Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199737.roa
File: AS199737.roa (raw, json)
Hash identifier: DTrsVbBRatG0JS/e1oAlcLXn7pgWl7a+03xTtzu+ri0=
Subject key identifier: 16:2E:BA:FA:E1:09:A0:F1:8E:9A:6F:85:97:22:03:5D:8C:6B:74:95
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7B9C3C4FB523EEB329A284A11A5EF4A2BEB82763
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199737.roa
Signing time: Fri 29 May 2026 17:47:18 +0000
ROA not before: Fri 29 May 2026 17:42:18 +0000
ROA not after: Fri 28 May 2027 17:47:18 +0000
asID: 199737
IP address blocks: 141.11.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9c:3c:4f:b5:23:ee:b3:29:a2:84:a1:1a:5e:f4:a2:be:b8:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 29 17:42:18 2026 GMT
Not After : May 28 17:47:18 2027 GMT
Subject: CN=162EBAFAE109A0F18E9A6F859722035D8C6B7495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:b2:23:b9:9b:f4:60:85:01:35:4d:1e:74:
5f:b9:84:e4:1a:e8:1e:99:6e:21:c3:b4:36:ae:99:
06:b2:18:d1:6c:e0:cb:82:9a:59:47:0d:5f:23:8e:
53:bb:f6:be:9b:74:4a:be:8d:aa:2a:32:16:57:ad:
64:f1:9e:3f:0b:d8:a9:da:ee:0a:46:25:db:74:d9:
bc:cc:3f:cf:2f:e5:cd:3e:9a:dc:09:59:c5:39:d8:
90:7d:09:3b:62:37:14:46:64:c7:7c:ff:ee:c2:4c:
47:df:63:23:38:6c:ae:b0:13:0b:7c:42:64:0d:36:
1d:78:dd:da:89:a8:6b:ae:0c:af:80:27:c2:9d:99:
9b:f8:f8:6d:d5:d1:3d:b9:91:34:a6:6b:ab:f9:02:
1b:38:68:17:f1:c5:8b:07:dd:2f:aa:1e:43:fe:38:
35:72:35:7e:c9:61:4a:b6:16:f3:50:61:04:69:ad:
cc:95:b5:91:d3:0d:ea:49:fd:bc:ca:d2:2a:63:61:
21:8b:d3:43:fd:c6:fc:ce:fd:82:ba:cf:ce:87:58:
59:7c:0e:17:0e:df:78:59:f9:af:b8:78:7a:22:b9:
ef:03:3c:0b:4c:ce:51:f0:34:66:7f:fc:65:48:d7:
b7:07:2d:a1:c0:ef:5c:4a:b5:2f:6e:fe:9f:93:33:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:BA:FA:E1:09:A0:F1:8E:9A:6F:85:97:22:03:5D:8C:6B:74:95
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:84:5c:05:93:95:81:42:4e:41:2f:92:12:1f:a4:13:7b:79:
32:ac:36:79:b7:54:46:82:6f:b4:77:6a:41:55:f8:d8:2d:9f:
7c:16:a8:b3:e4:bd:3c:7f:7f:b3:42:a3:61:9c:db:97:53:54:
fb:94:f6:4e:da:52:ab:f7:12:eb:b5:4a:3b:cc:f7:74:9d:ef:
cf:40:07:44:3b:4b:da:38:76:ef:f1:5f:70:b5:98:6b:53:b2:
e2:c8:c1:cd:22:94:d1:3d:d8:f8:34:d2:c6:ef:35:c7:2e:d9:
5b:ca:fd:7a:3c:1e:b2:e5:12:d6:62:e0:cf:c0:47:51:3f:b2:
d4:31:d2:e4:38:26:d0:81:ff:0d:dc:af:6a:e4:f7:a9:03:dc:
17:32:b5:56:0e:e1:9c:1a:3a:9b:99:82:9c:20:b6:01:3d:d0:
4b:38:61:0a:39:b2:1f:5f:ea:a7:29:96:32:5c:06:ef:f5:22:
7b:b3:84:16:b0:f8:e0:8c:fc:75:8a:53:58:a6:1b:e9:4a:63:
cc:6e:b3:1e:6d:ec:30:95:42:df:7f:db:26:e6:34:5f:73:ec:
5a:51:5a:9f:b0:77:f5:8c:c5:a8:f3:4b:dd:dc:34:5c:4b:4e:
ae:26:31:49:5b:7f:04:d8:08:65:5d:ca:be:dc:25:4d:7e:2e:
0d:a9:36:b5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUe5w8T7Uj7rMpooShGl70or64J2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA1MjkxNzQyMThaFw0yNzA1MjgxNzQ3MThaMDMxMTAvBgNV
BAMTKDE2MkVCQUZBRTEwOUEwRjE4RTlBNkY4NTk3MjIwMzVEOEM2Qjc0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8bIjuZv0YIUBNU0edF+5hOQa
6B6ZbiHDtDaumQayGNFs4MuCmllHDV8jjlO79r6bdEq+jaoqMhZXrWTxnj8L2Kna
7gpGJdt02bzMP88v5c0+mtwJWcU52JB9CTtiNxRGZMd8/+7CTEffYyM4bK6wEwt8
QmQNNh143dqJqGuuDK+AJ8KdmZv4+G3V0T25kTSma6v5Ahs4aBfxxYsH3S+qHkP+
ODVyNX7JYUq2FvNQYQRprcyVtZHTDepJ/bzK0ipjYSGL00P9xvzO/YK6z86HWFl8
DhcO33hZ+a+4eHoiue8DPAtMzlHwNGZ//GVI17cHLaHA71xKtS9u/p+TM5mxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUFi66+uEJoPGOmm+FlyIDXYxrdJUwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTk5NzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvy
MA0GCSqGSIb3DQEBCwUAA4IBAQArhFwFk5WBQk5BL5ISH6QTe3kyrDZ5t1RGgm+0
d2pBVfjYLZ98Fqiz5L08f3+zQqNhnNuXU1T7lPZO2lKr9xLrtUo7zPd0ne/PQAdE
O0vaOHbv8V9wtZhrU7LiyMHNIpTRPdj4NNLG7zXHLtlbyv16PB6y5RLWYuDPwEdR
P7LUMdLkOCbQgf8N3K9q5PepA9wXMrVWDuGcGjqbmYKcILYBPdBLOGEKObIfX+qn
KZYyXAbv9SJ7s4QWsPjgjPx1ilNYphvpSmPMbrMebewwlULff9sm5jRfc+xaUVqf
sHf1jMWo80vd3DRcS06uJjFJW38E2AhlXcq+3CVNfi4NqTa1
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:37 2026 by rpki-client