Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: XnRGkv44RHI5Dgnj6MyUeYuvP/YPSMSe4myZ/6kpm20=
Subject key identifier: 95:B8:C5:98:59:82:7F:6F:C9:82:82:A8:E1:B8:A7:0D:5B:30:A7:4E
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5CB6A71EAF873EDBB25D69E09D9E4314E4D87D83
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS199707.roa
Signing time: Wed 26 Aug 2026 10:57:20 +0000
ROA not before: Wed 26 Aug 2026 10:52:20 +0000
ROA not after: Wed 25 Aug 2027 10:57:20 +0000
asID: 199707
IP address blocks: 186.241.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b6:a7:1e:af:87:3e:db:b2:5d:69:e0:9d:9e:43:14:e4:d8:7d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 26 10:52:20 2026 GMT
Not After : Aug 25 10:57:20 2027 GMT
Subject: CN=95B8C59859827F6FC98282A8E1B8A70D5B30A74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:e9:b6:41:ab:d6:24:2c:a7:b0:f8:2f:24:
a1:f9:95:2b:47:35:e5:35:f6:6d:c8:77:f9:c4:07:
f1:29:40:c6:0a:9b:88:e8:54:0a:37:40:f3:b2:09:
e4:91:ec:d0:e7:c8:66:67:04:aa:fe:93:79:fe:b4:
f9:ef:1a:ab:40:8f:92:17:c9:42:f3:d5:ba:bc:be:
0f:47:b9:7e:02:4e:21:7e:8e:73:c5:41:99:db:39:
23:b1:ad:15:94:dc:64:c4:0e:87:c7:62:af:50:97:
bc:64:b8:11:b7:45:7f:7b:ba:2c:45:14:bc:70:df:
eb:f9:84:f8:2f:94:89:f4:85:13:08:be:ab:d3:c4:
83:77:1c:1b:13:ca:d7:0a:25:a1:bc:b3:6d:4c:9b:
d9:69:b4:8f:7a:77:ce:86:30:d8:aa:35:ee:36:55:
3f:00:ec:7e:a3:08:f2:b5:6f:c2:27:b9:20:61:c6:
3a:b2:01:dd:5b:6e:19:7c:50:dc:03:cc:cb:04:48:
25:36:03:28:d1:79:0f:06:de:f4:b2:ec:ec:07:b6:
ac:f5:ba:89:fe:74:39:76:ef:9c:af:fe:c4:68:4c:
cb:da:8b:4e:d8:37:8a:f3:61:37:1d:c4:35:6e:11:
0c:e8:fc:c5:a7:b0:a9:73:84:bc:5e:9f:e4:af:86:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:C5:98:59:82:7F:6F:C9:82:82:A8:E1:B8:A7:0D:5B:30:A7:4E
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.176.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:0d:94:5a:2b:43:18:1e:4c:08:cd:0b:52:a0:3e:d1:89:
6e:ba:8a:a0:4b:93:4a:70:f6:2d:6f:bc:8c:b8:a5:ed:28:bf:
0d:68:98:9e:fb:b1:6d:3e:f2:af:f0:e7:dd:ef:d3:2e:7c:f8:
47:29:ff:fb:06:a1:65:69:6c:0d:91:bc:2f:c7:e1:8b:ec:2a:
98:39:0f:8b:c3:4a:46:8b:bf:19:e5:9f:3b:4e:1d:33:2f:f8:
50:e5:6e:bb:ad:58:00:26:7e:a3:3a:e9:91:97:b3:b6:2f:b1:
ed:6d:50:81:60:c6:3e:01:25:e3:77:6d:32:18:9c:28:b7:75:
bc:e2:d4:a2:5a:ee:ba:4a:37:eb:0b:48:59:0a:0b:96:c6:cc:
15:a7:e5:82:5b:b0:ad:32:ea:a5:1d:f2:86:22:f5:7d:c1:66:
f8:23:7c:de:25:b2:f1:6b:51:e2:12:c7:af:c8:a9:7c:60:80:
76:2a:2d:9d:1b:59:dc:9f:6e:65:f0:cd:95:e3:03:6b:04:fc:
1b:a0:76:56:1f:61:76:f3:97:68:6f:77:9d:f0:91:b4:ab:9f:
fc:1a:f9:e2:5d:b0:e9:9f:e8:a5:8c:34:75:72:ee:2d:05:7f:
55:44:24:90:79:71:00:8c:3a:93:0b:ab:cb:5c:31:d7:9e:d2:
e5:c9:2d:96
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXLanHq+HPtuyXWngnZ5DFOTYfYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA4MjYxMDUyMjBaFw0yNzA4MjUxMDU3MjBaMDMxMTAvBgNV
BAMTKDk1QjhDNTk4NTk4MjdGNkZDOTgyODJBOEUxQjhBNzBENUIzMEE3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaw+m2QavWJCynsPgvJKH5lStH
NeU19m3Id/nEB/EpQMYKm4joVAo3QPOyCeSR7NDnyGZnBKr+k3n+tPnvGqtAj5IX
yULz1bq8vg9HuX4CTiF+jnPFQZnbOSOxrRWU3GTEDofHYq9Ql7xkuBG3RX97uixF
FLxw3+v5hPgvlIn0hRMIvqvTxIN3HBsTytcKJaG8s21Mm9lptI96d86GMNiqNe42
VT8A7H6jCPK1b8InuSBhxjqyAd1bbhl8UNwDzMsESCU2AyjReQ8G3vSy7OwHtqz1
uon+dDl275yv/sRoTMvai07YN4rzYTcdxDVuEQzo/MWnsKlzhLxen+Svhsc5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUlbjFmFmCf2/JgoKo4binDVswp04wHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTMTk5NzA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuvGw
MA0GCSqGSIb3DQEBCwUAA4IBAQBieg2UWitDGB5MCM0LUqA+0YluuoqgS5NKcPYt
b7yMuKXtKL8NaJie+7FtPvKv8Ofd79MufPhHKf/7BqFlaWwNkbwvx+GL7CqYOQ+L
w0pGi78Z5Z87Th0zL/hQ5W67rVgAJn6jOumRl7O2L7HtbVCBYMY+ASXjd20yGJwo
t3W84tSiWu66SjfrC0hZCguWxswVp+WCW7CtMuqlHfKGIvV9wWb4I3zeJbLxa1Hi
EsevyKl8YIB2Ki2dG1ncn25l8M2V4wNrBPwboHZWH2F285dob3ed8JG0q5/8Gvni
XbDpn+iljDR1cu4tBX9VRCSQeXEAjDqTC6vLXDHXntLlyS2W
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:11 2026 by rpki-client