6e:39:88:
0f:ef:2d:c5:a2:0b:70:0d:a3:ef:6e:49:24:92:06:
08:11:a7:4e:ac:5b:6e:d2:eb:25:e5:68:e7:79:79:
9d:66:db:de:4d:bf:0d:f2:4a:5f:aa:83:95:00:f9:
10:bc:bc:bd:22:5e:0a:52:85:50:a1:3e:e0:6e:0e:
8e:43:ec:61:d1:32:b7:66:56:da:94:c1:dc:d8:f0:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:D6:95:FC:84:F5:B4:6B:D4:57:B4:99:AF:6E:B7:5C:71:E4:58
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199109.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6c::/48
Signature Algorithm: sha256WithRSAEncryption
d8:e8:08:1f:38:92:d6:5a:68:b7:7e:c5:4f:d2:26:cc:a1:24:
6f:d1:c1:78:bf:88:be:9b:64:10:87:5b:1b:f5:4b:7e:78:59:
90:8c:45:7c:b0:1a:e1:72:3a:ba:55:f2:a8:ae:0e:db:c4:21:
94:9f:53:54:f6:fe:42:19:bc:c8:4f:75:eb:00:e5:a0:0a:3d:
e1:5b:16:11:bb:17:9b:55:04:ce:ff:49:22:48:99:b2:15:0c:
4e:b8:52:6f:ec:75:bc:0a:dc:91:36:0c:eb:d8:01:48:20:ca:
6b:e3:7b:dd:6c:a4:f0:3e:42:2a:5c:64:cd:cb:38:2c:33:68:
85:3d:47:4f:03:09:12:bd:57:e4:4e:b9:4c:4f:3a:8b:ad:53:
26:1d:6b:22:dc:60:6b:94:e7:e9:b5:bd:df:3b:dc:bb:1d:6d:
88:b9:e8:28:ee:83:74:a4:bb:0f:1f:ef:1d:99:ec:69:04:fd:
56:64:2a:7a:57:d2:19:6b:fe:9c:48:bf:24:5b:91:df:2b:6a:
33:09:d9:81:32:1f:2a:8a:15:89:b8:8c:c9:a6:83:ed:0c:76:
2d:a3:64:91:f5:c4:a7:65:a6:6f:d7:d2:7a:a1:6c:e8:36:78:
c4:7a:a9:7f:54:1d:c5:01:19:de:c9:5a:2f:50:87:80:a5:70:
e3:67:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:30:08 2026 by rpki-client