Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199856.roa
File: AS199856.roa (raw, json)
Hash identifier: AZ922UhoOt7GVrrwXKYpoB6mOtdMTqfbc5ok3CZX2wg=
Subject key identifier: E2:F6:16:22:A8:72:5E:9F:96:E5:CE:1C:63:F6:28:4F:8D:68:16:35
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7AE74B09EE5F5D999D6F405CE4FEECD7CCB1F259
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199856.roa
Signing time: Thu 22 Oct 2026 20:50:23 +0000
ROA not before: Thu 22 Oct 2026 20:45:23 +0000
ROA not after: Thu 21 Oct 2027 20:50:23 +0000
asID: 199856
IP address blocks: 78.105.174.0/24 maxlen: 24
78.105.220.0/24 maxlen: 24
188.221.104.0/24 maxlen: 24
188.221.206.0/24 maxlen: 24
188.221.219.0/24 maxlen: 24
188.221.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e7:4b:09:ee:5f:5d:99:9d:6f:40:5c:e4:fe:ec:d7:cc:b1:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 22 20:45:23 2026 GMT
Not After : Oct 21 20:50:23 2027 GMT
Subject: CN=E2F61622A8725E9F96E5CE1C63F6284F8D681635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:8b:2c:75:a4:dc:5f:f1:aa:99:78:34:8f:
7f:e4:f3:ec:fa:a2:13:d7:8b:04:97:d2:5d:24:e9:
c5:8d:2c:13:ef:14:e7:fa:3c:fa:a3:81:98:a9:ea:
46:b3:c2:f0:24:57:e2:a1:44:49:73:2e:79:a3:9d:
4d:fc:37:dd:f4:a4:df:dc:06:85:41:ef:81:50:7c:
ae:a3:d5:d6:f5:42:3c:ae:f9:00:fc:07:e9:0b:9e:
e4:98:0b:95:eb:02:04:fb:76:46:6d:ba:63:9e:a1:
38:e5:10:5e:95:ca:e2:ce:f9:f6:51:3d:58:66:f2:
fc:05:ab:e8:93:87:f9:9e:af:c2:e8:2e:d3:54:62:
b6:0e:84:3b:4e:25:4e:89:08:78:98:b1:25:56:a7:
27:5a:c3:33:70:69:5f:18:4a:32:ce:8f:87:2e:39:
37:55:bc:38:cb:73:c7:c6:09:76:72:33:bd:29:a9:
0d:4a:9f:0b:06:9e:8a:9a:e4:a6:b0:4d:ac:a2:c2:
51:3a:bf:a8:b8:85:d6:9e:05:ea:45:58:0b:e4:a8:
73:12:65:c5:4a:b8:85:67:da:12:e4:c8:ab:db:01:
3b:dc:99:dc:89:ea:fa:c9:92:c8:71:20:85:d9:ef:
f0:5e:16:86:58:c2:d5:f8:64:97:27:86:33:83:89:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:16:22:A8:72:5E:9F:96:E5:CE:1C:63:F6:28:4F:8D:68:16:35
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.174.0/24
78.105.220.0/24
188.221.104.0/24
188.221.206.0/24
188.221.219.0/24
188.221.231.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8a:02:30:29:fb:0d:be:c1:3d:89:ce:70:f4:9c:59:68:d3:
4b:b7:9f:63:ec:98:72:80:c0:d7:1f:67:40:0c:a5:4e:6e:2f:
0d:58:42:21:f5:e0:27:a3:d3:4c:10:25:68:14:e4:e8:2d:ed:
7a:79:ac:31:3f:e7:92:47:eb:b7:81:07:54:67:ef:1d:a0:b7:
36:13:b6:f2:6e:37:64:10:96:fc:fe:5c:eb:84:a2:3c:ae:7e:
73:8f:6f:f0:4a:3c:62:9d:a9:52:66:95:58:1a:42:ec:8a:65:
c4:08:7d:ed:64:d0:f6:c5:fa:6a:82:dd:b7:17:95:c1:3f:ab:
09:74:21:c7:16:35:0d:d6:b0:4c:ee:20:7d:95:3a:59:ec:5c:
56:36:72:62:ec:98:fb:ec:08:d1:59:f4:32:f2:76:30:f1:9d:
70:99:0b:94:8b:ed:7e:e5:ff:10:bd:a4:f7:2b:db:ec:74:3e:
53:f5:00:da:8c:26:c5:27:0c:5d:90:bb:7e:08:5f:fa:38:d4:
67:40:37:b4:bb:36:a8:3a:6e:2d:45:d9:9c:ef:cd:3e:ec:06:
c5:db:85:7b:03:40:24:61:f1:86:ae:b2:80:bb:7a:f7:d3:8e:
32:ef:77:82:6e:70:64:c6:22:59:30:21:ca:f7:58:13:0b:04:
b2:69:25:4a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUeudLCe5fXZmdb0Bc5P7s18yx8lkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMjIyMDQ1MjNaFw0yNzEwMjEyMDUwMjNaMDMxMTAvBgNV
BAMTKEUyRjYxNjIyQTg3MjVFOUY5NkU1Q0UxQzYzRjYyODRGOEQ2ODE2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgYssdaTcX/GqmXg0j3/k8+z6
ohPXiwSX0l0k6cWNLBPvFOf6PPqjgZip6kazwvAkV+KhRElzLnmjnU38N930pN/c
BoVB74FQfK6j1db1Qjyu+QD8B+kLnuSYC5XrAgT7dkZtumOeoTjlEF6VyuLO+fZR
PVhm8vwFq+iTh/mer8LoLtNUYrYOhDtOJU6JCHiYsSVWpydawzNwaV8YSjLOj4cu
OTdVvDjLc8fGCXZyM70pqQ1KnwsGnoqa5KawTayiwlE6v6i4hdaeBepFWAvkqHMS
ZcVKuIVn2hLkyKvbATvcmdyJ6vrJkshxIIXZ7/BeFoZYwtX4ZJcnhjODiQgNAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQU4vYWIqhyXp+W5c4cY/YoT41oFjUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk5ODU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQATmmu
AwQATmncAwQAvN1oAwQAvN3OAwQAvN3bAwQAvN3nMA0GCSqGSIb3DQEBCwUAA4IB
AQCTigIwKfsNvsE9ic5w9JxZaNNLt59j7JhygMDXH2dADKVObi8NWEIh9eAno9NM
ECVoFOToLe16eawxP+eSR+u3gQdUZ+8doLc2E7bybjdkEJb8/lzrhKI8rn5zj2/w
SjxinalSZpVYGkLsimXECH3tZND2xfpqgt23F5XBP6sJdCHHFjUN1rBM7iB9lTpZ
7FxWNnJi7Jj77AjRWfQy8nYw8Z1wmQuUi+1+5f8QvaT3K9vsdD5T9QDajCbFJwxd
kLt+CF/6ONRnQDe0uzaoOm4tRdmc780+7AbF24V7A0AkYfGGrrKAu3r3044y73eC
bnBkxiJZMCHK91gTCwSyaSVK
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:05 2026 by rpki-client