Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199133.roa
File: AS199133.roa (raw, json)
Hash identifier: sMCaxUg5zbargv42MByEPDpL7t7+ca+M7YpTUr+nFtM=
Subject key identifier: EE:7B:CD:B8:2E:7D:09:F4:E5:77:FD:FE:53:24:3E:44:DA:0D:5C:C8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3BC701C8ED14CB6208FF65512DBF20FDC945E525
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199133.roa
Signing time: Fri 23 Oct 2026 11:11:11 +0000
ROA not before: Fri 23 Oct 2026 11:06:11 +0000
ROA not after: Fri 22 Oct 2027 11:11:11 +0000
asID: 199133
IP address blocks: 2a14:7583:a000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c7:01:c8:ed:14:cb:62:08:ff:65:51:2d:bf:20:fd:c9:45:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 23 11:06:11 2026 GMT
Not After : Oct 22 11:11:11 2027 GMT
Subject: CN=EE7BCDB82E7D09F4E577FDFE53243E44DA0D5CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:2f:d9:ef:75:59:8f:53:f8:e8:05:3e:93:
cf:35:96:ff:a7:e0:48:3a:b4:8d:14:b8:2d:7a:79:
6d:5e:a6:04:f7:be:bf:76:6d:03:14:ac:a8:44:2d:
85:23:f1:07:0b:45:6d:f4:6e:61:21:c5:27:7a:ef:
03:a2:7f:23:b4:ee:9d:d9:d3:4a:02:57:57:d3:7b:
23:19:9e:ca:da:30:5b:9e:75:72:6f:db:45:4a:3b:
53:75:cb:26:9c:ce:f9:d4:f1:ce:82:8f:e7:d7:9f:
4a:66:45:e2:4f:35:09:8f:5a:47:40:ee:bf:a8:49:
1e:ca:e4:86:48:3d:62:a1:b6:a8:73:92:ff:0f:7b:
46:80:56:67:35:fa:a1:44:08:72:0d:71:55:82:a6:
8f:f8:0b:06:f2:38:b6:2f:2c:2f:6c:57:5d:3f:34:
a8:5f:c4:07:c6:a1:9f:e7:4d:ea:0f:3e:32:c4:5d:
29:f6:a7:b3:86:65:9d:a2:e2:0e:79:41:3c:30:50:
5d:67:9f:6d:bb:02:52:3f:2d:41:e1:1e:10:60:10:
9a:44:aa:29:da:62:c8:ff:6b:ee:20:3d:4d:44:d9:
9e:8b:71:00:5e:94:07:14:84:be:34:8b:52:89:1e:
1f:cd:06:a8:9b:8a:bc:ef:c1:7e:36:11:ea:b1:b0:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:CD:B8:2E:7D:09:F4:E5:77:FD:FE:53:24:3E:44:DA:0D:5C:C8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:a000::/38
Signature Algorithm: sha256WithRSAEncryption
85:f4:9e:90:dc:94:31:d0:69:83:01:da:30:26:79:0d:bf:e0:
91:46:ff:34:86:48:56:6e:92:fe:05:46:00:60:e2:0e:3c:ba:
a9:00:27:54:97:af:c6:8f:8c:95:98:a2:dc:60:ba:af:df:1f:
43:59:ac:ae:a3:32:f5:23:ca:d8:9e:69:46:27:21:fd:b4:fd:
94:c4:0c:9b:71:ff:23:85:3f:16:6e:25:d5:b4:54:08:a0:26:
ca:cc:59:3e:34:41:8f:c8:7a:47:f7:5f:82:dc:40:dc:15:23:
c4:12:57:9e:ca:d4:dd:f1:08:3a:b3:a9:65:f9:0e:cf:39:1a:
c5:14:e6:ac:cb:23:28:07:c2:99:5c:66:c2:55:b9:ab:2e:63:
2c:52:81:45:4a:2f:4f:0a:2e:12:58:9d:18:2d:f5:2c:86:ea:
ae:7d:69:90:74:66:0e:4f:a9:5a:27:36:43:a5:35:14:7a:19:
a2:e2:f2:08:d8:8a:f0:57:35:5a:88:24:29:07:85:fc:8e:74:
96:91:f6:7e:af:58:d0:2f:4f:81:ec:f9:88:30:fb:1c:fe:21:
ed:cd:ec:06:7a:bb:7f:dc:93:3a:49:d4:cf:41:3d:df:5d:bc:
4c:a9:b9:3b:95:a6:4b:b7:ce:b2:b6:17:cb:45:d3:80:66:79:
50:df:95:71
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUO8cByO0Uy2II/2VRLb8g/clF5SUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjEwMjMxMTA2MTFaFw0yNzEwMjIxMTExMTFaMDMxMTAvBgNV
BAMTKEVFN0JDREI4MkU3RDA5RjRFNTc3RkRGRTUzMjQzRTQ0REEwRDVDQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeWC/Z73VZj1P46AU+k881lv+n
4Eg6tI0UuC16eW1epgT3vr92bQMUrKhELYUj8QcLRW30bmEhxSd67wOifyO07p3Z
00oCV1fTeyMZnsraMFuedXJv20VKO1N1yyaczvnU8c6Cj+fXn0pmReJPNQmPWkdA
7r+oSR7K5IZIPWKhtqhzkv8Pe0aAVmc1+qFECHINcVWCpo/4CwbyOLYvLC9sV10/
NKhfxAfGoZ/nTeoPPjLEXSn2p7OGZZ2i4g55QTwwUF1nn227AlI/LUHhHhBgEJpE
qinaYsj/a+4gPU1E2Z6LcQBelAcUhL40i1KJHh/NBqibirzvwX42EeqxsLNFAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQU7nvNuC59CfTld/3+UyQ+RNoNXMgwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTk5MTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhR1
g6AwDQYJKoZIhvcNAQELBQADggEBAIX0npDclDHQaYMB2jAmeQ2/4JFG/zSGSFZu
kv4FRgBg4g48uqkAJ1SXr8aPjJWYotxguq/fH0NZrK6jMvUjytieaUYnIf20/ZTE
DJtx/yOFPxZuJdW0VAigJsrMWT40QY/Iekf3X4LcQNwVI8QSV57K1N3xCDqzqWX5
Ds85GsUU5qzLIygHwplcZsJVuasuYyxSgUVKL08KLhJYnRgt9SyG6q59aZB0Zg5P
qVonNkOlNRR6GaLi8gjYivBXNVqIJCkHhfyOdJaR9n6vWNAvT4Hs+Ygw+xz+Ie3N
7AZ6u3/ckzpJ1M9BPd9dvEypuTuVpku3zrK2F8tF04BmeVDflXE=
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:43:34 2026 by rpki-client