Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
File: AS199760.roa (raw, json)
Hash identifier: Gr3u8cKVTLIJ3pKM2YAKZlwzHybAljIGh0fpBr+4JKQ=
Subject key identifier: 23:17:C0:FA:0F:9A:CF:D2:6D:21:2A:C0:46:35:53:05:9F:C6:C4:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72B91963BB64320A181189572E263BE9A6256364
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
Signing time: Thu 17 Jul 2025 22:21:24 +0000
ROA not before: Thu 17 Jul 2025 22:16:24 +0000
ROA not after: Thu 16 Jul 2026 22:21:24 +0000
asID: 199760
IP address blocks: 148.135.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 07:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b9:19:63:bb:64:32:0a:18:11:89:57:2e:26:3b:e9:a6:25:63:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 22:16:24 2025 GMT
Not After : Jul 16 22:21:24 2026 GMT
Subject: CN=2317C0FA0F9ACFD26D212AC0463553059FC6C4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:f5:8e:c9:77:c2:b3:0f:7e:73:f5:b3:c1:
94:2e:2f:b9:34:76:bf:8e:60:41:da:35:39:1a:fd:
bb:a2:36:76:d8:3b:e8:ec:84:7c:9b:0e:24:a4:63:
81:a5:fb:38:38:99:ea:eb:97:a5:51:a1:4b:a0:94:
67:c5:44:96:05:41:1d:dc:ee:52:f8:e0:ce:e5:cf:
62:29:9b:1b:bf:5f:d6:6c:f5:e1:b1:dc:cf:c5:4a:
43:87:aa:64:2b:ec:3c:83:84:c9:7b:d6:0f:54:ec:
5a:cf:50:d6:87:15:17:b2:0e:f1:2a:51:3d:8c:2c:
57:2a:cd:02:bf:6d:de:bb:e2:35:2c:a5:03:37:55:
f4:6a:ac:58:39:d5:2b:6d:9e:5b:03:74:c9:23:e2:
3c:eb:9a:09:ed:c1:c5:83:cf:07:34:28:72:29:d1:
b2:cc:f3:ae:75:7c:b3:86:5c:92:88:06:6c:26:96:
a3:24:78:90:fd:3f:4a:27:59:6c:18:4c:24:eb:17:
17:c5:d7:56:4a:d9:c2:14:7f:89:26:0e:f8:0b:72:
58:7b:ef:ba:3b:b2:b0:f9:02:09:13:28:a2:b6:db:
ff:ab:dc:d0:f5:7e:81:8e:67:4a:aa:55:8c:f4:f1:
25:1e:bc:10:49:ce:47:25:e3:4f:68:a7:8a:2a:ff:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:C0:FA:0F:9A:CF:D2:6D:21:2A:C0:46:35:53:05:9F:C6:C4:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.192.0/24
Signature Algorithm: sha256WithRSAEncryption
87:60:83:b3:fa:43:7e:d4:05:f9:ff:f1:16:e3:31:4c:b5:8c:
c9:39:a5:9c:8f:7e:00:8e:21:12:6c:85:52:0a:e6:cd:f8:52:
a0:1b:45:23:2a:a7:83:e2:02:af:aa:24:9f:f7:df:ee:eb:6e:
72:a2:27:78:e7:c9:b0:a5:3f:56:09:fe:70:f8:dc:db:fb:12:
d7:7b:3d:12:37:65:7a:fb:80:ca:44:00:fe:2a:4e:64:bb:9e:
c7:59:96:1d:fa:b0:06:0b:c2:f5:a9:41:51:51:4a:70:b0:d3:
9a:c7:2f:5d:8d:0e:8b:18:98:81:c5:07:36:b4:e5:5b:d9:3c:
4f:02:e7:ed:5e:4f:42:6f:50:a9:3a:c2:c5:36:cc:6c:54:63:
b4:5a:a8:22:b0:50:83:1b:8a:30:80:0f:f0:b9:fd:e8:fa:29:
92:1d:00:a5:01:a2:41:d5:7d:cb:b5:72:6c:74:80:fb:94:f9:
32:58:5c:86:8f:b7:ff:6d:cf:87:7f:90:dd:1b:5b:77:86:ad:
2f:64:c5:a1:24:15:25:ba:dd:5f:c2:27:40:3e:6b:ae:e2:be:
6a:85:30:44:e4:70:18:c9:d6:71:ea:e5:14:aa:7c:45:fc:82:
f9:50:c1:28:91:56:62:74:40:75:d7:91:b3:1b:69:59:7e:56:
80:7d:52:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcrkZY7tkMgoYEYlXLiY76aYlY2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MTcyMjE2MjRaFw0yNjA3MTYyMjIxMjRaMDMxMTAvBgNV
BAMTKDIzMTdDMEZBMEY5QUNGRDI2RDIxMkFDMDQ2MzU1MzA1OUZDNkM0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrPWOyXfCsw9+c/WzwZQuL7k0
dr+OYEHaNTka/buiNnbYO+jshHybDiSkY4Gl+zg4merrl6VRoUuglGfFRJYFQR3c
7lL44M7lz2Ipmxu/X9Zs9eGx3M/FSkOHqmQr7DyDhMl71g9U7FrPUNaHFReyDvEq
UT2MLFcqzQK/bd674jUspQM3VfRqrFg51SttnlsDdMkj4jzrmgntwcWDzwc0KHIp
0bLM8651fLOGXJKIBmwmlqMkeJD9P0onWWwYTCTrFxfF11ZK2cIUf4kmDvgLclh7
77o7srD5AgkTKKK22/+r3ND1foGOZ0qqVYz08SUevBBJzkcl409op4oq/309AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUIxfA+g+az9JtISrARjVTBZ/GxOIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5NzYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIfA
MA0GCSqGSIb3DQEBCwUAA4IBAQCHYIOz+kN+1AX5//EW4zFMtYzJOaWcj34AjiES
bIVSCubN+FKgG0UjKqeD4gKvqiSf99/u625yoid458mwpT9WCf5w+Nzb+xLXez0S
N2V6+4DKRAD+Kk5ku57HWZYd+rAGC8L1qUFRUUpwsNOaxy9djQ6LGJiBxQc2tOVb
2TxPAuftXk9Cb1CpOsLFNsxsVGO0WqgisFCDG4owgA/wuf3o+imSHQClAaJB1X3L
tXJsdID7lPkyWFyGj7f/bc+Hf5DdG1t3hq0vZMWhJBUlut1fwidAPmuu4r5qhTBE
5HAYydZx6uUUqnxF/IL5UMEokVZidEB115GzG2lZflaAfVLX
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:42 2025 by rpki-client