Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199186.roa
File: AS199186.roa (raw, json)
Hash identifier: oDua14s8MlAUAtm9Zbrm5UCGqvVbQCIz1ATgUxt/fBk=
Subject key identifier: A7:9F:2D:8D:16:3F:C1:A8:19:01:AC:0C:6E:CA:88:1B:B5:E6:C4:2F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 29B14F3C083A0213CBC5F9DDCF41BB5DF9A784E0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199186.roa
Signing time: Fri 08 May 2026 06:36:52 +0000
ROA not before: Fri 08 May 2026 06:31:52 +0000
ROA not after: Fri 07 May 2027 06:36:52 +0000
asID: 199186
IP address blocks: 95.135.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b1:4f:3c:08:3a:02:13:cb:c5:f9:dd:cf:41:bb:5d:f9:a7:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 8 06:31:52 2026 GMT
Not After : May 7 06:36:52 2027 GMT
Subject: CN=A79F2D8D163FC1A81901AC0C6ECA881BB5E6C42F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:fc:fa:37:89:ec:fb:12:ce:43:e6:5a:84:
a5:23:44:59:b1:08:2a:63:bf:3c:de:76:b9:29:9b:
4a:3a:f0:8a:00:0d:e9:45:f9:fc:28:80:0f:b6:68:
24:1b:41:dc:bf:17:92:00:7e:bc:49:60:d5:6f:21:
dc:fe:be:c7:09:58:9e:2e:72:03:29:1d:ea:86:6a:
18:18:db:e3:3f:c3:0d:93:7a:85:ad:23:20:0f:62:
76:fd:cb:f0:1f:79:04:9b:2f:dd:25:50:bf:75:dd:
dd:1b:d1:0c:ca:4c:b0:d8:cc:23:a1:59:55:81:be:
da:3c:34:88:b7:68:9d:84:6d:48:06:66:6c:66:20:
9c:f5:66:62:da:d9:d5:4f:74:36:01:d1:ca:de:43:
77:e0:a3:4c:56:a2:9f:de:fd:18:bf:9f:13:6c:54:
74:c2:e0:f7:d4:c9:b5:24:4c:72:46:7c:3e:fb:0c:
43:46:fc:8a:62:06:22:04:95:55:3d:73:6b:9e:43:
cb:ec:48:cc:a3:1a:17:3d:75:4b:e0:bf:1d:e6:bb:
55:e6:ec:10:88:57:f9:e7:61:77:2a:97:a1:a0:a1:
23:16:23:5a:80:70:1c:d0:4d:5e:bf:8b:b7:40:dc:
3d:4e:fd:23:1a:a5:33:13:b2:b8:60:38:06:f9:cd:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:2D:8D:16:3F:C1:A8:19:01:AC:0C:6E:CA:88:1B:B5:E6:C4:2F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b7:6e:5b:9d:f6:34:d5:b6:b9:1e:02:98:12:15:52:46:ed:
4a:9d:37:10:fd:90:d5:9d:9f:c5:33:5d:a6:74:3d:5a:0a:87:
4a:46:96:ac:47:65:44:93:12:c1:4e:8b:4f:f2:c8:e8:5a:f9:
88:ab:1e:ee:c2:2e:14:d1:e0:24:f2:72:75:47:ce:8c:ab:b3:
9b:17:cf:39:45:45:ae:b9:05:2a:09:eb:9b:43:54:ff:75:07:
b6:cf:d3:e9:1a:03:fb:2b:b5:3d:f2:a4:79:65:46:c8:4f:87:
59:df:a2:84:ad:de:b9:0c:e1:b5:29:96:65:d0:14:1c:90:0f:
88:f8:84:5d:f3:c2:7a:04:48:25:1e:9c:15:5a:53:2b:f8:e0:
f7:87:46:ef:42:5f:38:5e:ac:5f:64:e3:c1:f4:bb:ec:91:f9:
d3:a6:44:ca:32:44:20:e7:a7:54:32:5b:78:93:ee:84:ac:1e:
ea:61:eb:e7:5c:79:33:28:4e:21:c7:7d:f7:f4:5a:1a:dc:a9:
f5:cf:00:fc:7d:60:54:b2:08:d3:f9:75:16:95:ee:4b:06:24:
4a:ce:16:ce:24:f4:ff:20:74:f3:49:e2:9f:f4:13:2a:97:36:
2a:2e:ca:75:78:d5:ff:69:90:6e:ec:03:34:b5:d6:88:75:02:
f3:a5:d8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 13:57:33 2026 by rpki-client