Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199186.roa
File: AS199186.roa (raw, json)
Hash identifier: KAzhyfbUKUyonUYW1lg17vP/Ka4SKDFI5Wj9rgPu0Ko=
Subject key identifier: 1D:5D:D6:C5:8D:25:39:12:FC:45:2C:CE:DA:DE:5F:F9:D7:3B:2C:62
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 71BE46BD170BA1B1A4FC7784F17B35D175B47423
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199186.roa
Signing time: Thu 23 Apr 2026 08:39:19 +0000
ROA not before: Thu 23 Apr 2026 08:34:19 +0000
ROA not after: Thu 22 Apr 2027 08:39:19 +0000
asID: 199186
IP address blocks: 143.20.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 15:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:be:46:bd:17:0b:a1:b1:a4:fc:77:84:f1:7b:35:d1:75:b4:74:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 23 08:34:19 2026 GMT
Not After : Apr 22 08:39:19 2027 GMT
Subject: CN=1D5DD6C58D253912FC452CCEDADE5FF9D73B2C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:f4:2e:04:c4:e7:61:4a:9c:f2:94:df:66:
67:59:ad:74:00:25:c6:4f:32:57:f9:87:d9:38:0d:
cc:b6:c5:68:85:26:7b:30:b2:e2:ea:83:76:de:8c:
f9:30:df:14:09:62:c6:23:9c:df:46:f9:23:70:a2:
20:66:f3:a9:59:ac:d9:75:cb:35:c3:0b:3c:34:f1:
15:96:df:7e:ec:fd:cb:79:62:ce:75:04:98:11:c5:
ed:37:ef:4f:4e:95:55:c3:b8:45:b5:0e:14:5f:c9:
f6:ad:46:2c:6b:6e:33:99:5f:d7:2a:0a:4c:e9:be:
22:4d:0b:66:a4:19:aa:a8:43:c6:23:f1:95:c4:fb:
78:5c:ce:df:0d:8b:b2:4c:fc:6f:2c:d6:fe:81:f8:
40:07:1c:1a:fd:0c:23:8a:c9:ee:49:58:6b:f1:18:
3c:51:f6:45:70:49:93:92:2c:bd:f5:5d:1c:ad:97:
c4:a4:5f:d4:98:67:1c:49:bb:49:c6:57:26:73:f7:
71:38:a7:b7:60:4b:53:25:b8:49:40:b8:66:72:fd:
af:ae:a0:1c:70:14:76:dd:d8:60:5d:5e:61:e8:17:
61:48:c8:53:64:47:75:17:04:d8:63:b5:9c:35:a3:
ff:c4:61:25:16:55:1a:eb:4a:46:58:22:c1:1a:7f:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:D6:C5:8D:25:39:12:FC:45:2C:CE:DA:DE:5F:F9:D7:3B:2C:62
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:3d:4a:5a:89:b5:a0:b9:6a:87:e5:58:9e:5c:c7:5e:13:2f:
67:04:dd:6b:9e:bb:73:26:95:33:9a:a7:aa:e4:9a:33:45:5d:
06:77:20:61:4f:06:f0:16:0a:b6:b4:39:b3:30:4b:1f:ce:21:
3b:b0:c9:c2:9b:23:3e:4c:a6:1c:f4:7c:00:d8:16:5a:24:9f:
a4:45:02:c9:dc:8d:88:30:48:f1:54:09:2d:57:f0:10:86:b2:
06:15:b7:a0:3a:33:fb:45:91:c0:a8:56:ae:bf:a2:7e:67:1e:
6d:98:31:44:db:07:17:ac:02:f4:59:b8:76:fa:51:d2:23:80:
88:51:0d:fe:33:44:42:1e:86:62:99:d9:d8:05:8e:4f:12:60:
cf:65:b5:5a:95:e7:61:5a:a0:5c:35:e3:56:d5:9e:b7:78:6a:
bd:c0:31:28:15:8b:ea:71:9e:91:84:52:dc:e6:a3:2d:71:41:
f6:b8:bd:13:a2:d4:24:80:55:2c:18:5c:d7:75:9e:0d:f4:1f:
26:d5:55:1e:32:90:7d:bb:e7:4b:e1:97:4f:43:03:95:3b:4b:
20:17:a0:63:9e:07:55:48:6e:a6:d1:02:a5:08:aa:62:4a:df:
40:9c:a5:6d:c9:74:69:b0:df:2a:2b:79:80:cb:81:b5:38:21:
a1:05:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 19:12:33 2026 by rpki-client