Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199081.roa
File: AS199081.roa (raw, json)
Hash identifier: AvBI5qEzcqMrLGjDGM9X259E44gfm1fM2r+kAM7a8FA=
Subject key identifier: 1B:35:C5:B9:B4:5F:61:6D:EC:9A:55:84:0C:A2:91:57:5E:2F:1D:5E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4CC712F78778C42A1BB3053B7DBDF1A54DB487F2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199081.roa
Signing time: Fri 25 Jul 2025 10:54:17 +0000
ROA not before: Fri 25 Jul 2025 10:49:17 +0000
ROA not after: Fri 24 Jul 2026 10:54:17 +0000
asID: 199081
IP address blocks: 92.112.15.0/24 maxlen: 24
92.112.50.0/24 maxlen: 24
92.112.82.0/24 maxlen: 24
92.112.83.0/24 maxlen: 24
92.112.85.0/24 maxlen: 24
92.112.91.0/24 maxlen: 24
92.112.95.0/24 maxlen: 24
92.112.129.0/24 maxlen: 24
92.112.132.0/24 maxlen: 24
92.112.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c7:12:f7:87:78:c4:2a:1b:b3:05:3b:7d:bd:f1:a5:4d:b4:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 25 10:49:17 2025 GMT
Not After : Jul 24 10:54:17 2026 GMT
Subject: CN=1B35C5B9B45F616DEC9A55840CA291575E2F1D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:80:58:18:26:07:ee:e8:56:e0:03:c0:aa:
15:a3:29:29:e9:ed:ad:ee:30:60:4d:eb:6b:ae:15:
a3:92:e6:42:30:fa:7a:53:0f:e3:7a:91:26:08:b5:
54:c6:89:f0:4f:88:e6:e1:42:04:27:57:ce:4a:ea:
cb:49:cd:60:33:30:f5:d3:ec:9f:64:e1:44:16:ff:
3a:b9:db:5e:e3:5f:22:05:0e:34:ca:75:e1:41:46:
6c:7f:72:6c:3a:7d:90:81:fb:3b:04:20:a3:1f:2a:
d2:9c:bd:e1:64:78:60:8d:16:42:7a:63:4b:f1:0d:
6b:37:56:44:ed:bd:e7:53:e2:d2:d4:15:cb:cb:82:
fc:77:10:10:98:7b:3e:9c:44:70:e0:f7:2c:14:12:
32:07:18:5b:e3:a7:5f:2b:3e:69:98:a6:c3:8d:f2:
40:66:e2:c8:ce:81:f1:84:7c:52:63:a0:5f:d1:58:
cb:e4:6a:e9:25:01:ac:a4:4a:ed:2f:d3:70:6f:6d:
23:69:8e:a2:95:28:1f:bd:f3:80:81:79:f3:04:55:
a5:f1:a4:31:8a:6e:55:99:eb:1b:77:fb:4d:b2:79:
6e:26:85:c4:46:10:06:3b:5f:d6:6f:e6:22:63:cd:
b2:be:32:f2:62:00:79:ed:fc:44:e5:a8:6a:8a:a4:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:C5:B9:B4:5F:61:6D:EC:9A:55:84:0C:A2:91:57:5E:2F:1D:5E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199081.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.15.0/24
92.112.50.0/24
92.112.82.0/23
92.112.85.0/24
92.112.91.0/24
92.112.95.0/24
92.112.129.0/24
92.112.132.0/23
Signature Algorithm: sha256WithRSAEncryption
06:80:89:6a:2f:d4:c2:da:ce:13:f0:b7:6e:64:2c:97:dd:40:
f2:33:bb:f8:49:b3:f5:29:71:e7:aa:6c:29:73:37:24:ab:0a:
33:55:8f:e1:ec:34:29:71:ff:ce:a7:50:65:ba:20:26:6a:71:
30:9a:6b:3c:92:54:1f:99:40:f8:bd:50:b5:1e:30:ce:d2:d6:
b1:4d:83:67:0d:2e:18:2b:fb:6e:80:c2:1d:43:fd:3b:d1:e1:
bf:f3:14:a0:19:98:ad:cf:08:77:7b:1e:3b:e5:5e:85:b0:88:
99:c5:3a:a3:06:6f:35:e4:35:79:ac:83:19:0a:2d:d8:89:0d:
18:73:8b:f6:42:71:12:0c:72:52:14:bf:08:e0:a7:15:a4:b9:
bf:95:ec:3a:e0:6d:af:cc:16:70:0a:eb:3e:68:a2:2d:30:2e:
7c:7c:80:88:bc:67:eb:b6:19:e9:6a:19:02:07:44:f9:a2:67:
67:d0:8c:26:ef:db:cb:89:e3:df:3d:fa:a7:df:9c:3b:8e:52:
a9:0e:0e:b1:7b:6d:32:16:f1:cd:6e:db:8d:63:b4:9c:70:f2:
f2:e3:7f:16:b6:6f:51:58:7f:40:93:84:5a:da:a9:a3:27:21:
0d:a2:17:d4:f1:85:83:f5:87:47:f5:a4:14:89:a6:c1:b4:9a:
13:51:d6:cc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTMcS94d4xCobswU7fb3xpU20h/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MjUxMDQ5MTdaFw0yNjA3MjQxMDU0MTdaMDMxMTAvBgNV
BAMTKDFCMzVDNUI5QjQ1RjYxNkRFQzlBNTU4NDBDQTI5MTU3NUUyRjFENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/oBYGCYH7uhW4APAqhWjKSnp
7a3uMGBN62uuFaOS5kIw+npTD+N6kSYItVTGifBPiObhQgQnV85K6stJzWAzMPXT
7J9k4UQW/zq5217jXyIFDjTKdeFBRmx/cmw6fZCB+zsEIKMfKtKcveFkeGCNFkJ6
Y0vxDWs3VkTtvedT4tLUFcvLgvx3EBCYez6cRHDg9ywUEjIHGFvjp18rPmmYpsON
8kBm4sjOgfGEfFJjoF/RWMvkauklAaykSu0v03BvbSNpjqKVKB+984CBefMEVaXx
pDGKblWZ6xt3+02yeW4mhcRGEAY7X9Zv5iJjzbK+MvJiAHnt/ETlqGqKpCqLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGzXFubRfYW3smlWEDKKRV14vHV4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk5MDgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAXHAP
AwQAXHAyAwQBXHBSAwQAXHBVAwQAXHBbAwQAXHBfAwQAXHCBAwQBXHCEMA0GCSqG
SIb3DQEBCwUAA4IBAQAGgIlqL9TC2s4T8LduZCyX3UDyM7v4SbP1KXHnqmwpczck
qwozVY/h7DQpcf/Op1BluiAmanEwmms8klQfmUD4vVC1HjDO0taxTYNnDS4YK/tu
gMIdQ/070eG/8xSgGZitzwh3ex475V6FsIiZxTqjBm815DV5rIMZCi3YiQ0Yc4v2
QnESDHJSFL8I4KcVpLm/lew64G2vzBZwCus+aKItMC58fICIvGfrthnpahkCB0T5
omdn0Iwm79vLiePfPfqn35w7jlKpDg6xe20yFvHNbtuNY7SccPLy438Wtm9RWH9A
k4Ra2qmjJyENohfU8YWD9YdH9aQUiabBtJoTUdbM
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:41 2025 by rpki-client