Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197331.roa
File: AS197331.roa (raw, json)
Hash identifier: PF3cp12P+79xQYbT9BoIpAHeMGdRMN4rEdTrNCLTtTw=
Subject key identifier: 4D:F6:BB:9D:85:7D:00:19:1A:23:CC:3A:7F:0B:DE:CC:8E:4C:83:EC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4F0963E795D72410E657474353942FF87CE4F848
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197331.roa
Signing time: Fri 19 Jun 2026 11:53:52 +0000
ROA not before: Fri 19 Jun 2026 11:48:52 +0000
ROA not after: Fri 18 Jun 2027 11:53:52 +0000
asID: 197331
IP address blocks: 143.14.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:09:63:e7:95:d7:24:10:e6:57:47:43:53:94:2f:f8:7c:e4:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 19 11:48:52 2026 GMT
Not After : Jun 18 11:53:52 2027 GMT
Subject: CN=4DF6BB9D857D00191A23CC3A7F0BDECC8E4C83EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:42:98:37:38:4b:25:36:b1:f6:77:97:a1:
15:00:f6:aa:11:f1:2f:f5:94:21:6a:ea:43:8a:b5:
e6:d3:29:62:d7:e6:ba:87:da:28:43:42:d1:d7:b9:
08:51:31:ff:41:13:5c:36:78:d6:5d:16:6f:3f:d6:
12:ee:21:48:7c:f7:41:76:d5:09:96:56:ca:1f:94:
1f:97:c3:6d:dd:c4:d3:6d:15:70:d8:d9:5f:36:c5:
b2:5d:e8:3b:19:35:08:2a:0a:f9:b9:09:3f:fd:0a:
b7:e2:ee:1f:c9:ad:3e:1c:63:09:07:ed:2e:a6:4a:
68:48:31:73:f6:c2:d4:dd:72:2c:1c:f4:04:36:56:
07:9b:0f:75:6b:9f:d4:8f:b1:ac:93:39:62:69:53:
c4:e7:98:ce:cb:ac:6f:6e:ba:2a:fd:8b:3b:2a:df:
42:1a:6a:04:6a:65:b6:1d:59:eb:81:8b:44:ad:8d:
e4:5f:06:50:02:a8:40:5e:f2:ae:f1:03:30:67:fc:
f2:6d:7b:43:e5:4c:12:d8:07:fc:a7:00:6b:ef:cd:
aa:a8:97:49:51:c2:52:02:04:13:c3:d1:96:9c:ac:
f5:15:86:06:ad:4f:3d:5d:d4:ce:48:ca:2c:f7:63:
82:26:99:e1:84:46:cf:2b:87:18:1a:7f:6e:f4:a7:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:BB:9D:85:7D:00:19:1A:23:CC:3A:7F:0B:DE:CC:8E:4C:83:EC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5c:12:94:f9:ef:f9:a1:fd:f5:04:04:58:4e:81:52:90:8e:
71:8f:2b:30:8f:ea:51:d7:08:89:65:ca:8d:c1:e2:0f:61:9e:
34:6c:b8:e7:89:2e:e2:87:2e:ac:ed:f5:3c:ee:25:cb:a0:fc:
5f:04:c1:ce:67:4c:61:8a:2b:ee:ca:ec:a1:38:1f:34:ac:3b:
df:dc:4c:aa:b3:f5:d7:90:ef:a8:b8:e7:6a:0c:a0:64:31:d1:
82:00:6b:36:a9:9f:63:26:55:02:47:89:c3:d2:81:0f:e6:c4:
a2:f6:0e:83:56:47:54:9f:b1:15:2e:56:36:fd:6d:0c:d9:6d:
b9:11:af:6b:88:51:db:94:90:41:c4:f1:0b:39:f9:42:2e:4f:
c5:b8:85:47:58:73:01:38:f9:92:da:c4:63:a0:f0:de:51:a2:
b7:0e:08:4f:62:40:b5:ad:f1:9b:81:e1:9c:93:2e:b4:2c:0a:
23:8e:8e:45:6c:c1:45:c3:39:a4:ae:cc:9a:24:16:1a:35:20:
c4:54:c6:4e:b4:da:66:50:09:6b:67:e3:6c:c3:a0:eb:89:b9:
54:6c:5d:3e:11:c0:97:89:61:b3:c7:a9:57:63:aa:bf:18:04:
b9:be:e2:e5:10:c0:f5:11:a7:33:d8:17:00:11:71:fc:40:8a:
11:8a:db:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTwlj55XXJBDmV0dDU5Qv+Hzk+EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MTkxMTQ4NTJaFw0yNzA2MTgxMTUzNTJaMDMxMTAvBgNV
BAMTKDRERjZCQjlEODU3RDAwMTkxQTIzQ0MzQTdGMEJERUNDOEU0QzgzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPEKYNzhLJTax9neXoRUA9qoR
8S/1lCFq6kOKtebTKWLX5rqH2ihDQtHXuQhRMf9BE1w2eNZdFm8/1hLuIUh890F2
1QmWVsoflB+Xw23dxNNtFXDY2V82xbJd6DsZNQgqCvm5CT/9Crfi7h/JrT4cYwkH
7S6mSmhIMXP2wtTdciwc9AQ2VgebD3Vrn9SPsayTOWJpU8TnmM7LrG9uuir9izsq
30IaagRqZbYdWeuBi0StjeRfBlACqEBe8q7xAzBn/PJte0PlTBLYB/ynAGvvzaqo
l0lRwlICBBPD0ZacrPUVhgatTz1d1M5Iyiz3Y4ImmeGERs8rhxgaf270p+AdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTfa7nYV9ABkaI8w6fwvezI5Mg+wwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk3MzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw61
MA0GCSqGSIb3DQEBCwUAA4IBAQCnXBKU+e/5of31BARYToFSkI5xjyswj+pR1wiJ
ZcqNweIPYZ40bLjniS7ihy6s7fU87iXLoPxfBMHOZ0xhiivuyuyhOB80rDvf3Eyq
s/XXkO+ouOdqDKBkMdGCAGs2qZ9jJlUCR4nD0oEP5sSi9g6DVkdUn7EVLlY2/W0M
2W25Ea9riFHblJBBxPELOflCLk/FuIVHWHMBOPmS2sRjoPDeUaK3DghPYkC1rfGb
geGcky60LAojjo5FbMFFwzmkrsyaJBYaNSDEVMZOtNpmUAlrZ+Nsw6DriblUbF0+
EcCXiWGzx6lXY6q/GAS5vuLlEMD1Eacz2BcAEXH8QIoRitsy
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:13 2026 by rpki-client