Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199829.roa
File: AS199829.roa (raw, json)
Hash identifier: lULIqMtJfawvXoP4k+fAsHp9dEt1iDcRdiWg9fYys88=
Subject key identifier: BF:5F:96:54:C3:E5:08:EC:17:2B:CD:F4:96:2C:1E:E5:8C:FF:58:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 377774E2CB3CDDDE1F801004D101338AB00E3F91
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199829.roa
Signing time: Thu 30 Jul 2026 00:01:06 +0000
ROA not before: Wed 29 Jul 2026 23:56:06 +0000
ROA not after: Thu 29 Jul 2027 00:01:06 +0000
asID: 199829
IP address blocks: 2a13:9500:de::/48 maxlen: 48
2a13:9500:129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:77:74:e2:cb:3c:dd:de:1f:80:10:04:d1:01:33:8a:b0:0e:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 23:56:06 2026 GMT
Not After : Jul 29 00:01:06 2027 GMT
Subject: CN=BF5F9654C3E508EC172BCDF4962C1EE58CFF5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:8b:7b:0d:25:ad:cd:85:46:bd:bb:33:ec:
95:15:e0:f4:a1:9a:f9:8f:f1:9a:ff:05:8e:33:ef:
dc:d4:a4:bf:2a:c0:de:04:71:31:3c:f5:5b:a7:81:
55:b6:72:2d:d0:7a:74:d4:72:39:6c:58:ad:58:15:
a3:cb:b2:67:e8:43:63:66:06:30:97:2f:06:8a:6c:
c8:91:ee:86:8e:70:f1:f8:d2:09:33:f4:95:5c:b0:
11:e0:9f:47:38:77:48:a3:ff:85:97:6b:55:11:12:
42:bb:68:bd:a3:69:30:df:aa:a0:5d:fd:80:c1:cb:
90:9c:7b:bf:99:93:80:d6:de:e0:9a:57:bb:b6:54:
c3:91:78:02:b0:93:22:8a:b7:a6:7a:da:df:f9:7d:
f2:b8:9f:6b:ae:4f:2b:8d:70:b6:1b:81:67:45:b8:
8a:b0:e6:33:05:c2:5f:3a:33:d4:d2:b1:92:cd:be:
fe:ee:c2:5c:8c:d8:46:f7:bc:33:31:64:12:23:c2:
90:40:78:e1:58:ed:e1:16:2a:e0:7a:65:51:94:74:
42:c7:33:30:5a:6e:f4:7c:46:51:e6:43:93:fc:19:
f9:68:c2:82:5b:43:e2:da:b1:7b:0f:84:47:85:c2:
93:8a:f8:8e:84:52:48:83:85:0f:b2:0b:cc:ff:58:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:96:54:C3:E5:08:EC:17:2B:CD:F4:96:2C:1E:E5:8C:FF:58:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:de::/48
2a13:9500:129::/48
Signature Algorithm: sha256WithRSAEncryption
5b:22:fd:35:a4:82:8a:70:85:fe:86:c2:76:57:42:32:c1:b5:
c9:53:46:d7:6f:78:cd:09:58:23:92:76:e3:d8:79:e4:fd:ba:
69:34:22:66:03:93:b5:04:e9:13:36:65:d3:74:92:ed:4f:9c:
81:19:4a:18:9e:01:3f:66:05:bb:00:3d:1d:c9:2c:37:0f:83:
27:7c:05:6c:9d:ae:30:36:1d:40:dd:54:19:c8:b2:39:b5:69:
5a:90:3e:51:62:d1:e7:54:ad:ef:80:a4:49:ce:c4:3f:6c:76:
dd:22:ac:00:d2:05:30:55:04:34:27:a7:13:cd:ea:02:22:ed:
9b:ae:da:c6:34:8e:7c:df:89:f8:87:16:f1:19:dd:b0:b6:6a:
22:3a:37:e0:7e:85:4d:34:52:d7:db:d0:ae:09:41:28:5e:2a:
ac:02:97:83:b0:82:5b:11:d4:ce:7d:40:a0:a7:61:21:04:4e:
46:94:98:e4:d2:58:2e:79:c8:ba:48:9b:20:0a:d6:dd:fb:c0:
2f:0a:ae:da:9f:7b:da:2c:fe:a8:0b:00:b5:ef:39:d6:77:6b:
bb:66:23:72:83:58:79:81:e1:e9:7b:f6:a0:5d:6c:3c:97:fa:
dd:d1:e1:97:02:82:f0:9f:67:69:22:bd:71:a3:12:09:dc:35:
0d:bd:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:30 2026 by rpki-client