Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199856.roa
File: AS199856.roa (raw, json)
Hash identifier: zgQZNS3fNE8blEOFw2Hk0LEwFcqPEpFOMLrcmxISl94=
Subject key identifier: BE:62:22:74:00:FE:FC:4A:80:83:91:AF:96:8B:69:DF:19:7E:0F:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 367E57D6952351CDFA1734E8347BF9EC317DDAB8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199856.roa
Signing time: Fri 18 Jul 2025 08:33:37 +0000
ROA not before: Fri 18 Jul 2025 08:28:37 +0000
ROA not after: Fri 17 Jul 2026 08:33:37 +0000
asID: 199856
IP address blocks: 150.241.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7e:57:d6:95:23:51:cd:fa:17:34:e8:34:7b:f9:ec:31:7d:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 18 08:28:37 2025 GMT
Not After : Jul 17 08:33:37 2026 GMT
Subject: CN=BE62227400FEFC4A808391AF968B69DF197E0F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:55:44:16:52:2c:8d:cb:a1:62:5b:63:f0:
bb:42:9a:44:44:04:24:8e:f5:11:13:de:2a:62:82:
45:06:b2:01:f5:46:05:f1:fa:5f:d7:fa:20:1e:5c:
7f:a0:91:61:bc:d6:1f:fe:23:65:1d:95:b8:f0:d4:
75:23:3f:c4:8d:4c:f2:36:fe:19:87:04:2d:75:91:
01:0d:ca:df:b8:5b:bf:37:56:67:1b:03:e3:ec:db:
90:8d:b1:42:25:36:36:96:e5:c7:7c:79:ef:cf:a1:
fe:ff:4e:80:7c:ce:dd:ac:bc:42:2b:2f:37:3f:f7:
1c:52:36:ff:5f:54:96:8f:22:d0:47:a1:65:6a:b8:
a0:6f:3b:b3:50:5b:08:04:78:05:0c:94:ec:2a:78:
1b:ef:d7:6f:f4:0a:3c:14:8b:b3:e2:0a:62:8e:f2:
c7:8e:49:bd:89:df:b8:d5:c4:7d:94:db:87:02:bc:
6d:34:ba:df:40:c9:c1:b9:39:93:45:43:42:3c:d1:
5f:a6:d1:b6:18:b3:1b:3b:47:00:f4:1e:8c:49:da:
f5:12:a0:3e:85:b1:4f:01:c9:91:fa:69:25:0a:9b:
3a:b1:76:e1:ac:9e:e5:da:5b:7e:5d:d1:ed:e2:df:
ab:0b:5a:5e:1d:45:a3:4b:e4:12:2e:96:4c:2f:fd:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:22:74:00:FE:FC:4A:80:83:91:AF:96:8B:69:DF:19:7E:0F:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.236.0/24
Signature Algorithm: sha256WithRSAEncryption
28:53:e0:86:8e:3b:ca:b6:67:5f:f5:a8:f3:a5:64:c8:60:9b:
ad:2d:b2:c4:8f:60:92:e7:53:ec:fe:ed:cb:3d:db:47:55:8d:
2c:48:d4:a8:3d:4e:b1:b5:35:28:48:7e:17:5d:b6:02:a0:f0:
b4:11:96:82:69:4b:fa:6f:57:c2:5d:1e:73:34:00:ee:f9:85:
7c:99:58:fa:91:b7:92:1d:96:52:d1:08:3e:3c:1b:a2:1b:83:
5a:0b:3d:e1:11:0f:61:c7:fb:56:bc:01:e2:32:14:e4:53:d3:
a8:5a:44:0a:b0:65:f4:fc:7c:9c:a8:5d:37:d6:df:60:e2:82:
af:5a:dc:f7:7b:7c:67:8d:4a:c8:7f:66:40:b9:b1:52:b1:53:
e9:81:85:54:be:e8:74:78:1e:b2:60:7f:49:60:15:10:bf:fc:
92:f1:cb:ba:6b:0e:27:14:9d:2c:ba:89:a2:6d:c2:a8:e6:78:
8d:e9:2a:0c:2e:ce:25:ac:d8:e1:a9:64:63:59:05:1c:90:ed:
54:ae:98:82:13:84:ef:e3:ec:4a:c8:71:af:5d:a9:a3:44:e4:
e6:85:36:5b:39:24:b6:35:3e:be:17:8a:df:88:24:27:41:9e:
6b:a7:3e:ce:82:7c:29:a6:36:76:17:05:57:c2:78:0e:0d:cd:
69:d9:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:19:33 2025 by rpki-client