Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199735.roa
File: AS199735.roa (raw, json)
Hash identifier: yVlbS/l8uC3iaM/fmP4YDnJG9LJ9taTr6l+q+JMAmYM=
Subject key identifier: DA:BF:7D:F3:D1:E0:23:D7:A4:D2:66:23:BC:83:AC:D8:A6:63:FE:6C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 61C1289C8A2E7DF3CD19DD1A1D858A7DD5AD9056
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199735.roa
Signing time: Sun 21 Jun 2026 14:55:48 +0000
ROA not before: Sun 21 Jun 2026 14:50:48 +0000
ROA not after: Sun 20 Jun 2027 14:55:48 +0000
asID: 199735
IP address blocks: 2a13:9500:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c1:28:9c:8a:2e:7d:f3:cd:19:dd:1a:1d:85:8a:7d:d5:ad:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 21 14:50:48 2026 GMT
Not After : Jun 20 14:55:48 2027 GMT
Subject: CN=DABF7DF3D1E023D7A4D26623BC83ACD8A663FE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:7e:cb:f4:6a:85:1d:68:92:a0:e7:ab:d1:
8e:7b:d0:01:23:68:22:37:0d:92:cd:99:92:43:ac:
33:7e:b3:36:05:81:08:76:a2:a0:63:c7:75:57:b5:
ff:2c:4e:14:91:5b:4e:1b:48:fa:e2:a2:12:e9:9f:
13:64:db:16:a6:fb:b4:85:4b:d8:bf:e9:e5:d1:fd:
4c:94:b1:05:88:6f:37:11:22:ec:2a:0c:20:b5:4b:
aa:cb:38:b5:0c:a6:60:69:1a:5b:04:29:ee:22:cf:
3d:9a:4a:d9:0c:f7:3a:1b:3e:e2:00:24:33:00:dc:
66:b8:19:96:1f:65:cc:25:6f:63:82:a1:6f:47:f8:
82:9c:37:f5:48:83:04:70:1c:88:2f:02:ce:0c:93:
af:44:7f:91:10:74:1c:f4:b1:62:eb:9c:61:fa:f4:
7a:82:b2:58:a9:3d:78:f6:8a:76:cd:fe:3d:55:a4:
67:ff:4e:bf:dc:4b:5c:e6:5a:ce:2d:e2:95:1b:67:
95:1c:1f:c3:5c:43:c4:53:94:7c:90:ed:35:48:ea:
10:c8:af:36:21:8c:bf:14:7d:16:7d:ca:1a:0c:03:
b5:0d:19:ca:b2:37:66:06:ba:67:54:d4:bd:4f:14:
31:6f:53:de:25:be:62:5f:1d:26:e1:2c:b8:ba:2b:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:7D:F3:D1:E0:23:D7:A4:D2:66:23:BC:83:AC:D8:A6:63:FE:6C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:38::/48
Signature Algorithm: sha256WithRSAEncryption
0d:c1:5d:44:e0:e4:63:e4:0c:d4:02:95:12:e9:6d:e5:ab:b1:
9a:35:50:41:1d:23:6a:33:c6:11:52:33:04:9d:c5:19:73:4f:
61:da:f6:c6:e4:dd:ae:43:17:ef:f9:5e:8d:18:0d:6e:ca:52:
50:1b:b9:ce:b6:e8:1a:49:5f:ca:55:5a:1b:4d:13:90:11:22:
42:c2:cd:35:ab:87:33:bf:13:97:3d:9a:f8:28:8e:81:55:29:
aa:33:ee:40:2b:b3:e2:fa:31:f7:1b:49:18:e1:07:1f:99:8c:
b0:6e:14:11:c0:00:a1:37:4e:ff:74:67:0d:6b:6e:a8:28:8f:
16:6b:1a:f0:b9:5d:16:8d:8d:ce:b2:53:5c:58:35:dc:7b:14:
e1:58:5b:1c:29:9f:72:26:30:7d:1b:dd:f2:04:54:29:b2:9b:
d4:14:78:96:c1:23:0d:da:52:1b:39:c5:53:77:77:47:a2:d1:
88:58:5e:f2:5e:c4:97:40:c7:9d:d0:a3:24:00:08:d1:21:5d:
2b:87:33:37:61:dd:be:c3:f2:b8:43:3e:94:32:13:79:cf:ff:
a5:30:34:47:a3:92:34:fc:da:ae:3c:7c:2e:bd:ff:4f:89:cd:
19:59:90:6a:81:44:08:93:9f:b8:08:b5:d4:4d:44:33:85:41:
00:72:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client