Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: h8E1vFrygWX8Liea1C4FvvwRoF0cGIFL7VfFVLlWOpQ=
Subject key identifier: 31:E4:32:CA:61:0C:4B:C3:10:FD:06:9D:6B:48:B6:33:5F:29:DD:9A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1D0EEDE6153AFD7F9462A93CFF4FBA959A274C04
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
Signing time: Thu 16 Jul 2026 06:37:55 +0000
ROA not before: Thu 16 Jul 2026 06:32:55 +0000
ROA not after: Thu 15 Jul 2027 06:37:55 +0000
asID: 199707
IP address blocks: 51.194.191.0/24 maxlen: 24
78.105.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0e:ed:e6:15:3a:fd:7f:94:62:a9:3c:ff:4f:ba:95:9a:27:4c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 16 06:32:55 2026 GMT
Not After : Jul 15 06:37:55 2027 GMT
Subject: CN=31E432CA610C4BC310FD069D6B48B6335F29DD9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:f7:37:c6:08:63:27:43:38:8b:f3:31:8d:
d2:6e:a5:05:a4:af:5d:24:5a:7e:4d:76:e7:b0:7f:
c6:3e:73:09:45:1a:45:e4:69:5f:56:4b:c2:ce:d6:
6e:92:93:a2:09:3c:22:3e:07:4d:87:09:f8:25:ce:
5b:65:bd:4d:f0:d9:89:76:fd:74:d0:af:ae:85:c2:
08:b7:f3:b3:18:5d:58:4e:7f:3f:9b:c3:3a:d0:b8:
27:a7:70:e7:2b:87:6b:d0:1e:87:51:93:34:8e:7b:
d8:7a:af:a7:be:71:50:31:31:db:d6:e6:a7:48:7b:
08:19:02:05:46:15:c8:0f:48:ea:fd:07:cc:3d:84:
84:cb:55:87:95:5b:e4:34:1a:45:20:06:4a:cf:49:
ef:05:96:e3:5f:7f:64:9d:24:68:bb:b8:23:06:58:
0a:c6:72:89:1b:cb:56:2e:31:9b:b1:62:38:ab:52:
8b:80:b8:a2:20:22:10:6f:10:09:ca:80:56:c9:64:
0a:c7:e3:36:7e:31:58:3b:6a:cc:ab:a0:28:78:b8:
c2:04:be:ea:b5:04:58:0a:25:0a:0c:ac:b5:28:6a:
0f:0e:e1:7b:3b:4a:b4:dd:16:ec:5b:e3:73:56:2e:
a7:dd:11:1a:4e:56:03:e2:b5:d4:05:4a:b9:50:46:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:32:CA:61:0C:4B:C3:10:FD:06:9D:6B:48:B6:33:5F:29:DD:9A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.191.0/24
78.105.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:83:1e:a4:ff:4e:c9:2a:31:2d:8d:d6:d1:45:11:ea:2f:a7:
fa:a7:e1:bb:8f:de:70:80:da:9a:64:d0:a4:94:c9:9f:61:b7:
a0:13:7c:fd:f2:15:b6:df:55:98:db:c7:10:b9:eb:07:1f:d2:
c0:e3:35:d7:b8:e3:e1:64:62:52:5d:66:38:52:7d:4e:33:35:
92:76:3e:65:13:cc:61:88:d7:36:56:d5:e7:f5:e8:d1:70:47:
87:7c:65:d0:58:3d:b8:16:02:92:46:e4:ad:f6:a4:1d:0d:3c:
73:a8:fa:67:12:80:a3:97:6f:7f:73:9a:43:5f:b3:43:48:66:
3c:29:d5:da:91:c5:2d:34:b8:b2:a5:54:bc:55:82:f7:d8:a2:
38:ed:d1:c2:bf:d8:98:20:4e:00:12:c7:6b:e2:d8:06:a4:a6:
88:2b:bb:95:60:f2:0d:f6:0b:a7:9b:6a:b1:73:fb:12:d7:08:
9d:d3:62:ff:0a:9e:a0:39:4e:e2:66:e7:18:80:2a:12:ae:92:
8b:ff:cf:b1:b1:19:6d:ca:b7:90:4c:66:3b:5c:28:3a:f4:40:
7e:91:a8:b5:9c:2d:87:11:1e:a3:9c:a1:69:90:52:66:b4:53:
68:13:75:88:47:f8:c0:8a:3a:e0:54:ed:8e:dd:55:4f:e2:f8:
14:b8:41:09
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUHQ7t5hU6/X+UYqk8/0+6lZonTAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MTYwNjMyNTVaFw0yNzA3MTUwNjM3NTVaMDMxMTAvBgNV
BAMTKDMxRTQzMkNBNjEwQzRCQzMxMEZEMDY5RDZCNDhCNjMzNUYyOUREOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEPfc3xghjJ0M4i/MxjdJupQWk
r10kWn5Nduewf8Y+cwlFGkXkaV9WS8LO1m6Sk6IJPCI+B02HCfglzltlvU3w2Yl2
/XTQr66Fwgi387MYXVhOfz+bwzrQuCencOcrh2vQHodRkzSOe9h6r6e+cVAxMdvW
5qdIewgZAgVGFcgPSOr9B8w9hITLVYeVW+Q0GkUgBkrPSe8FluNff2SdJGi7uCMG
WArGcokby1YuMZuxYjirUouAuKIgIhBvEAnKgFbJZArH4zZ+MVg7asyroCh4uMIE
vuq1BFgKJQoMrLUoag8O4Xs7SrTdFuxb43NWLqfdERpOVgPitdQFSrlQRlNRAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUMeQyymEMS8MQ/Qada0i2M18p3ZowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk5NzA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM8K/
AwQATmm1MA0GCSqGSIb3DQEBCwUAA4IBAQCpgx6k/07JKjEtjdbRRRHqL6f6p+G7
j95wgNqaZNCklMmfYbegE3z98hW231WY28cQuesHH9LA4zXXuOPhZGJSXWY4Un1O
MzWSdj5lE8xhiNc2VtXn9ejRcEeHfGXQWD24FgKSRuSt9qQdDTxzqPpnEoCjl29/
c5pDX7NDSGY8KdXakcUtNLiypVS8VYL32KI47dHCv9iYIE4AEsdr4tgGpKaIK7uV
YPIN9gunm2qxc/sS1wid02L/Cp6gOU7iZucYgCoSrpKL/8+xsRltyreQTGY7XCg6
9EB+kai1nC2HER6jnKFpkFJmtFNoE3WIR/jAijrgVO2O3VVP4vgUuEEJ
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:45:03 2026 by rpki-client