Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: k5sHFaGAqbuX6pny5fhCt0NqO5VqNN7vnIPzGNxtblQ=
Subject key identifier: D7:5E:00:4F:E5:2B:83:C8:6A:23:72:CC:DF:2B:85:8B:37:06:9B:C7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3ED5A320347DDFE3B0CC44669769CC78C06D9210
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
Signing time: Fri 25 Sep 2026 13:31:12 +0000
ROA not before: Fri 25 Sep 2026 13:26:12 +0000
ROA not after: Fri 24 Sep 2027 13:31:12 +0000
asID: 199550
IP address blocks: 94.116.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d5:a3:20:34:7d:df:e3:b0:cc:44:66:97:69:cc:78:c0:6d:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 25 13:26:12 2026 GMT
Not After : Sep 24 13:31:12 2027 GMT
Subject: CN=D75E004FE52B83C86A2372CCDF2B858B37069BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:3f:43:46:cd:bc:ef:c4:d9:78:78:ec:34:
14:5d:0a:0a:5c:23:e8:91:22:b7:30:02:7a:fa:d2:
70:b7:25:86:3e:d5:2c:40:83:89:1a:44:0e:5f:18:
46:f3:b5:4a:64:cb:b1:d8:35:f8:48:8c:43:04:20:
94:06:5a:b2:71:20:15:cd:b7:13:1f:41:82:d8:32:
88:88:78:1e:65:39:6c:3b:50:97:35:fa:e0:eb:aa:
c5:b1:05:d6:5f:d0:c3:9a:8a:c5:7c:50:5b:ec:12:
14:32:a8:2f:88:99:b6:45:e0:7d:d8:3d:ee:b6:f5:
48:2f:ba:4d:91:d4:8d:c4:cf:56:b0:e4:90:81:5d:
02:3e:11:4b:49:66:5c:96:33:b2:9e:98:4f:f1:be:
77:96:a2:ec:d8:5d:22:2a:6e:0a:5e:67:09:b5:11:
40:9f:1e:ba:10:7e:f1:44:a7:e2:76:6e:d0:6b:c0:
78:e1:0c:fc:ff:83:f1:48:76:eb:0c:ec:98:0c:0e:
e1:14:37:b3:e4:b0:4b:c1:f7:2a:86:81:f4:68:7d:
0e:5c:ac:b7:86:02:31:1a:bb:bc:48:2f:5a:d1:ae:
85:08:cf:68:89:93:98:9b:99:ea:1a:51:a2:9c:80:
5a:a4:e0:9e:63:c8:dd:c4:64:98:40:ce:7a:6e:f0:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:00:4F:E5:2B:83:C8:6A:23:72:CC:DF:2B:85:8B:37:06:9B:C7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.0.0/22
Signature Algorithm: sha256WithRSAEncryption
07:9f:83:f7:0e:fa:fb:ce:0f:04:47:0e:28:9d:9e:f4:b3:26:
8a:7d:39:44:38:99:ee:7f:59:7a:2a:a1:60:aa:71:26:e6:a4:
ef:fb:11:98:a3:6c:50:0c:fc:52:6a:f1:d9:2c:78:c5:8b:37:
f7:98:df:de:d4:a2:32:20:b6:ad:06:0d:37:33:2b:50:66:d8:
53:01:85:b8:18:bb:5e:fa:f4:a2:a4:02:aa:9a:ed:96:ce:ae:
8b:ce:e1:e0:cd:bf:3c:51:a8:08:c4:e3:e3:ca:c3:b1:74:25:
91:44:53:b2:30:52:e0:23:2f:0c:7c:3c:8e:87:6c:8b:05:f6:
f1:3f:28:0b:f5:6d:20:d2:7a:1a:b5:c5:48:cb:9d:83:d5:60:
ea:b5:78:c5:f3:eb:d0:0a:fe:a8:96:25:fd:2c:24:4f:92:3b:
37:1c:e6:9e:d3:3c:4c:db:16:54:b4:19:f7:21:8f:76:0f:be:
a1:89:81:a1:6e:3d:d3:31:b5:51:41:56:a7:e1:c7:0b:60:77:
44:b3:41:c6:52:ea:3e:60:35:e0:01:4a:60:b9:27:a7:7e:9d:
74:1b:4c:c3:f7:f4:53:6c:40:cd:28:f3:55:a8:fc:a8:b2:3c:
75:84:b3:a7:1b:3b:d6:fe:06:ff:16:d4:99:6b:8d:6b:2f:e0:
ea:48:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:53:58 2026 by rpki-client