Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197959.roa
File: AS197959.roa (raw, json)
Hash identifier: 8pXiWxW8b1QHHw1sCxZWuBoMdAGIIZjbhWFGnbwN5R4=
Subject key identifier: 2F:DB:6B:F2:5D:D2:A7:25:AC:3C:63:C9:7E:EA:F6:BA:14:FC:AB:26
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1951E4CD343217429BD6B73F5D7968F3E2B13A34
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197959.roa
Signing time: Tue 16 Jun 2026 12:18:22 +0000
ROA not before: Tue 16 Jun 2026 12:13:22 +0000
ROA not after: Tue 15 Jun 2027 12:18:22 +0000
asID: 197959
IP address blocks: 168.222.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:51:e4:cd:34:32:17:42:9b:d6:b7:3f:5d:79:68:f3:e2:b1:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 16 12:13:22 2026 GMT
Not After : Jun 15 12:18:22 2027 GMT
Subject: CN=2FDB6BF25DD2A725AC3C63C97EEAF6BA14FCAB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:f1:91:d5:6c:62:c2:60:b5:3b:de:3e:2b:
4d:72:bf:d7:6e:d1:5d:b2:0b:8d:3f:52:c1:96:b3:
88:64:4c:2d:cb:5f:8a:6b:fc:14:1e:c1:ab:f9:d2:
2f:25:9d:06:66:6d:81:82:59:db:8a:3a:17:8b:13:
ec:6e:b8:ad:8e:1d:29:d2:11:20:c0:4f:f8:99:d9:
68:33:f5:14:ef:c3:81:e7:33:16:89:97:3b:a4:4d:
93:2e:2b:18:b4:25:66:5f:21:7a:09:17:f7:df:66:
1d:3a:1b:97:17:56:b3:3e:b0:ee:d8:66:2f:0c:96:
c5:78:11:32:30:4c:4f:96:0d:74:4e:9c:d3:1d:15:
70:ab:81:9d:91:4d:55:a9:bf:22:95:26:55:0d:84:
a7:b3:31:78:89:5e:d2:bf:b4:06:05:a0:50:cd:27:
a0:d7:b9:8f:55:0c:3b:2e:f5:25:aa:28:22:b9:70:
8b:ed:68:65:66:ac:15:1d:38:3e:1c:61:59:d7:55:
07:79:a0:de:28:c6:b1:da:b0:e7:ad:69:bd:de:08:
2b:11:0f:a6:e7:e7:9c:3b:6b:fd:37:cf:13:d2:fe:
f1:22:c5:fe:a4:49:09:a6:20:70:66:4c:1b:fa:bf:
f9:8c:a1:bc:33:5c:e1:e8:3d:a8:ac:f4:c2:52:1e:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:6B:F2:5D:D2:A7:25:AC:3C:63:C9:7E:EA:F6:BA:14:FC:AB:26
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e0:d6:a0:f3:43:2f:21:1a:d1:fd:38:8c:e4:fb:d1:62:65:
02:4b:cc:f3:32:17:3a:6a:95:3e:b2:43:64:53:38:71:98:7c:
40:fc:48:25:4b:ab:39:1b:47:89:bc:d9:e2:04:c5:5d:f4:2d:
82:80:66:ab:87:d0:94:19:a9:cf:6d:72:28:a8:be:f3:4a:cb:
6c:4c:4d:15:de:de:7d:ff:50:6e:16:5c:bc:21:56:c4:5d:6e:
50:db:32:a6:94:91:62:2d:8e:81:2d:88:25:ca:96:6a:39:4f:
0f:7d:ee:10:1b:07:7a:cd:6a:bf:02:19:d0:07:02:43:70:19:
fa:d3:5e:cc:4b:c0:05:01:55:a5:bf:04:20:99:2e:b5:1d:49:
60:88:ab:08:70:71:34:fa:8b:a8:c6:09:64:d1:2b:ca:ea:bb:
4b:47:66:bb:c5:b4:df:44:5a:cf:be:cf:94:43:d5:d0:e2:06:
60:b4:11:72:8d:7f:ce:08:4c:d1:94:24:b0:ec:cb:a7:f8:c3:
6d:ef:3d:be:cd:9e:55:9d:ce:c7:7f:32:3e:61:3d:d2:a6:ad:
3d:5f:da:ca:b0:22:b5:2c:7c:18:1b:9d:44:60:a1:68:dc:a5:
da:a8:44:80:e3:17:20:a8:18:9b:0e:86:50:bf:ba:f3:99:3a:
f8:58:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:25 2026 by rpki-client