Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199614.roa
File: AS199614.roa (raw, json)
Hash identifier: O3bo9GwfKt+m77pEb6m5VzGzmdI+ZsYATQHZDYkM8X8=
Subject key identifier: 85:F7:C0:9A:DA:9C:8C:D9:71:3C:2C:28:06:04:56:4D:0E:1E:F1:E3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6FCAE7C2B281F88CFB2B6CC2EEC66F595E242859
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199614.roa
Signing time: Thu 04 Sep 2025 20:55:00 +0000
ROA not before: Thu 04 Sep 2025 20:50:00 +0000
ROA not after: Thu 03 Sep 2026 20:55:00 +0000
asID: 199614
IP address blocks: 92.113.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ca:e7:c2:b2:81:f8:8c:fb:2b:6c:c2:ee:c6:6f:59:5e:24:28:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 4 20:50:00 2025 GMT
Not After : Sep 3 20:55:00 2026 GMT
Subject: CN=85F7C09ADA9C8CD9713C2C280604564D0E1EF1E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:7c:dd:19:8e:cb:05:ce:70:df:3c:d4:00:
1a:52:86:a7:2f:26:a2:49:7a:9b:00:e7:79:da:c0:
4b:40:13:3e:98:4a:d0:d3:bc:e3:d8:de:2d:a5:f4:
f0:94:80:c8:4f:3b:f0:c8:2e:2a:26:64:91:d5:51:
85:d1:f7:87:1c:d5:9b:c5:b6:72:5f:01:46:94:b3:
b6:49:5c:a1:ae:e2:a1:4c:35:94:79:5f:eb:db:2f:
21:10:23:4a:a7:d3:67:08:4a:c5:d9:c8:88:35:b1:
ad:23:c2:91:5e:cd:a9:04:ac:e1:7a:e4:30:6f:ea:
f0:7d:e6:e4:bb:93:4a:8a:62:50:bc:ec:67:d2:40:
8a:88:09:46:19:62:32:b2:0e:a6:65:d6:37:c3:5d:
68:72:ec:6d:e9:02:84:78:40:0e:14:4a:8c:69:cf:
7c:d3:86:2b:be:48:4e:f7:1c:79:1e:22:3b:b1:45:
77:39:f2:33:ff:ce:e3:e1:11:af:8b:13:5d:53:b1:
8d:b9:04:10:54:7f:4c:98:55:fb:1e:08:36:50:22:
5f:47:30:d8:35:12:04:93:77:22:05:07:10:66:22:
06:26:0f:b7:04:51:7f:74:80:8d:5b:e1:e1:eb:9c:
d1:fb:2d:5a:4a:55:8c:a2:99:a5:46:d5:ea:a9:50:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:C0:9A:DA:9C:8C:D9:71:3C:2C:28:06:04:56:4D:0E:1E:F1:E3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199614.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:82:d3:f7:8e:b2:b4:4f:f4:f7:cf:6f:9b:ad:0f:f5:55:b4:
ac:82:61:69:a5:d3:20:41:db:79:d0:58:95:27:e4:c8:83:2e:
2a:3b:96:55:f9:44:aa:64:ed:a4:bc:e5:17:a8:21:b6:cd:30:
b5:37:0e:39:52:38:17:b8:3f:70:57:f7:38:16:b7:50:11:65:
5d:56:b1:9b:25:e6:9e:a9:ac:c2:3b:66:46:a6:3e:66:8f:51:
a5:42:6b:ba:78:e3:a6:1f:48:2b:ca:e1:a9:ab:81:58:cb:56:
cb:65:93:0b:51:7e:24:89:71:88:38:3f:cb:d1:b3:cf:bb:e8:
79:60:9c:ee:30:ef:5f:94:e3:6c:71:79:62:76:c9:4f:26:0a:
38:c1:d7:50:44:c8:2e:c8:0e:56:d7:2e:fa:5b:02:93:bb:e5:
6c:da:66:d4:09:7c:82:69:85:a8:c2:b3:de:15:64:ee:1f:0e:
bd:0f:58:5f:59:0c:23:37:d9:6d:09:1a:20:4e:4e:e5:6b:d1:
ee:56:12:3d:21:4a:94:25:2a:f0:89:bb:a5:9b:83:33:3d:bc:
28:f1:62:dc:7a:47:aa:75:45:49:1b:6f:0e:a7:1f:be:82:5c:
ad:5a:f9:bf:65:0b:81:2f:61:30:be:d1:15:4a:26:2d:5a:25:
bf:7c:2d:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUb8rnwrKB+Iz7K2zC7sZvWV4kKFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MDQyMDUwMDBaFw0yNjA5MDMyMDU1MDBaMDMxMTAvBgNV
BAMTKDg1RjdDMDlBREE5QzhDRDk3MTNDMkMyODA2MDQ1NjREMEUxRUYxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrA3zdGY7LBc5w3zzUABpShqcv
JqJJepsA53nawEtAEz6YStDTvOPY3i2l9PCUgMhPO/DILiomZJHVUYXR94cc1ZvF
tnJfAUaUs7ZJXKGu4qFMNZR5X+vbLyEQI0qn02cISsXZyIg1sa0jwpFezakErOF6
5DBv6vB95uS7k0qKYlC87GfSQIqICUYZYjKyDqZl1jfDXWhy7G3pAoR4QA4USoxp
z3zThiu+SE73HHkeIjuxRXc58jP/zuPhEa+LE11TsY25BBBUf0yYVfseCDZQIl9H
MNg1EgSTdyIFBxBmIgYmD7cEUX90gI1b4eHrnNH7LVpKVYyimaVG1eqpUM5fAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUhffAmtqcjNlxPCwoBgRWTQ4e8eMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk5NjE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHFc
MA0GCSqGSIb3DQEBCwUAA4IBAQCegtP3jrK0T/T3z2+brQ/1VbSsgmFppdMgQdt5
0FiVJ+TIgy4qO5ZV+USqZO2kvOUXqCG2zTC1Nw45UjgXuD9wV/c4FrdQEWVdVrGb
JeaeqazCO2ZGpj5mj1GlQmu6eOOmH0gryuGpq4FYy1bLZZMLUX4kiXGIOD/L0bPP
u+h5YJzuMO9flONscXlidslPJgo4wddQRMguyA5W1y76WwKTu+Vs2mbUCXyCaYWo
wrPeFWTuHw69D1hfWQwjN9ltCRogTk7la9HuVhI9IUqUJSrwibulm4MzPbwo8WLc
ekeqdUVJG28Opx++glytWvm/ZQuBL2EwvtEVSiYtWiW/fC3q
-----END CERTIFICATE-----
Generated at Sat Sep 6 02:12:28 2025 by rpki-client