Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: DTPNELUNceudmEDDEKuwGknws8SBeNVMaZxaZ3HYuTs=
Subject key identifier: 6B:3C:A0:AF:FB:EF:03:81:37:D1:CF:69:8F:45:EA:DA:15:B8:0F:93
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2CE2A5E0F25FFFC53F5C83A422854525AD70A1C4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
Signing time: Fri 21 Aug 2026 06:11:06 +0000
ROA not before: Fri 21 Aug 2026 06:06:06 +0000
ROA not after: Fri 20 Aug 2027 06:11:06 +0000
asID: 199707
IP address blocks: 78.105.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e2:a5:e0:f2:5f:ff:c5:3f:5c:83:a4:22:85:45:25:ad:70:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 21 06:06:06 2026 GMT
Not After : Aug 20 06:11:06 2027 GMT
Subject: CN=6B3CA0AFFBEF038137D1CF698F45EADA15B80F93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:47:a6:48:46:17:ed:fb:86:eb:d9:c8:fb:
95:47:e1:0c:f1:dc:ee:e4:b5:d3:18:6f:be:18:31:
40:fe:04:9a:c9:53:db:9b:31:06:59:39:5f:3f:10:
e6:e0:81:25:27:6e:65:08:20:b9:40:fa:a2:a5:07:
02:c4:ad:db:e8:f3:37:de:e7:49:c2:ac:87:18:31:
0c:50:c0:56:0e:d7:0d:b3:ba:db:e6:12:d5:e1:d2:
9f:0d:52:b4:1f:70:f6:da:83:d4:0f:78:19:2f:17:
df:f6:9b:bd:cd:de:67:39:c7:91:c2:cc:94:71:f2:
ef:6f:23:9b:55:bd:9c:a3:75:7c:e8:c4:b3:fd:8a:
4d:d5:8c:83:99:2d:37:d9:f3:90:9e:5e:4e:43:4a:
d8:4d:12:c2:ed:ed:10:c0:4a:2e:7e:5a:bc:6f:ca:
83:c8:15:a8:94:98:4a:93:0e:cb:fa:f5:34:96:42:
20:7a:2a:bb:3c:ec:11:a6:f7:46:83:6f:c2:d9:7f:
b1:45:ae:60:a9:ee:e5:5d:87:45:f6:4b:2a:96:b9:
3a:45:f0:0b:b9:8a:ab:1a:bb:9f:7b:80:7a:ff:ee:
bf:ad:9f:43:b8:a3:0d:8d:8b:71:20:44:d2:0a:d8:
0b:88:17:a0:77:c6:86:73:6d:f6:e6:38:dc:3d:51:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3C:A0:AF:FB:EF:03:81:37:D1:CF:69:8F:45:EA:DA:15:B8:0F:93
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:67:a0:7c:b9:fd:cb:41:26:06:15:52:23:ad:10:d5:ef:9b:
dc:d2:32:ef:e9:c3:87:d6:15:9c:9d:2f:81:8c:ef:92:f7:30:
88:91:99:92:11:62:6c:ff:ab:cf:9e:25:c4:ea:38:91:1a:10:
4d:5b:03:e1:8c:ae:51:ae:86:49:42:1f:cc:e4:23:fa:1b:3c:
f9:c5:39:ce:6f:68:24:4b:93:6c:64:34:ee:4e:67:75:fb:14:
90:04:c6:41:96:cf:f4:cc:27:fa:d1:6a:ed:8c:5f:52:ac:a1:
86:b4:31:9f:66:05:7f:97:f9:3d:58:4b:f2:11:b0:4f:97:cb:
a4:24:f6:b3:05:be:d5:c0:82:41:68:aa:38:43:1c:76:d9:0f:
1c:b1:f5:60:5d:9e:82:b5:a0:9c:f5:cf:53:be:ad:13:59:de:
95:39:68:a8:3f:2b:d8:6f:16:a4:1c:3e:2b:ba:41:6f:6f:01:
62:c1:61:7f:7c:70:e6:50:e3:b7:9a:3c:61:4d:c0:05:81:4b:
7f:36:0e:60:bf:fe:f1:df:e8:66:01:08:5a:29:17:4d:67:2e:
5b:b7:26:f1:1d:05:82:6b:0b:a5:12:a6:74:13:4c:98:75:9d:
49:8d:3b:06:9f:a7:91:9e:ab:3e:b4:08:47:b0:b5:7e:11:71:
77:13:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:01 2026 by rpki-client