Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS199030.roa
File: AS199030.roa (raw, json)
Hash identifier: +l1jGMTwf7+wGU2Clp1Ezh0EMeN82sJqUUud7mGDeS0=
Subject key identifier: C6:23:62:93:72:A1:5D:1A:0F:8A:09:9C:36:67:2C:75:2B:94:DC:64
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 1D8CB369BE8E0C295F03EE00371586AD589A2FC4
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS199030.roa
Signing time: Sat 17 Oct 2026 05:20:25 +0000
ROA not before: Sat 17 Oct 2026 05:15:25 +0000
ROA not after: Sat 16 Oct 2027 05:20:25 +0000
asID: 199030
IP address blocks: 212.17.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8c:b3:69:be:8e:0c:29:5f:03:ee:00:37:15:86:ad:58:9a:2f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 17 05:15:25 2026 GMT
Not After : Oct 16 05:20:25 2027 GMT
Subject: CN=C623629372A15D1A0F8A099C36672C752B94DC64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:c4:8a:49:7b:0c:13:9b:37:b3:db:cc:6e:
e8:12:5f:40:c3:a3:48:80:43:2c:bf:4e:a9:c2:13:
90:09:16:b8:48:9a:ac:0d:15:ab:80:d1:b8:3c:2e:
05:06:f7:b9:3a:22:1f:06:96:01:27:06:ac:f6:46:
7b:4f:e4:d0:84:50:ce:18:18:f8:9b:ca:47:0d:c6:
b0:9c:3c:63:33:91:6c:cd:9d:ea:ff:d1:5d:bc:b6:
ad:2e:ab:36:e7:ec:56:76:34:f9:58:f5:ae:a6:2f:
41:ad:16:0e:4c:c7:b4:5e:29:d9:32:16:0d:e0:e7:
c0:ae:03:2c:e6:14:9b:60:82:a3:2b:bb:c5:f9:82:
1e:9a:58:02:00:0b:8e:8f:c4:63:e2:fa:ea:d7:02:
f0:e1:2e:8c:4c:51:e6:fd:e7:c4:92:c3:ed:be:24:
24:01:8c:38:6a:d1:c9:30:17:b0:54:6d:19:e1:85:
8a:98:74:c5:2a:5d:75:a3:30:ff:64:3e:3f:31:70:
7a:81:86:79:62:17:0d:b9:4b:3e:f2:93:82:96:7d:
63:0d:ce:f2:72:4e:23:c3:b7:75:1b:b5:09:8d:de:
1c:a4:2b:34:bd:88:2c:58:5e:34:56:f0:a3:32:79:
23:e7:a5:50:97:7d:d8:99:b3:24:44:44:73:65:64:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:62:93:72:A1:5D:1A:0F:8A:09:9C:36:67:2C:75:2B:94:DC:64
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS199030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.224.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6f:b7:3f:0c:e5:46:54:de:ca:11:88:be:34:6d:f6:40:e3:
fc:16:c2:bb:c4:01:98:07:a3:b0:06:57:0f:51:4e:6d:53:af:
8c:bc:3d:17:97:fe:0f:4d:cf:fe:87:11:16:1b:8e:7a:96:09:
99:72:cb:dd:bd:12:63:d2:aa:6b:a4:47:5d:d7:3c:26:66:c1:
80:ce:37:5f:3f:c3:05:12:26:ec:24:a1:44:a7:7b:5f:4e:3a:
d1:ca:48:f1:50:19:a1:f2:25:6e:19:10:d6:a8:cc:6d:36:b7:
d1:f2:0b:12:09:7f:8b:c5:a4:7c:dd:bf:ac:07:e0:82:c3:83:
b8:b7:33:76:25:3f:27:bd:34:d4:07:2b:2a:6e:aa:b0:5a:2b:
8c:89:04:09:e6:be:f9:bb:01:d7:ce:aa:ba:3e:88:e3:34:3a:
e9:10:af:ab:1d:81:2f:84:4c:43:46:46:88:f2:b2:56:72:e8:
b0:8f:ed:a7:3d:81:9b:dc:b2:20:80:be:6b:c0:3e:4c:1b:e5:
cb:22:de:ab:46:d9:f7:aa:35:bd:dd:e8:b2:10:34:23:82:02:
14:64:92:b9:7e:98:ce:7c:22:05:66:2c:e4:b5:9b:9e:4e:b8:
0d:60:fd:c4:0d:66:8e:b2:fb:7c:b1:44:21:09:e8:87:13:a5:
b1:85:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:09:48 2026 by rpki-client