Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199415.roa
File: AS199415.roa (raw, json)
Hash identifier: UM7b5eIeBYAYX78Cd4AhKrAvpDox759vmjzRNYtRNs0=
Subject key identifier: 77:AA:4B:90:73:2A:3D:4B:4B:AD:74:6F:2B:1B:A5:E6:7A:5D:EC:39
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 03D3645266049C4F6C9C9735267084F3ADF1F000
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199415.roa
Signing time: Thu 13 Aug 2026 18:56:02 +0000
ROA not before: Thu 13 Aug 2026 18:51:02 +0000
ROA not after: Thu 12 Aug 2027 18:56:02 +0000
asID: 199415
IP address blocks: 82.21.200.0/24 maxlen: 24
82.41.119.0/24 maxlen: 24
2a13:9500:11f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d3:64:52:66:04:9c:4f:6c:9c:97:35:26:70:84:f3:ad:f1:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 13 18:51:02 2026 GMT
Not After : Aug 12 18:56:02 2027 GMT
Subject: CN=77AA4B90732A3D4B4BAD746F2B1BA5E67A5DEC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:60:6a:66:28:f1:f7:dd:5e:4d:0c:52:eb:
88:fe:a0:63:3e:34:99:c5:f6:4c:c3:cb:61:74:97:
e7:2e:ec:b0:3a:fa:c2:4f:8b:ba:6e:6e:b2:96:9d:
aa:a8:97:72:a8:dd:25:81:71:7f:26:00:45:0a:2a:
cb:48:32:7f:08:89:0a:66:69:31:e5:e8:a8:46:1d:
6d:fa:6b:c2:c4:ed:05:d1:6d:e8:7a:ec:cd:b2:73:
7f:9c:8c:76:57:41:be:1b:96:44:5d:cb:90:ba:b2:
dc:86:de:3b:4c:ef:40:e8:72:b6:7b:a2:3e:20:63:
b2:3d:3c:a6:61:99:87:86:85:7f:c7:11:8e:40:99:
c4:5e:8f:79:7a:71:3b:4c:aa:df:af:9e:f7:29:dd:
1e:7e:7f:33:ab:b1:d3:42:67:4b:a7:ad:b5:9c:8a:
13:51:f4:e7:23:57:94:de:fc:18:b6:85:11:ca:a5:
43:2f:8a:77:cd:e8:8f:42:89:a5:e6:95:28:28:29:
fe:ce:34:74:32:b8:30:ac:4e:b9:99:ff:2f:76:65:
51:f7:f2:c3:23:a9:50:3e:f7:8e:0d:39:8c:85:7b:
45:99:82:f6:2e:1c:76:d9:8f:55:09:da:2b:99:b3:
d5:21:1e:c1:02:2c:4b:09:17:af:92:0d:14:5e:24:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AA:4B:90:73:2A:3D:4B:4B:AD:74:6F:2B:1B:A5:E6:7A:5D:EC:39
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.200.0/24
82.41.119.0/24
IPv6:
2a13:9500:11f::/48
Signature Algorithm: sha256WithRSAEncryption
61:06:1b:ff:d9:ba:75:32:b1:d5:e9:04:6a:f4:ab:e9:ea:55:
3e:ee:c7:c1:5e:d9:b0:76:d1:c2:1e:39:a9:31:d9:a4:ca:f6:
a6:74:85:8a:26:5d:12:0c:bf:e9:98:89:0f:e1:b1:b3:c7:ad:
bf:3f:6d:a2:3b:a3:69:60:ce:60:f5:17:1a:01:71:56:2b:ca:
23:98:c0:e9:d3:2d:5a:33:15:d7:fd:77:18:78:f4:09:ae:1d:
c0:2f:a7:bb:9f:b5:49:2a:5a:04:d5:ce:68:d9:d6:2d:75:cd:
8d:c4:c2:e8:71:d7:14:f5:dd:13:79:64:35:e4:3b:23:a7:9e:
de:0a:2c:2e:4f:47:c9:e2:5f:51:57:7c:b8:cd:72:81:d2:be:
d1:47:bb:3c:3c:e8:4e:91:d1:0c:74:a4:66:ae:90:75:ed:3b:
8e:32:aa:5c:2c:7f:0d:1a:9b:69:30:c6:e2:9a:04:c6:9b:7b:
00:8e:9c:b8:23:67:f3:de:1c:32:2b:ba:06:65:23:c4:ab:2f:
ff:ac:75:38:27:a5:ff:ef:a0:88:54:d8:3d:85:6a:92:37:99:
b5:e9:a6:01:94:6f:70:aa:ae:d6:47:fd:b5:48:97:28:20:53:
0b:f5:be:a0:78:ed:38:a8:9a:1c:62:68:d2:c9:76:dd:19:d7:
a5:e6:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:22 2026 by rpki-client