Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: 3KXW8NT4lYOjutOsLcT+/9vI9Rt3I16Gq4MT+/bgvyU=
Subject key identifier: 3C:D9:28:77:36:62:D7:C6:C8:41:83:9D:90:3A:E8:84:B6:D7:F3:07
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0865DBD3D2CE13318A8F921451DD7B21CF568FE7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199550.roa
Signing time: Mon 22 Jun 2026 10:07:50 +0000
ROA not before: Mon 22 Jun 2026 10:02:50 +0000
ROA not after: Mon 21 Jun 2027 10:07:50 +0000
asID: 199550
IP address blocks: 140.233.163.0/24 maxlen: 24
162.141.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:65:db:d3:d2:ce:13:31:8a:8f:92:14:51:dd:7b:21:cf:56:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 10:02:50 2026 GMT
Not After : Jun 21 10:07:50 2027 GMT
Subject: CN=3CD928773662D7C6C841839D903AE884B6D7F307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:da:47:27:d7:a1:a1:a6:ce:55:d6:e8:ae:
96:c9:bb:15:82:de:0b:47:1b:89:9b:10:2b:ae:c9:
d7:c5:4f:73:5a:ee:41:32:9f:bb:4d:38:14:d6:57:
94:5c:fd:8f:90:59:e0:0d:3b:37:be:da:a6:6d:fe:
d3:b4:97:52:81:d2:2e:b6:18:bf:c3:21:1d:2c:84:
6d:26:fa:8b:fc:5d:55:f4:4a:73:12:d5:b3:f3:8e:
45:be:6e:b1:2e:d9:e8:a5:30:77:70:68:71:84:bd:
f0:75:4d:ff:d7:7c:11:15:5a:41:39:34:2a:5e:63:
c0:17:6b:a5:2f:9e:1f:82:c4:85:7b:68:16:8f:c0:
7f:0d:bf:2f:9e:0b:14:54:ae:a5:75:be:e1:50:43:
28:1b:d0:20:a6:35:d0:63:be:c1:c8:58:3d:8a:67:
70:03:b8:c1:14:c3:53:47:1e:09:0d:6c:1f:3d:2f:
fd:47:88:e4:c9:80:79:3e:f7:40:da:7e:30:b1:08:
13:12:86:e5:ef:fa:00:14:95:88:d2:f9:54:80:65:
a4:07:b5:24:c0:12:83:c0:02:12:50:74:9b:99:63:
ee:5c:85:c7:19:2d:64:38:66:01:3d:0a:f8:61:f5:
28:92:1c:be:33:04:d6:af:21:2a:f1:19:bc:e7:fc:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:28:77:36:62:D7:C6:C8:41:83:9D:90:3A:E8:84:B6:D7:F3:07
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.163.0/24
162.141.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:77:bc:27:f9:4f:ee:60:2c:ca:b9:05:ef:ee:41:b1:15:e4:
2a:55:fb:26:92:40:43:6c:d5:5e:37:15:52:ad:0f:74:6e:23:
c3:d2:ef:65:48:0a:85:a5:65:cb:68:6b:4f:63:66:70:80:4b:
68:2f:8f:f5:a6:ed:21:c2:d8:54:59:c6:2d:5f:76:97:a3:2e:
26:6e:ec:f8:1f:f4:3b:7f:bf:ab:f1:ce:69:c9:77:dd:2e:d7:
9f:2d:e7:f7:64:09:d5:39:d6:8b:3b:a4:6e:7a:a6:05:78:0a:
76:2e:15:44:05:2a:c8:7f:68:e5:74:1c:f5:7b:44:29:4b:05:
a8:95:64:11:24:d2:73:8f:90:15:38:60:4d:ee:bf:21:e9:f2:
fe:00:9e:ff:6b:ae:9a:db:70:9e:24:c6:0f:77:cc:f9:e0:62:
23:9d:d2:6e:6b:11:35:40:23:01:5c:24:d1:5f:f0:8a:5b:ee:
40:56:3d:bd:11:d1:38:52:77:b8:32:3f:b1:d6:ee:c6:33:ba:
1d:de:85:e7:11:99:a9:14:15:f4:87:b1:97:e1:7f:12:7d:03:
76:32:0e:3b:21:f6:be:d1:6a:75:ba:4e:5d:11:6b:f9:79:31:
98:ea:62:90:41:e0:9a:60:95:14:f6:e1:4e:62:fe:2a:d6:60:
7f:d7:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:30 2026 by rpki-client