Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
File: AS199186.roa (raw, json)
Hash identifier: b69rkmkcHxDVqg36slSNv1OuNRk0M/fOMGnoi4wQBK4=
Subject key identifier: 45:F4:91:87:7D:2E:33:EB:FC:96:B2:82:CF:0F:57:CB:F9:08:8D:C6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30DB383996C6C4BFB63B3D580D32167EF3C72587
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
Signing time: Thu 23 Apr 2026 08:39:23 +0000
ROA not before: Thu 23 Apr 2026 08:34:23 +0000
ROA not after: Thu 22 Apr 2027 08:39:23 +0000
asID: 199186
IP address blocks: 82.26.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 14:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:db:38:39:96:c6:c4:bf:b6:3b:3d:58:0d:32:16:7e:f3:c7:25:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 23 08:34:23 2026 GMT
Not After : Apr 22 08:39:23 2027 GMT
Subject: CN=45F491877D2E33EBFC96B282CF0F57CBF9088DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:e4:eb:c6:19:6e:42:8d:50:fd:d7:7f:cd:
ee:4e:1d:52:30:7d:82:84:d2:7e:3f:c2:76:3a:63:
63:58:e8:87:d8:56:f9:b9:7d:87:46:e8:7c:03:36:
b4:8e:48:02:dc:de:af:e5:24:82:cd:64:c2:13:8a:
d6:43:af:9f:67:70:d7:c5:d4:31:a5:49:3a:24:d8:
0e:ba:96:05:de:be:2f:d7:98:9a:2a:fe:b6:c6:7f:
25:90:3b:3e:5e:1b:9f:92:11:bf:13:9b:cd:b9:b8:
c5:45:97:39:bf:fc:76:1d:b3:93:c9:87:ef:0d:46:
65:1c:11:f5:12:7d:54:54:94:78:71:1f:a8:7e:22:
8d:32:63:83:7d:a5:cc:fc:23:4e:c4:d9:fd:88:be:
9c:8c:55:2e:0a:c8:3e:c5:dc:c7:ef:3b:b7:bf:4a:
0f:c4:f3:77:f4:86:99:cb:bb:ad:c6:2c:eb:77:d6:
bf:00:c7:bb:25:de:aa:95:72:fe:6a:64:fb:03:ba:
59:63:ee:e7:ae:42:ca:05:b3:69:26:fb:8e:c6:64:
49:15:00:00:1e:aa:c1:7e:94:86:78:a7:11:fc:f1:
94:19:b4:ad:8e:f0:14:30:4c:bd:fb:97:b1:6a:9a:
b0:46:7b:a3:72:7a:01:9f:f5:80:56:91:d8:d0:8c:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:91:87:7D:2E:33:EB:FC:96:B2:82:CF:0F:57:CB:F9:08:8D:C6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c9:3b:ec:38:47:f0:67:4c:75:14:25:ad:b5:1e:a9:6f:ec:
24:8d:78:37:99:fa:2a:c0:4f:85:59:f7:ef:9d:c3:9d:35:d3:
63:0d:6d:19:4b:56:4d:8a:86:06:cd:9b:f1:77:8c:e7:b1:04:
27:39:a3:e4:f6:e4:1d:21:19:f4:60:b3:0f:e6:da:ac:1c:6f:
45:b6:a0:35:4a:de:a1:e3:27:84:e0:7d:22:25:25:1f:9b:dd:
be:55:6a:74:ae:2a:24:1a:39:ae:22:7b:f7:b8:77:4c:98:4a:
d0:da:39:1e:da:80:52:bb:69:a6:44:8a:b1:6c:b6:ae:58:64:
26:1a:45:e5:a1:fa:21:06:87:68:05:eb:e5:ae:ce:29:ca:3a:
d9:62:df:6b:9a:d6:af:57:ea:88:03:ee:4b:58:e6:d6:48:8f:
3a:4b:6d:dd:39:e2:a1:77:95:ec:22:82:bb:e5:d4:f0:63:f0:
e7:d3:88:d6:5c:31:1d:61:a8:c9:63:24:18:a8:63:ac:ea:7e:
42:5e:71:a8:ae:f4:20:02:f9:00:8e:c8:64:dd:d9:b3:62:7a:
50:5f:3d:9f:4e:26:54:1f:2b:42:a3:fa:0d:a1:02:91:d8:09:
22:46:84:09:c7:37:24:96:5f:03:7d:24:db:41:d1:ed:b3:30:
c3:36:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 19:12:49 2026 by rpki-client