Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149606.roa
File: AS149606.roa (raw, json)
Hash identifier: jfJuNADsigHnVXn9Us1FhRTjhKjRT4SJH0UzM11WOhM=
Subject key identifier: 3F:4E:29:95:DB:D4:08:A1:6C:40:11:43:63:D2:83:DF:AA:AA:38:B8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 060B16A0BE03839F5492F7949D30D22DE9F5EC2C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149606.roa
Signing time: Thu 16 Jul 2026 08:28:56 +0000
ROA not before: Thu 16 Jul 2026 08:23:56 +0000
ROA not after: Thu 15 Jul 2027 08:28:56 +0000
asID: 149606
IP address blocks: 168.222.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0b:16:a0:be:03:83:9f:54:92:f7:94:9d:30:d2:2d:e9:f5:ec:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 16 08:23:56 2026 GMT
Not After : Jul 15 08:28:56 2027 GMT
Subject: CN=3F4E2995DBD408A16C40114363D283DFAAAA38B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:3f:05:ce:6a:05:1f:f5:e9:41:b2:23:1c:
38:f8:3a:e5:5c:76:f6:ec:56:c2:7a:dc:bf:95:cd:
c7:16:91:ab:c2:7b:b2:e5:c7:43:70:ce:e8:ed:74:
be:0a:5d:f1:c6:a7:a8:d7:9e:2e:0e:df:96:04:76:
af:a9:ee:f8:e1:5c:42:52:da:8f:5a:fd:8c:d6:11:
79:88:56:90:34:98:9f:88:b1:ab:4d:ff:7f:be:f8:
14:5a:42:0c:c9:fc:be:9d:28:2f:b4:9b:77:00:67:
23:78:aa:c1:28:09:0b:ac:28:c0:00:52:5c:25:79:
ba:a8:1a:88:4c:a3:c3:58:12:04:0a:a8:c9:9a:6e:
2d:a3:61:41:5e:c1:c7:53:20:7b:d2:f8:7e:d3:38:
1d:93:db:15:e1:de:04:c3:38:22:d7:f8:ca:03:13:
19:c9:53:99:5c:86:21:49:e7:0b:d6:df:01:e6:4d:
3d:37:db:d0:08:a2:e6:0f:f0:31:5e:6a:d5:a8:48:
87:f7:93:53:c5:08:c9:89:e3:64:2f:24:90:6c:d1:
df:98:ae:7f:0d:1d:4e:2c:84:ff:50:75:2f:c1:19:
b2:bb:f7:30:e2:12:10:89:d4:5f:f5:fd:0f:ac:ec:
93:2a:4e:65:ba:a8:07:85:34:f7:e8:61:94:26:9e:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:29:95:DB:D4:08:A1:6C:40:11:43:63:D2:83:DF:AA:AA:38:B8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.4.0/24
Signature Algorithm: sha256WithRSAEncryption
12:df:01:38:af:d3:1e:e1:9f:6a:03:15:3b:91:26:59:06:7f:
15:cd:eb:58:b7:d7:7a:cb:de:92:ba:d1:4a:e0:c6:b4:55:be:
97:cd:fc:a2:39:75:3d:ff:e8:09:77:24:c1:09:95:00:99:70:
4c:5d:34:38:e4:47:68:fc:3d:9c:5d:2e:19:a4:33:2e:b2:eb:
44:2b:f8:d8:fb:70:42:b9:c8:2f:cd:90:35:1f:50:d8:00:4e:
c5:89:4b:31:d1:5f:da:f1:34:12:91:74:41:54:76:66:c8:4a:
04:a1:33:9a:d5:0d:f5:42:36:ce:91:c7:d9:f8:7e:d2:f3:11:
7e:69:d0:13:79:a2:9e:3c:e9:68:45:e8:58:16:bd:d4:5d:74:
51:3c:cb:8a:04:47:00:8b:1b:f5:6d:53:f7:fc:33:ad:9a:05:
c9:1a:2f:99:4a:56:e5:58:74:48:9c:c5:21:cc:4e:84:b0:e6:
46:2d:e0:ff:fe:e3:87:e6:ad:06:02:50:ac:91:fc:3a:a8:d3:
c1:f5:69:51:61:a4:2e:d5:9a:ad:1d:67:b5:96:8d:39:4b:39:
53:32:55:71:b1:93:db:c4:cf:1d:fe:63:db:6d:81:de:fc:2a:
33:ef:25:e4:85:25:fd:10:68:f2:39:15:4e:0e:bc:6f:f1:c2:
09:f5:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:30 2026 by rpki-client