Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
File: AS199186.roa (raw, json)
Hash identifier: y5TEwDNdXwLYkT/S5ESbdKuPwVembyeRdpOItSZgbio=
Subject key identifier: E6:F0:62:D5:F2:B2:BC:56:CA:6C:2A:16:61:B1:FA:D1:E2:48:C0:3A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C03289F8500DCE8EF13741F70D84D53E581A25A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
Signing time: Sun 14 Jun 2026 08:47:54 +0000
ROA not before: Sun 14 Jun 2026 08:42:54 +0000
ROA not after: Sun 13 Jun 2027 08:47:54 +0000
asID: 199186
IP address blocks: 82.41.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:03:28:9f:85:00:dc:e8:ef:13:74:1f:70:d8:4d:53:e5:81:a2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 14 08:42:54 2026 GMT
Not After : Jun 13 08:47:54 2027 GMT
Subject: CN=E6F062D5F2B2BC56CA6C2A1661B1FAD1E248C03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:ae:1f:6d:bc:c9:60:7d:26:c8:bc:a4:83:
4c:72:f3:43:7e:5c:f3:4b:bc:34:f6:d3:a1:84:97:
05:7d:99:62:90:94:aa:23:5b:df:7e:6b:6e:f9:05:
3b:e0:2f:de:ad:24:16:66:36:78:3a:bc:c6:ee:79:
cc:02:f3:f6:48:6c:5d:03:85:4f:33:9a:48:00:1c:
7e:74:c4:73:7e:30:98:ec:f2:63:07:a3:b7:96:e6:
e2:d7:5f:b8:e5:ce:88:94:4e:ad:aa:aa:96:ec:13:
4a:57:2a:77:53:b6:2c:92:6a:2a:02:76:6f:16:49:
53:df:17:8d:1d:62:5f:83:e7:1a:d7:7a:09:aa:4a:
7e:3b:2d:03:d8:74:da:26:2b:f4:24:9e:cc:c2:00:
61:24:05:9c:67:40:d0:4f:51:2d:6b:3c:2f:a2:bc:
71:c0:e6:46:e3:c2:21:fc:36:25:bc:35:63:29:b2:
86:50:a3:aa:1a:36:f9:74:7e:5e:5b:d0:34:db:56:
e5:66:52:a6:6f:3e:ad:9b:11:df:4c:c7:df:7d:e1:
9f:cb:02:53:cd:0f:d4:89:31:ec:05:50:2a:8f:f0:
ad:d9:04:8c:32:34:f4:d0:a8:13:f7:50:25:6b:cd:
2d:f0:a0:54:06:dc:08:a1:ae:e1:7c:ba:36:d1:5a:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:62:D5:F2:B2:BC:56:CA:6C:2A:16:61:B1:FA:D1:E2:48:C0:3A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d3:11:c1:4b:2c:42:ff:bd:bd:fb:e6:71:88:4c:65:4c:df:
fb:a4:7d:ae:7a:84:0d:03:18:ea:1a:29:ed:b8:b5:f4:ad:20:
a3:28:d1:d4:a3:62:9c:5f:58:d7:5a:de:32:81:ef:9d:51:c3:
f3:71:c3:65:43:3d:28:a3:5c:cd:42:c4:d1:ab:02:32:da:73:
f4:ff:2b:b4:6e:33:cf:90:e4:01:0c:14:f7:97:df:bb:ba:de:
4f:79:16:7d:27:26:9a:e2:13:fd:44:c9:33:3a:23:99:f5:4b:
00:33:fe:9f:04:89:0d:dd:13:de:56:98:75:c6:f0:24:36:5a:
47:b4:c8:3c:f8:19:e9:d1:11:f2:7a:42:0d:dc:da:52:2c:aa:
68:68:e3:e0:1d:c4:72:8e:35:7f:e9:06:5b:9f:d4:2a:70:1e:
0f:a2:ac:0b:31:98:4e:4c:c9:38:d3:d9:b1:75:a6:65:46:99:
37:79:00:03:2b:69:d7:cb:f3:f6:7f:75:fe:69:90:cf:81:f1:
60:c3:48:ab:a8:3c:45:e0:6f:5f:ed:01:77:6a:d3:c7:be:b2:
a7:b7:50:d4:67:88:d2:41:3f:73:c8:9b:8a:26:b8:9d:36:78:
cf:fb:e5:dc:e7:36:08:1f:15:a8:67:9f:b7:54:9f:0a:23:2e:
47:8e:c0:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfAMon4UA3OjvE3QfcNhNU+WBolowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MTQwODQyNTRaFw0yNzA2MTMwODQ3NTRaMDMxMTAvBgNV
BAMTKEU2RjA2MkQ1RjJCMkJDNTZDQTZDMkExNjYxQjFGQUQxRTI0OEMwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg364fbbzJYH0myLykg0xy80N+
XPNLvDT206GElwV9mWKQlKojW99+a275BTvgL96tJBZmNng6vMbuecwC8/ZIbF0D
hU8zmkgAHH50xHN+MJjs8mMHo7eW5uLXX7jlzoiUTq2qqpbsE0pXKndTtiySaioC
dm8WSVPfF40dYl+D5xrXegmqSn47LQPYdNomK/QknszCAGEkBZxnQNBPUS1rPC+i
vHHA5kbjwiH8NiW8NWMpsoZQo6oaNvl0fl5b0DTbVuVmUqZvPq2bEd9Mx9994Z/L
AlPND9SJMewFUCqP8K3ZBIwyNPTQqBP3UCVrzS3woFQG3AihruF8ujbRWpIJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU5vBi1fKyvFbKbCoWYbH60eJIwDowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5MTg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUino
MA0GCSqGSIb3DQEBCwUAA4IBAQAK0xHBSyxC/729++ZxiExlTN/7pH2ueoQNAxjq
GintuLX0rSCjKNHUo2KcX1jXWt4yge+dUcPzccNlQz0oo1zNQsTRqwIy2nP0/yu0
bjPPkOQBDBT3l9+7ut5PeRZ9Jyaa4hP9RMkzOiOZ9UsAM/6fBIkN3RPeVph1xvAk
NlpHtMg8+Bnp0RHyekIN3NpSLKpoaOPgHcRyjjV/6QZbn9QqcB4PoqwLMZhOTMk4
09mxdaZlRpk3eQADK2nXy/P2f3X+aZDPgfFgw0irqDxF4G9f7QF3atPHvrKnt1DU
Z4jSQT9zyJuKJridNnjP++Xc5zYIHxWoZ5+3VJ8KIy5HjsCt
-----END CERTIFICATE-----
Generated at Fri Jun 19 02:18:41 2026 by rpki-client