Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa
File: AS199524.roa (raw, json)
Hash identifier: L4QbAG3sqDFqyqSQ6BxdbAF8nvzohz8abT4/whp614U=
Subject key identifier: 6D:7B:18:3D:D9:2A:92:4F:8D:47:7A:36:8C:99:F8:25:BF:67:16:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 10C6C4AD28DC19F2A9130984CDDEFA0B89620781
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa
Signing time: Fri 31 Jul 2026 00:01:06 +0000
ROA not before: Thu 30 Jul 2026 23:56:06 +0000
ROA not after: Fri 30 Jul 2027 00:01:06 +0000
asID: 199524
IP address blocks: 82.25.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c6:c4:ad:28:dc:19:f2:a9:13:09:84:cd:de:fa:0b:89:62:07:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 30 23:56:06 2026 GMT
Not After : Jul 30 00:01:06 2027 GMT
Subject: CN=6D7B183DD92A924F8D477A368C99F825BF671612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:3d:cb:b7:4b:e3:59:8b:0f:c7:c5:9c:50:
0d:14:5f:68:1b:0d:8b:1e:2b:90:af:bb:28:63:0b:
a6:2e:fa:22:91:0b:30:14:46:95:f3:6a:0f:60:6b:
e9:0d:df:69:45:8a:e3:64:a0:ad:57:30:94:f3:db:
97:2a:97:b3:5d:86:b9:e0:06:2b:91:70:0d:56:3b:
32:fa:74:33:45:6e:94:07:7e:8f:6b:5a:80:3c:fd:
7a:22:a0:c6:a4:4b:5d:92:e6:dc:2a:d7:62:15:38:
ce:8f:4d:bd:e7:8c:22:53:ca:98:66:a2:bb:bf:ea:
5c:3a:a5:d9:a9:b2:53:ba:57:b4:9f:f1:81:b2:15:
c8:a2:9e:34:96:1b:28:28:7c:da:bb:2f:0e:23:1a:
35:31:30:3b:24:4d:e3:8b:90:da:34:96:3f:52:9b:
f0:34:f4:4e:d8:1d:21:19:1c:5d:b7:90:15:68:f7:
6f:b9:19:fa:11:93:c3:55:f2:94:8a:0a:ef:10:94:
88:13:0b:c0:07:fe:c7:7a:ce:ad:ad:52:0a:5c:0a:
0c:39:c9:5d:7b:03:8d:1e:77:9e:ab:01:49:8c:db:
b3:d2:b0:8e:35:98:b6:46:c7:b1:04:31:80:ee:05:
fa:1a:28:16:c6:03:58:68:0e:f0:c8:d8:df:81:59:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7B:18:3D:D9:2A:92:4F:8D:47:7A:36:8C:99:F8:25:BF:67:16:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f8:8e:18:43:3a:39:c9:a1:7b:4f:2b:80:cf:63:1c:36:5a:
51:c7:82:1a:82:0d:7d:de:c0:1d:00:a5:fd:ae:de:ed:a5:31:
fe:24:59:3f:c1:46:bb:94:8b:f5:45:90:9d:1d:b2:8f:0a:b5:
96:8e:1c:39:10:66:45:d2:f5:d2:38:43:5e:d4:4b:31:1f:bf:
2f:2e:07:f5:3b:91:97:d9:e3:64:ce:3f:b5:d3:52:e3:7f:06:
b0:c6:ac:b3:71:6f:25:c7:9b:13:66:38:fe:d0:25:53:fd:d1:
6d:a4:92:e2:de:4a:92:68:47:f4:35:33:82:87:c3:69:f5:73:
a5:f1:6b:24:23:77:ff:02:ce:fb:d6:7d:0e:c3:b2:20:3f:48:
af:2b:c2:98:ba:17:a8:1f:4c:f8:43:26:52:0c:e8:fe:f6:dd:
a0:7d:a1:5e:b6:10:8b:8c:32:70:79:e8:72:1f:a2:5b:23:e8:
46:9d:51:56:4b:bd:13:2d:ef:f2:84:11:51:13:97:b3:8c:fb:
e4:4a:0d:bf:19:68:09:0f:7b:30:2e:74:cb:83:1c:cb:9d:e6:
c4:9e:9c:d4:c3:f3:29:bd:56:97:15:bb:78:e9:68:0b:87:df:
30:be:ec:74:7c:f7:c6:a6:bc:64:d8:ed:38:52:d7:af:81:52:
66:a8:3b:fd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUEMbErSjcGfKpEwmEzd76C4liB4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MzAyMzU2MDZaFw0yNzA3MzAwMDAxMDZaMDMxMTAvBgNV
BAMTKDZEN0IxODNERDkyQTkyNEY4RDQ3N0EzNjhDOTlGODI1QkY2NzE2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthz3Lt0vjWYsPx8WcUA0UX2gb
DYseK5CvuyhjC6Yu+iKRCzAURpXzag9ga+kN32lFiuNkoK1XMJTz25cql7Ndhrng
BiuRcA1WOzL6dDNFbpQHfo9rWoA8/XoioMakS12S5twq12IVOM6PTb3njCJTyphm
oru/6lw6pdmpslO6V7Sf8YGyFciinjSWGygofNq7Lw4jGjUxMDskTeOLkNo0lj9S
m/A09E7YHSEZHF23kBVo92+5GfoRk8NV8pSKCu8QlIgTC8AH/sd6zq2tUgpcCgw5
yV17A40ed56rAUmM27PSsI41mLZGx7EEMYDuBfoaKBbGA1hoDvDI2N+BWSWpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUbXsYPdkqkk+NR3o2jJn4Jb9nFhIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5NTI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhkk
MA0GCSqGSIb3DQEBCwUAA4IBAQBb+I4YQzo5yaF7TyuAz2McNlpRx4Iagg193sAd
AKX9rt7tpTH+JFk/wUa7lIv1RZCdHbKPCrWWjhw5EGZF0vXSOENe1EsxH78vLgf1
O5GX2eNkzj+101LjfwawxqyzcW8lx5sTZjj+0CVT/dFtpJLi3kqSaEf0NTOCh8Np
9XOl8WskI3f/As771n0Ow7IgP0ivK8KYuheoH0z4QyZSDOj+9t2gfaFethCLjDJw
eehyH6JbI+hGnVFWS70TLe/yhBFRE5ezjPvkSg2/GWgJD3swLnTLgxzLnebEnpzU
w/MpvVaXFbt46WgLh98wvux0fPfGprxk2O04UtevgVJmqDv9
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:39 2026 by rpki-client