Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199829.roa
File: AS199829.roa (raw, json)
Hash identifier: ilNQXH9GK729VsSo2qaSrrVxsIp6W9NFSYauEHBBpHU=
Subject key identifier: 6A:AA:82:DE:34:91:F0:23:CF:39:FF:E3:13:72:AD:6E:46:FB:C5:88
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 25F1DD223BBAA2ED8CAE35B2EA97909BF7910FA1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199829.roa
Signing time: Thu 30 Jul 2026 17:54:34 +0000
ROA not before: Thu 30 Jul 2026 17:49:34 +0000
ROA not after: Thu 29 Jul 2027 17:54:34 +0000
asID: 199829
IP address blocks: 193.111.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f1:dd:22:3b:ba:a2:ed:8c:ae:35:b2:ea:97:90:9b:f7:91:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 30 17:49:34 2026 GMT
Not After : Jul 29 17:54:34 2027 GMT
Subject: CN=6AAA82DE3491F023CF39FFE31372AD6E46FBC588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:47:0d:7d:e0:f8:2c:e8:8e:38:1c:98:bb:
f2:d6:34:17:7d:41:fa:1f:c0:30:a2:ec:10:32:60:
46:6a:a1:be:ab:3c:ee:8b:bd:9e:08:d6:34:87:f2:
3d:b5:6f:a2:be:ab:fd:74:b4:66:8e:06:49:f1:42:
84:3d:14:90:e9:72:72:e4:d3:ce:cf:af:2d:8b:23:
b9:97:36:fc:2b:1b:a5:63:1a:0a:0a:61:1e:57:e7:
6f:aa:d3:49:13:f6:64:5a:87:2f:32:b3:b3:be:5e:
4a:5a:53:e6:d6:64:57:69:1a:fe:e0:f9:a3:fa:21:
8a:2f:92:f1:33:a7:b3:ef:2b:33:4e:5f:99:87:75:
be:d2:1b:64:71:82:ba:8a:fe:72:e4:cb:1e:bd:cc:
05:64:1b:12:12:65:c9:cc:b9:b3:ef:1c:23:e8:fd:
2b:b1:63:3c:a6:f1:b9:5e:60:ae:f1:83:38:78:8a:
53:0a:41:b1:f8:7c:82:a9:69:34:2c:b9:7c:f0:76:
1e:c4:27:d7:b7:f5:2d:fb:df:04:1c:77:12:54:91:
0c:d4:27:83:9e:cd:a9:72:de:43:e2:2f:6f:62:0e:
c8:c3:2c:1f:58:38:d2:10:70:6a:a9:f7:a8:f2:bd:
8c:2a:bd:56:4c:0d:12:c7:72:bf:73:fb:c4:e9:39:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:82:DE:34:91:F0:23:CF:39:FF:E3:13:72:AD:6E:46:FB:C5:88
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
Signature Algorithm: sha256WithRSAEncryption
34:83:91:33:6f:6d:46:70:f8:af:98:13:8f:0a:6d:2b:c9:f4:
70:d9:45:32:3c:6f:50:0f:af:e8:56:c1:a7:b2:eb:2e:cc:c3:
7b:41:e7:43:b5:23:ad:c6:93:30:4c:25:17:a8:a0:32:63:d5:
1f:05:42:c9:a5:d0:22:e7:fc:3f:6e:6c:14:48:34:9b:bb:a6:
c3:14:0f:c7:11:29:cc:3a:58:08:89:b0:8b:bd:37:e9:29:1e:
98:59:d9:9d:39:2a:c3:c7:36:3b:7e:00:10:14:47:4d:1a:93:
3b:82:1d:41:50:92:98:5f:77:be:b7:86:c9:80:de:34:16:3f:
f4:98:5d:89:07:3c:3b:27:75:8c:2c:89:98:58:44:ad:38:7a:
44:e6:a0:06:e7:bc:ab:ca:2a:22:2d:0a:d9:d7:47:c1:82:1a:
b0:b5:55:47:ca:f4:4f:1b:91:8b:03:1a:28:dd:ea:6e:1e:44:
12:25:99:e9:2d:8d:3c:e6:04:cb:9c:4a:6e:8c:77:fd:60:96:
8a:00:0f:d9:4d:28:e7:3e:42:1a:b4:c9:22:08:d8:05:85:cf:
03:5e:77:86:f9:ac:ce:67:14:77:00:d7:39:92:9c:07:d6:b6:
1d:f8:48:5e:45:ac:35:21:62:ed:21:92:86:a8:48:a0:8b:7b:
b3:91:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:48:55 2026 by rpki-client