Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: VPGnR4qtzikqZtJQnnBg0doLzDux7ZDdg1XHRCsp+xM=
Subject key identifier: AF:C3:69:64:10:12:89:B8:FF:C7:F0:E0:6C:0C:7A:26:63:0B:E0:FA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 425AD2A38FC85117905BE8094BA8C1D5D4EA6816
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
Signing time: Tue 01 Sep 2026 00:09:32 +0000
ROA not before: Tue 01 Sep 2026 00:04:32 +0000
ROA not after: Tue 31 Aug 2027 00:09:32 +0000
asID: 199550
IP address blocks: 94.116.0.0/22 maxlen: 24
94.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5a:d2:a3:8f:c8:51:17:90:5b:e8:09:4b:a8:c1:d5:d4:ea:68:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 00:04:32 2026 GMT
Not After : Aug 31 00:09:32 2027 GMT
Subject: CN=AFC36964101289B8FFC7F0E06C0C7A26630BE0FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:ad:56:4f:27:41:10:3d:e4:f9:2b:25:50:
77:f4:62:0f:b1:8e:0a:54:1f:0d:26:b1:5a:03:41:
86:28:b0:83:b9:14:a7:66:5e:1d:3f:62:27:99:9e:
fe:67:0a:d0:3b:ac:02:7a:4d:a8:59:dc:27:a4:ff:
4f:7f:79:dd:82:5d:50:72:53:82:14:f7:5b:b0:d1:
64:49:fc:15:84:d9:eb:e9:46:ef:02:a3:69:f9:a2:
5b:27:e2:c6:6e:16:26:1f:b7:e6:8a:1c:77:9a:0f:
7d:9d:d7:64:43:3c:fd:2e:b8:59:db:2d:9c:6d:35:
d5:40:e1:19:fa:ea:98:5c:ba:93:c6:52:eb:9b:38:
4f:50:29:5a:6f:b2:d2:6f:67:b7:8d:d0:92:73:d8:
44:89:03:c4:a9:63:a4:c1:1b:24:83:b3:78:b2:9a:
c6:ca:56:0f:2f:3a:11:b0:ca:77:91:1f:32:b6:c8:
83:10:97:29:06:32:12:6f:05:8c:64:f8:3b:b5:f7:
ac:f7:72:69:bf:31:a4:bf:30:dd:93:86:0b:64:d4:
92:9c:9e:be:29:6a:47:18:37:35:a2:bb:c1:f9:ef:
59:3a:46:8c:49:d8:e0:c7:9e:29:07:3b:17:31:fd:
73:fd:2e:4f:0a:9d:60:f0:4b:df:83:15:13:74:08:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:69:64:10:12:89:B8:FF:C7:F0:E0:6C:0C:7A:26:63:0B:E0:FA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.0.0/22
94.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a0:91:18:bd:3c:f7:28:44:d6:7a:4c:53:c9:c7:d4:41:3d:
67:bd:b1:8a:a5:ec:eb:5d:57:c9:01:6c:d1:f0:19:13:84:ae:
a5:5c:17:9f:05:24:44:b0:55:1b:bb:12:d5:db:1d:94:88:39:
01:a2:f0:26:23:1a:4c:5a:f1:49:84:83:d9:2c:43:ce:7d:05:
3b:a8:c1:43:96:06:67:d4:56:43:7e:de:d7:74:a9:a1:9c:93:
b2:d8:8e:7e:65:0c:47:d1:c0:5e:0f:98:30:0b:6e:10:58:b0:
81:13:e6:df:85:d8:b9:e8:41:4e:dd:22:8c:41:1b:1d:65:e8:
61:27:87:b5:d8:10:5b:77:f8:fd:90:7b:6a:e3:3f:a6:86:78:
ab:34:83:2b:56:62:fd:25:de:b2:30:ef:a6:4f:1f:e3:44:a4:
8e:6d:d6:11:73:03:36:00:d3:91:f1:f8:22:2a:24:38:56:08:
0a:fe:67:0c:de:ee:b6:37:8f:68:4f:a2:59:dd:c1:18:65:05:
50:25:7d:8a:48:d9:12:12:82:db:df:c9:0f:c9:0d:10:c6:19:
93:0c:ee:71:0c:ab:3d:f6:4c:d4:fd:9c:74:58:b9:65:89:b0:
72:18:1d:83:71:e9:d2:95:fc:14:c3:bf:d9:ba:2c:5e:d1:da:
29:b8:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:08 2026 by rpki-client