Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
File: AS199129.roa (raw, json)
Hash identifier: 2A+xkMscb3xdCV6+JiXQU2JFlVchjtYPN8qgP+kowtY=
Subject key identifier: F0:81:39:90:42:C5:CA:2C:A9:75:CA:73:DC:EF:89:31:FF:65:04:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 49B7EE5BBF8FC88AB096F13ACF36F849581890E6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
Signing time: Thu 13 Aug 2026 19:07:28 +0000
ROA not before: Thu 13 Aug 2026 19:02:28 +0000
ROA not after: Thu 12 Aug 2027 19:07:28 +0000
asID: 199129
IP address blocks: 82.39.205.0/24 maxlen: 24
2a13:9500:1b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b7:ee:5b:bf:8f:c8:8a:b0:96:f1:3a:cf:36:f8:49:58:18:90:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 13 19:02:28 2026 GMT
Not After : Aug 12 19:07:28 2027 GMT
Subject: CN=F081399042C5CA2CA975CA73DCEF8931FF6504A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:84:07:63:78:53:c8:4a:b5:81:db:6d:6b:
8a:95:46:b9:1e:4d:01:95:00:14:47:d7:60:ca:b4:
e2:8a:eb:4f:6a:30:8d:76:41:9e:ae:b9:62:b6:e2:
17:7a:8a:3a:e6:08:ec:37:ad:9e:fd:06:54:39:ad:
f7:d5:67:64:c5:8f:38:0f:4d:a4:2e:93:d0:22:6e:
c3:be:20:88:33:41:b0:75:06:c6:6e:3f:32:fe:a7:
89:a3:d8:d9:af:c7:94:a7:94:1a:df:7b:06:79:f1:
f4:e8:b7:65:e2:ef:f3:5c:cc:86:6e:fc:47:cf:3d:
ad:cd:b5:d5:71:8e:23:06:16:d5:28:25:99:49:bc:
05:18:d1:36:b1:13:db:b7:03:1a:fe:bb:d0:db:13:
c9:c8:10:4d:83:b2:bc:c3:b0:77:da:30:30:c1:df:
03:7f:6b:c7:07:0a:a8:53:44:c7:f9:ac:d5:f4:e1:
8a:00:e6:e9:62:66:8f:15:6e:9b:1c:a9:40:52:eb:
9f:e3:9c:4f:cc:25:08:b8:49:df:82:0d:b2:c1:9c:
af:f3:e3:b4:3f:5d:a6:4b:e3:05:6d:09:5a:b3:d8:
01:70:8a:8a:e1:e3:88:c7:c3:95:a1:77:c2:07:25:
94:8c:d9:39:ba:b2:a4:2e:42:98:f9:39:19:72:4a:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:39:90:42:C5:CA:2C:A9:75:CA:73:DC:EF:89:31:FF:65:04:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.205.0/24
IPv6:
2a13:9500:1b5::/48
Signature Algorithm: sha256WithRSAEncryption
53:4e:68:a3:c5:e2:33:af:8a:a5:37:82:d5:fd:bf:04:ab:dc:
be:e9:3b:58:28:2d:1e:83:4a:e1:29:f2:8a:72:cf:fa:5c:98:
6a:45:a8:e5:82:16:82:c1:9c:4c:ae:94:57:aa:1a:97:d8:bf:
32:11:15:3a:ec:cf:a7:be:de:2e:cd:c9:8b:ca:ae:54:9e:e3:
27:7c:99:43:74:35:32:ba:b2:d9:f7:ed:9a:46:aa:b0:2c:e0:
bc:43:8b:e1:3f:cc:8f:9b:24:9b:dc:f2:9c:bf:f1:c4:a9:fd:
2b:89:7f:c7:fb:d6:31:1c:b0:a3:65:1f:52:3d:d6:d5:42:85:
a2:c8:2a:ff:a8:45:2f:96:59:72:46:5b:86:92:c1:08:fc:e8:
75:4b:fd:ed:24:c0:9d:8a:bf:8e:71:25:87:02:ad:8b:92:bc:
2e:04:75:32:aa:41:9a:43:32:4e:c4:2c:ee:70:cb:16:46:56:
a3:9d:d3:64:43:fd:66:e9:f1:ec:5c:37:09:a9:26:c1:95:6f:
5e:75:b8:aa:6a:35:00:ef:09:cc:d9:90:e8:84:1b:2d:1d:02:
a3:93:26:60:bf:a2:70:56:16:fe:32:c3:58:9d:52:ee:d7:f3:
10:b1:be:80:62:d5:57:8e:d0:97:f7:39:e3:77:63:bc:ee:df:
cf:2b:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:41 2026 by rpki-client