Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199592.roa
File: AS199592.roa (raw, json)
Hash identifier: kv6/QiU9Ts/LXaa9M0ACRSrSpe2yThFxpBVq04wPAkU=
Subject key identifier: 89:07:F0:35:A0:9A:7B:67:81:21:CF:C9:84:86:90:54:79:0D:6B:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5B0DEF4AFF6256868E05881B7D80812BB3207BCD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199592.roa
Signing time: Sun 21 Jun 2026 17:22:56 +0000
ROA not before: Sun 21 Jun 2026 17:17:56 +0000
ROA not after: Sun 20 Jun 2027 17:22:56 +0000
asID: 199592
IP address blocks: 155.117.1.0/24 maxlen: 24
155.117.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0d:ef:4a:ff:62:56:86:8e:05:88:1b:7d:80:81:2b:b3:20:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 21 17:17:56 2026 GMT
Not After : Jun 20 17:22:56 2027 GMT
Subject: CN=8907F035A09A7B678121CFC984869054790D6B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:29:a5:6f:f6:62:cf:8d:f8:36:9a:39:bb:
06:f0:0f:d6:cd:bc:4a:5b:42:53:49:be:ad:6d:63:
70:cd:4e:77:7f:93:18:00:1a:27:9f:98:45:0d:ef:
b8:46:11:81:e9:91:08:a9:58:34:57:96:27:3d:a0:
f8:9a:61:5b:61:5a:e0:3c:a2:f4:88:57:f9:4e:58:
63:2a:eb:45:d9:2c:b8:22:1a:88:7d:8d:87:f8:ce:
8b:b2:8d:41:3b:ef:b9:18:4d:2a:99:73:64:74:c7:
6c:03:32:09:c8:48:b5:4d:bb:d6:cf:76:a2:83:1a:
bc:7c:96:69:5a:b2:6e:56:7a:e9:7c:99:76:13:09:
b6:1c:85:b8:3d:75:2c:81:4d:70:71:7d:3f:da:fd:
18:59:3d:25:af:e5:1a:b6:fb:6f:b8:05:9b:5e:d2:
5d:a0:33:49:ee:99:11:fd:8d:73:69:80:00:cb:f9:
aa:27:c8:05:fb:ba:0d:a1:c4:b3:28:36:4c:70:4d:
5e:fb:f1:ef:a6:8c:05:59:69:2b:17:09:50:f8:de:
0d:52:db:a8:cc:ca:18:52:7e:b6:9e:f4:c2:07:09:
3c:f0:ba:2f:f3:af:09:ca:16:33:66:97:4d:a4:70:
88:32:f0:e1:41:fb:03:5d:b7:50:a4:20:ed:49:9d:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:F0:35:A0:9A:7B:67:81:21:CF:C9:84:86:90:54:79:0D:6B:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.1.0/24
155.117.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:39:72:3f:02:1c:f7:83:cf:23:7b:12:17:2c:ff:27:8b:93:
c9:38:f5:6c:df:3e:1e:c0:cf:a5:4a:6f:ec:7d:f2:87:11:6c:
fc:bf:bf:48:cb:5c:d2:58:fb:58:d8:48:84:6b:fb:46:a2:6a:
4d:4b:51:49:74:b9:85:65:6a:5b:7f:ee:a3:c3:ab:75:ac:f8:
53:17:f8:c9:10:ba:cb:0a:ce:e9:18:af:36:e5:b0:ab:7c:30:
63:5e:34:35:d9:46:15:a4:9d:75:33:f0:81:da:47:0e:38:03:
4c:86:39:8c:33:06:83:ad:93:4e:44:a8:39:05:79:5f:1e:24:
03:f4:0b:82:08:e1:20:4e:68:4a:cc:ca:a4:91:39:33:d3:e0:
05:5a:6a:76:e5:18:40:55:dc:20:1d:52:b9:33:9f:23:4b:53:
b0:14:44:80:6a:b7:df:73:f5:80:d1:5f:72:89:9b:53:5e:ef:
88:f9:61:28:42:bf:ea:b0:2a:d3:00:f1:70:c7:54:c8:60:4f:
fa:a4:08:5a:36:0f:f5:3f:2a:67:25:c6:fa:71:b9:c0:d2:cd:
39:ec:70:8a:9b:ef:b0:e4:25:aa:97:d9:c7:2c:90:cc:34:19:
92:e2:b1:51:c9:4e:df:11:1e:48:c8:10:8d:c4:60:78:0d:ea:
55:34:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:14 2026 by rpki-client