Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199398.roa
File: AS199398.roa (raw, json)
Hash identifier: ei6w+fGoRs4jclGNG6QBGhFYzY41jBsm98/oAtnhbow=
Subject key identifier: 2E:EC:DF:85:54:F5:78:27:7B:BE:AD:B2:23:77:69:8C:AD:F7:30:09
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55C48C4D6F8A4A24FBE9539B1AC23E19041AF826
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199398.roa
Signing time: Mon 06 Apr 2026 16:44:35 +0000
ROA not before: Mon 06 Apr 2026 16:39:35 +0000
ROA not after: Mon 05 Apr 2027 16:44:35 +0000
asID: 199398
IP address blocks: 146.103.37.0/24 maxlen: 24
147.79.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 21:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c4:8c:4d:6f:8a:4a:24:fb:e9:53:9b:1a:c2:3e:19:04:1a:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 16:39:35 2026 GMT
Not After : Apr 5 16:44:35 2027 GMT
Subject: CN=2EECDF8554F578277BBEADB22377698CADF73009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:39:98:e2:06:72:ab:0c:d1:26:8c:bf:0c:
83:af:52:08:37:67:d1:7d:b9:a2:6d:b4:e0:a0:d6:
52:35:d6:90:96:c1:29:4d:eb:6e:f3:de:bb:73:35:
d0:50:1c:2a:53:ad:ce:14:9e:24:d7:45:fa:76:96:
eb:50:4b:b9:7e:2a:06:69:ef:3a:97:52:c9:38:01:
7e:5f:3c:f7:c7:e9:80:67:e9:d3:4a:59:7d:f1:ff:
4c:e6:51:61:37:f8:d5:a0:e1:53:5c:01:43:2f:14:
81:83:f8:60:72:08:fc:53:62:f7:50:d1:37:bd:a7:
99:82:23:cc:14:99:7c:50:af:09:51:49:f9:f2:94:
0f:5e:bf:4f:9b:90:c2:d3:b8:87:3d:1a:72:58:be:
46:f7:c0:59:e5:5b:81:90:53:47:ed:bb:f5:ab:1e:
94:bb:6a:6d:1b:99:31:58:e4:92:2e:b0:b1:19:2d:
26:f3:0c:be:7b:1e:f1:54:64:c4:b2:97:aa:24:7f:
77:78:2f:cd:af:61:7c:f4:16:fa:1a:18:d3:8a:39:
9c:e2:bd:1d:24:51:d9:6a:ea:dd:9b:0e:06:fd:f8:
26:a4:f7:39:7d:45:cd:cb:97:48:03:83:45:46:08:
85:ea:b3:b8:2d:5a:58:e7:19:08:a6:06:05:fa:4d:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:DF:85:54:F5:78:27:7B:BE:AD:B2:23:77:69:8C:AD:F7:30:09
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.37.0/24
147.79.16.0/24
Signature Algorithm: sha256WithRSAEncryption
53:8f:ad:d4:00:d9:e2:54:00:65:78:11:53:5e:b6:60:45:26:
e5:34:9c:ac:66:67:55:9d:3b:9f:2d:b2:ae:38:9b:8e:9e:c9:
d9:c5:d7:6b:8e:1e:e3:ef:96:8a:6d:84:6b:20:48:2d:45:32:
0a:45:26:c3:26:6a:d4:a6:5d:93:b8:d2:c7:0f:b1:fe:ff:e8:
c8:39:da:eb:09:6d:3c:18:81:fc:cb:a2:6b:48:8c:64:18:f2:
58:98:90:ed:e0:9f:b8:0a:d1:b8:87:d2:cd:75:a1:9c:56:19:
91:c7:b3:de:10:3e:87:7b:37:33:74:53:79:ef:3a:15:2f:09:
89:08:5a:29:cf:61:b6:85:08:02:22:48:1c:11:1f:71:f8:d8:
8e:2b:83:bf:a7:82:0e:47:48:d0:b9:3f:2d:5a:d9:d7:10:fd:
f6:f9:5b:fc:2f:4c:55:4f:a4:bd:78:bf:45:ee:a6:7e:5b:27:
8b:36:47:fa:01:49:c7:d4:c3:30:bd:90:5a:8b:f3:33:30:70:
d6:a7:49:d8:7d:6e:6b:43:c8:21:3a:51:aa:cc:3c:82:b5:56:
6e:32:d5:0f:f3:1a:1c:a1:06:0d:db:dc:a4:72:83:16:53:2a:
0f:f2:86:eb:36:f2:d8:5e:ab:88:55:ba:26:e1:95:11:d9:90:
08:44:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:46:16 2026 by rpki-client