Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
File: AS199129.roa (raw, json)
Hash identifier: II7ZJtNyLlP4E0695wzCNeKZbYUZvBH2m7GvI92fD+4=
Subject key identifier: 2C:5B:4D:15:8D:7D:F7:AA:FB:7C:BC:EA:5F:35:12:B7:4A:9D:BF:21
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B03154435067EEC6A7DCACB389FA4AA78A06B86
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
Signing time: Thu 16 Jul 2026 12:18:34 +0000
ROA not before: Thu 16 Jul 2026 12:13:34 +0000
ROA not after: Thu 15 Jul 2027 12:18:34 +0000
asID: 199129
IP address blocks: 82.39.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:03:15:44:35:06:7e:ec:6a:7d:ca:cb:38:9f:a4:aa:78:a0:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 16 12:13:34 2026 GMT
Not After : Jul 15 12:18:34 2027 GMT
Subject: CN=2C5B4D158D7DF7AAFB7CBCEA5F3512B74A9DBF21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:69:58:d9:36:cb:ba:e8:ef:2e:cf:96:5d:
2f:66:60:2b:b8:4a:3e:31:97:c0:ba:1c:23:d7:1e:
00:07:03:b1:75:27:c4:1d:ea:80:9a:fb:b6:27:ce:
60:c0:09:38:e9:56:17:4b:10:ff:80:cd:da:07:bd:
1f:0b:80:78:6d:0b:35:4f:5f:74:0e:fe:35:5a:31:
76:84:3e:92:1d:07:17:1c:d4:a3:3e:64:7a:7c:ed:
89:84:a8:4a:fa:0e:1e:03:d2:f5:63:3e:90:d4:09:
10:da:84:87:62:bd:f8:03:b4:60:7f:61:86:51:98:
28:39:38:25:0f:cd:ac:e5:6c:10:eb:6a:c5:6d:79:
11:2a:d2:df:01:18:3f:62:43:80:8a:b4:a7:5a:84:
22:b3:1f:56:90:fe:21:bd:33:ac:9a:5b:d4:7d:a9:
13:78:50:9d:81:97:1d:08:0f:14:c1:d5:e9:63:64:
be:69:bb:3c:53:73:8a:48:95:cf:c5:77:c9:57:37:
9c:55:db:d8:e4:c9:3e:da:1a:14:55:73:23:a8:c5:
39:fb:74:a5:88:3b:49:92:15:b7:df:a2:eb:42:cd:
9d:ed:85:2e:74:92:b1:3c:b3:ee:06:05:ff:31:0b:
49:70:f3:67:3b:34:e5:4a:e7:7e:63:7d:44:df:49:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:4D:15:8D:7D:F7:AA:FB:7C:BC:EA:5F:35:12:B7:4A:9D:BF:21
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:48:9c:31:62:d0:10:4a:83:c7:a8:d4:7c:20:5f:21:f6:02:
cd:1c:b7:0e:3a:8b:22:d7:ed:5d:ac:7e:76:15:d5:53:12:89:
1c:d5:a4:92:a4:e1:84:a3:0a:a7:d9:0c:cf:6b:9b:5e:43:9b:
81:83:56:1c:b1:6c:7e:98:e6:95:94:68:63:1e:cd:a8:8b:50:
02:ff:c9:76:f0:c7:83:df:53:0c:2c:36:38:12:3b:ad:3d:09:
b8:e6:0d:ae:b6:dd:90:e5:e4:6f:4e:f9:3c:eb:28:db:49:2f:
5e:f3:5c:78:99:b3:18:49:18:1e:56:ef:4f:a3:99:06:bc:4e:
18:4f:ef:36:2f:9f:04:54:47:52:8c:b3:5f:48:0a:2b:3c:14:
cf:3e:67:a3:16:5f:2f:a7:e3:86:9d:3e:1a:c5:6f:17:4a:88:
c4:2c:eb:95:a9:9a:ba:f5:4a:a9:4a:a2:6b:22:e0:37:24:b8:
71:4f:f4:c3:37:a2:f0:68:b9:97:17:9d:7f:3e:80:09:86:90:
08:92:73:e5:05:72:fb:2f:56:eb:9a:9d:70:f1:95:a8:00:60:
e6:e3:37:11:75:77:33:6c:f2:ef:c5:8c:b8:ef:34:c2:7f:43:
44:2e:56:d8:fe:20:ea:41:c1:85:d9:92:8c:c0:ee:d4:03:98:
10:8c:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:57 2026 by rpki-client