Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199186.roa
File:                     AS199186.roa (raw, json)
Hash identifier:          1R/su6e/xF5SOKUWAAhBTYZRtJIi00kyHEPpVbqznZM=
Subject key identifier:   F6:DE:8C:FA:C0:1C:3F:29:EB:66:87:DF:EB:36:47:AA:EC:34:8A:76
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       57B5A53FD80BC10E622AA70ECD05728B1E0874CA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199186.roa
Signing time:             Mon 08 Jun 2026 06:33:54 +0000
ROA not before:           Mon 08 Jun 2026 06:28:54 +0000
ROA not after:            Mon 07 Jun 2027 06:33:54 +0000
asID:                     199186
IP address blocks:        178.92.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:a5:3f:d8:0b:c1:0e:62:2a:a7:0e:cd:05:72:8b:1e:08:74:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun  8 06:28:54 2026 GMT
            Not After : Jun  7 06:33:54 2027 GMT
        Subject: CN=F6DE8CFAC01C3F29EB6687DFEB3647AAEC348A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:d5:1b:01:8f:35:aa:62:50:62:c7:02:0e:
                    a6:36:86:d6:68:64:a4:d3:b3:a8:90:ef:d6:0c:17:
                    46:db:9f:01:52:68:9c:93:03:07:58:1e:1b:22:e0:
                    cd:5a:06:25:fc:a7:17:71:3f:93:0e:37:68:f6:87:
                    ad:5d:c1:47:e5:19:2f:5b:d4:4c:df:d8:ef:f3:48:
                    e0:f4:4f:5f:f1:85:94:c2:64:2b:ee:8f:37:67:8d:
                    bc:09:1d:54:8e:e2:90:79:69:a8:63:02:19:bf:5a:
                    60:79:b6:44:df:b5:27:84:f1:4e:76:21:2e:b9:6b:
                    cd:48:27:d4:84:f7:af:96:b4:53:aa:7c:ae:f5:b1:
                    f5:cf:9c:b8:36:20:16:15:46:4d:9d:32:92:9a:d8:
                    90:7c:03:d4:4e:c9:9a:d6:c3:0c:03:a3:52:2f:86:
                    e8:d7:03:fa:d6:99:ea:c7:49:c2:38:d6:00:71:87:
                    92:46:ec:de:48:f2:b7:74:dc:e4:07:8c:fb:8a:6c:
                    fb:83:b1:78:15:2b:ef:3a:86:13:96:5a:fd:bb:e2:
                    fc:53:57:84:2c:40:d5:35:32:3b:3d:51:e2:25:06:
                    26:2b:de:ab:e4:e9:0f:36:bd:ff:60:63:e9:df:10:
                    f9:b6:d8:b0:ef:af:fa:e0:06:c9:64:da:81:00:2e:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DE:8C:FA:C0:1C:3F:29:EB:66:87:DF:EB:36:47:AA:EC:34:8A:76
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:d9:2f:f6:bb:e5:e1:e0:93:9a:c2:a7:ac:bd:c3:08:a0:
         d8:99:28:30:24:3a:c7:2a:a9:a1:a2:46:57:07:38:7c:ed:d6:
         01:56:29:fd:f9:fa:7d:24:07:1d:2d:d3:1b:42:19:38:a0:38:
         39:ff:58:b4:a4:d8:09:eb:2d:a0:8a:31:9c:80:ef:3d:f5:6b:
         92:0b:5f:e5:be:b8:fa:cb:15:4d:f6:a3:d2:bb:7a:90:59:48:
         53:24:2d:56:dc:ef:c3:d7:44:e2:1f:b0:b9:8e:f4:83:f3:ec:
         23:84:99:50:d5:b1:35:10:e6:bd:06:64:47:07:39:a4:d7:fc:
         a0:7d:ca:ee:b5:ba:0c:85:f0:78:90:a5:36:81:23:eb:59:b8:
         26:7a:6d:35:19:3c:04:a8:93:83:46:6c:96:40:c6:20:ba:09:
         62:94:e9:53:9f:56:98:0d:74:f7:a8:d6:e2:23:b8:5f:a7:bc:
         bb:09:46:87:f3:5b:a5:dd:41:2a:58:50:2c:bc:fb:6d:a1:ee:
         c3:2d:db:c5:39:4f:f0:6a:ac:5d:5f:6c:30:74:f3:1a:aa:73:
         ba:68:78:08:66:03:12:78:7e:1c:83:9c:b1:07:29:42:fa:ac:
         2b:fe:23:b6:4b:15:56:c7:cd:77:18:34:b9:46:0f:9e:e1:a2:
         14:12:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:03 2026 by rpki-client