Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199529.roa
File: AS199529.roa (raw, json)
Hash identifier: /z7iaufH6n6CxGH84oAzMVhAr/utN7qfbG/ovl9AR/c=
Subject key identifier: F8:F5:61:4C:D8:9B:0E:ED:7D:FC:E9:86:CF:0C:0A:EB:FF:3E:74:4E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0EF769438D53998E4FFF04C97D960E091C3566B6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199529.roa
Signing time: Sat 12 Sep 2026 11:14:00 +0000
ROA not before: Sat 12 Sep 2026 11:09:00 +0000
ROA not after: Sat 11 Sep 2027 11:14:00 +0000
asID: 199529
IP address blocks: 188.220.158.0/24 maxlen: 24
188.220.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f7:69:43:8d:53:99:8e:4f:ff:04:c9:7d:96:0e:09:1c:35:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 12 11:09:00 2026 GMT
Not After : Sep 11 11:14:00 2027 GMT
Subject: CN=F8F5614CD89B0EED7DFCE986CF0C0AEBFF3E744E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:30:1e:cf:98:83:00:5f:c5:53:7b:cd:35:
f2:1f:c6:73:b2:13:b6:4d:af:2b:99:15:42:6f:4d:
86:46:0e:bc:00:ba:b8:0c:f9:7b:ef:46:59:d4:75:
e7:76:91:ef:4d:9c:40:83:43:fe:5d:e6:11:34:46:
0f:59:7a:ba:d7:88:62:72:ab:79:b1:aa:d1:6b:c0:
b0:e8:f1:2a:83:4e:2e:e5:11:e5:a8:c7:2f:94:2e:
77:e4:39:e6:86:62:0e:63:76:a8:75:60:36:80:29:
f7:df:97:2e:58:a0:7c:16:35:67:d0:dd:c0:a1:f9:
43:90:0c:2f:b8:5c:c4:5d:e3:3a:52:d1:31:fb:46:
03:df:fb:ca:d9:61:3a:d7:66:87:f9:98:12:0d:49:
d2:7e:54:16:4c:c1:34:cd:dc:6c:e2:25:fc:98:58:
8e:f4:43:92:c0:b7:d4:0f:7c:a8:0f:64:30:6b:e0:
c6:08:38:e4:9c:7e:ee:cc:68:9a:f2:9a:8c:37:be:
02:0d:13:c3:25:79:dc:ad:67:78:70:03:fc:24:b5:
2f:25:be:dc:68:9d:9b:eb:cd:f0:94:4d:28:2d:b9:
1b:5d:37:fc:a1:d0:6a:9e:e8:ba:d2:39:78:be:38:
8c:6b:e9:da:51:f8:20:eb:60:4c:53:76:b0:e7:b4:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:61:4C:D8:9B:0E:ED:7D:FC:E9:86:CF:0C:0A:EB:FF:3E:74:4E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.158.0/23
Signature Algorithm: sha256WithRSAEncryption
37:95:52:26:76:bc:70:4a:1c:39:f4:c6:23:35:05:ae:d1:0e:
4d:5f:d8:10:7f:9f:b5:6f:2d:89:12:ee:e7:02:a0:70:54:60:
0e:16:8a:92:17:44:38:fd:9f:66:30:27:74:a6:fc:8b:1b:b0:
de:cb:cf:e8:1a:63:2d:c9:3e:47:00:0b:b3:18:cc:ea:56:f2:
f4:1b:29:e8:e3:32:bc:fb:e7:f7:d1:c3:7f:bf:d3:4c:a1:ad:
03:53:c3:22:a6:25:88:1d:ea:e9:f6:09:3d:be:6f:09:3c:7a:
ab:be:3e:cb:92:a6:ee:00:fb:4c:10:ff:39:24:b3:82:a2:5a:
45:ec:ba:13:de:24:26:a2:6b:fb:20:b0:f5:18:a6:de:95:d6:
71:f7:14:17:08:9b:1f:e2:5c:2e:c8:40:07:eb:c8:fd:9f:b7:
92:31:92:28:f9:a6:e2:4e:99:c1:59:cb:90:45:ca:9b:ac:84:
62:1d:e3:4f:be:7d:fc:00:08:1e:9f:3e:c8:bd:2b:46:f6:c0:
79:a9:87:3c:1f:0a:63:80:85:d2:75:c8:dd:df:6d:c3:b1:c8:
7a:8c:00:ed:4f:a0:6f:cb:f4:93:28:7d:49:d5:71:00:7f:cb:
85:e6:54:2f:59:68:3d:30:7d:9d:a2:9d:cd:d7:37:83:e7:01:
a4:ed:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:44 2026 by rpki-client