Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199750.roa
File: AS199750.roa (raw, json)
Hash identifier: r3ojaM/xs6u7mp/XR6NfXWd1iXMFy1xvMM54G+KM4YA=
Subject key identifier: F9:1A:D0:C4:73:6B:7E:D7:49:0A:9F:38:25:16:49:C2:DC:89:19:BF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 025F17E5E9333DCFA260DC3306D538BBE454E570
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199750.roa
Signing time: Mon 24 Aug 2026 07:52:00 +0000
ROA not before: Mon 24 Aug 2026 07:47:00 +0000
ROA not after: Mon 23 Aug 2027 07:52:00 +0000
asID: 199750
IP address blocks: 188.220.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5f:17:e5:e9:33:3d:cf:a2:60:dc:33:06:d5:38:bb:e4:54:e5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 07:47:00 2026 GMT
Not After : Aug 23 07:52:00 2027 GMT
Subject: CN=F91AD0C4736B7ED7490A9F38251649C2DC8919BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:d0:fa:17:fe:e4:71:49:bf:bb:a9:3e:5c:
e0:11:b7:c7:72:8a:5a:02:6f:c2:c3:fa:f3:41:06:
47:1c:ce:3b:21:06:4a:56:7a:a3:0f:f1:fe:6a:51:
00:11:02:ed:0c:17:ff:9a:bb:99:f4:06:e6:60:4a:
e1:50:2c:de:1a:32:78:7b:35:ce:d6:04:22:ef:6d:
5b:7e:a3:1e:87:16:a3:24:d4:53:17:95:83:dc:07:
64:89:2e:2d:69:9e:c5:e3:23:2f:61:6e:14:56:79:
7f:e5:86:eb:bc:cc:c0:b5:78:0e:b0:0b:37:e3:e5:
47:36:5d:f8:60:0e:79:77:3b:00:07:78:e6:1a:2b:
18:8c:03:e4:f3:5a:6e:9e:91:b9:63:30:b7:9c:14:
f0:65:95:81:76:a7:6f:57:83:3e:6d:5f:00:15:f6:
76:00:39:5a:09:16:78:9f:a0:82:cc:fc:f7:d8:98:
8a:8e:61:61:68:87:15:81:19:83:5a:0d:34:8c:a2:
14:28:87:b6:c7:9d:ea:e4:59:4f:6b:27:a0:4a:c5:
a2:4b:bc:50:22:c5:b2:30:c3:e8:7d:fe:93:f4:a0:
f2:a2:58:7e:0d:13:9e:e4:89:f2:c7:0c:79:fb:5c:
ae:5d:3e:99:0b:e3:02:75:88:dd:b9:3a:95:07:4d:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:D0:C4:73:6B:7E:D7:49:0A:9F:38:25:16:49:C2:DC:89:19:BF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.35.0/24
Signature Algorithm: sha256WithRSAEncryption
37:47:84:08:a2:68:aa:da:4f:d9:2b:bf:50:dc:4a:29:a5:c2:
59:a4:68:d7:06:95:d1:ce:fb:83:a8:b5:9b:26:c8:0a:f6:ab:
9a:ca:89:04:97:de:d4:b5:cf:cd:0c:dd:15:e0:8a:b3:33:6c:
c0:34:69:0a:d1:ed:a5:e6:20:e7:7f:e2:d3:24:f8:87:6e:f5:
86:29:17:ef:db:a6:78:90:68:48:3b:6d:6c:e2:e4:f6:a8:57:
64:6b:0c:0c:f4:05:4c:c8:a6:61:5e:29:04:41:db:19:48:45:
57:91:e0:cb:19:bf:ec:50:1c:e1:a0:cd:f0:73:6c:29:f8:5f:
cb:09:56:15:11:df:a9:43:1b:e1:39:26:3b:31:44:53:4e:ad:
5c:42:29:36:21:da:9a:d6:1e:a2:45:87:27:c7:35:1a:e4:c2:
ed:2d:5f:e9:f1:7a:d6:8a:31:f2:04:4e:ad:ad:46:bf:f5:ae:
87:fc:8b:a0:92:39:54:51:9e:8a:81:ef:1f:ef:a5:b7:cd:02:
20:37:10:d5:7c:a0:4f:10:44:d5:e8:68:6b:18:03:e8:63:b5:
15:84:c0:e6:99:a8:d1:62:b1:f0:0a:80:32:6a:d1:fc:08:8f:
26:0b:16:b8:95:74:d4:99:d4:cd:57:3d:ed:8f:15:4d:ac:60:
eb:88:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:41 2026 by rpki-client