Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: lPj9N8x5K8H62NCP4hTi3MRofPW7k+2UAsTjG2DghFE=
Subject key identifier: BA:06:B2:12:17:75:D2:AC:6D:FF:22:CC:09:53:59:32:D9:16:20:AB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 650FE179A3BB183972CD2009EF9D99A8DC48524E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199550.roa
Signing time: Tue 13 Oct 2026 19:02:23 +0000
ROA not before: Tue 13 Oct 2026 18:57:23 +0000
ROA not after: Tue 12 Oct 2027 19:02:23 +0000
asID: 199550
IP address blocks: 45.154.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0f:e1:79:a3:bb:18:39:72:cd:20:09:ef:9d:99:a8:dc:48:52:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 13 18:57:23 2026 GMT
Not After : Oct 12 19:02:23 2027 GMT
Subject: CN=BA06B2121775D2AC6DFF22CC09535932D91620AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:71:f5:66:d4:95:4b:23:f4:d2:6d:63:85:
f9:fd:c7:71:18:37:e6:c7:47:92:ac:c4:7b:63:0e:
f4:84:d0:4c:ac:e7:bd:3e:fd:83:1b:ba:74:eb:2f:
1d:31:99:73:e0:a0:30:56:fc:8a:c4:f3:4f:f4:05:
56:8e:42:dc:9c:ef:f9:80:b5:61:8d:d1:a2:29:c6:
5e:d7:01:e6:b0:cc:4d:e9:58:b4:ed:25:21:0b:27:
2d:59:f6:14:0e:9f:0c:f7:30:10:47:06:ed:e5:50:
32:4e:e6:02:b4:89:6a:ba:63:ce:93:ce:40:88:84:
d5:75:db:92:b0:06:64:d4:8c:a8:d4:00:27:8f:4b:
e6:4d:b0:fc:66:47:c5:08:48:15:e4:5b:1c:bc:dc:
45:44:e3:9f:c9:18:ab:e3:49:c3:b6:6a:bb:d4:38:
80:88:63:01:68:6f:ca:0b:fc:52:f8:29:1e:37:a4:
7c:6f:16:82:01:aa:10:32:b9:5f:3e:5c:bf:f6:5c:
22:7c:00:c1:38:75:86:ff:e7:8e:51:f8:4b:6e:ac:
4a:f1:8c:d5:bc:59:b3:b3:df:ba:9d:9d:c8:61:18:
37:26:4b:25:db:c9:09:df:aa:a0:8a:27:60:36:1d:
69:24:52:6d:2b:3d:02:20:3a:0a:ab:34:40:5d:85:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:B2:12:17:75:D2:AC:6D:FF:22:CC:09:53:59:32:D9:16:20:AB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f9:10:4f:47:ef:e2:25:f8:da:27:12:2b:8e:7b:d0:f3:c2:
4d:24:4e:25:ca:2d:25:5e:45:37:4b:2e:66:bf:7c:ec:c1:33:
71:bf:dd:35:a7:e9:d8:c7:13:6f:8c:c0:87:a1:95:d2:6e:14:
16:ac:86:56:fa:9f:4b:f4:7f:ee:da:6e:e7:7a:c2:ba:be:7d:
25:01:09:bf:a1:f1:e2:fd:86:83:38:43:bd:4a:ae:e9:0c:7a:
c0:ea:cf:12:46:0f:68:6f:7b:a4:b5:ab:e5:27:5f:ec:66:10:
3b:ad:bd:fe:e9:1c:ad:49:e4:78:25:86:24:88:50:54:28:6f:
d4:5c:db:0f:3b:71:3c:4d:07:32:a2:bd:7c:5f:23:ce:3f:d6:
7c:10:e0:b1:d4:38:1b:95:23:46:ed:74:11:6c:fd:72:28:bc:
98:ee:0a:ae:d2:51:98:30:86:0a:78:01:3b:57:b3:71:20:a5:
2d:10:90:15:7a:bf:b8:2c:fb:23:c0:4c:69:f7:44:c8:8d:c9:
11:1b:26:21:05:87:48:a1:69:98:ce:20:93:af:42:92:7d:ed:
7e:a4:66:82:f9:b3:c4:0a:74:e3:ba:24:5e:10:77:b2:0e:c1:
21:66:d8:c2:40:ec:f8:ad:dc:26:48:18:7f:d8:83:cb:22:86:
c5:17:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:31 2026 by rpki-client