Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199524.roa
File: AS199524.roa (raw, json)
Hash identifier: LlvYtafd98usr7FoPtMIOmAT0JgxK4PdToyJxDXTdBc=
Subject key identifier: FF:FF:FF:B2:1F:3C:CA:33:6F:8B:C7:2B:D7:F0:A0:21:FA:2F:36:CD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0FDDCF9C1BC901C74B0A53E1AB720D837F9377B7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199524.roa
Signing time: Mon 03 Aug 2026 13:59:50 +0000
ROA not before: Mon 03 Aug 2026 13:54:50 +0000
ROA not after: Mon 02 Aug 2027 13:59:50 +0000
asID: 199524
IP address blocks: 96.62.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:dd:cf:9c:1b:c9:01:c7:4b:0a:53:e1:ab:72:0d:83:7f:93:77:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 13:54:50 2026 GMT
Not After : Aug 2 13:59:50 2027 GMT
Subject: CN=FFFFFFB21F3CCA336F8BC72BD7F0A021FA2F36CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:61:b6:e4:cf:fa:3e:ba:d0:fe:c1:ff:ed:
53:a5:31:ef:e1:15:5c:c9:3e:2c:c3:19:09:76:ce:
df:be:6b:02:81:90:02:70:da:f0:ce:27:b0:6b:d2:
1d:30:8d:f7:a8:87:74:5f:02:85:40:c8:18:f7:44:
55:f0:96:5f:ca:9e:61:66:a0:00:1d:64:99:65:63:
6f:b4:a9:9d:08:7a:60:bc:76:78:5b:1a:1a:37:4e:
f5:26:97:da:f5:11:fc:58:52:a4:08:2d:68:3d:96:
92:19:f7:f6:de:f4:91:d8:89:d2:96:b5:15:b4:7d:
3a:43:47:d3:06:0c:30:9c:a5:42:67:db:19:c7:a6:
bb:62:42:c5:f2:49:11:cf:59:87:c2:f1:b9:56:aa:
59:58:18:e1:7c:f0:b6:ac:2f:c0:4d:dd:9f:4c:77:
d4:dc:50:ee:61:19:0b:0f:2c:2b:b6:7d:06:da:67:
a6:16:e3:8c:76:ef:63:1a:19:f8:52:c1:ae:f2:a8:
aa:08:f0:3d:33:1c:d5:36:81:70:c4:01:6c:f3:d4:
54:1f:c7:86:0b:b2:07:32:65:d0:40:b4:82:d9:ba:
17:e1:e8:5f:31:a2:44:4f:69:44:03:fa:d6:08:e2:
0b:2d:b4:38:87:c8:b1:55:11:91:bc:45:69:1d:e2:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:FF:B2:1F:3C:CA:33:6F:8B:C7:2B:D7:F0:A0:21:FA:2F:36:CD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:36:a0:2d:37:5a:b6:7f:86:46:0f:28:41:e2:39:68:35:bb:
85:c9:67:9e:e1:60:81:b5:8c:17:99:f1:7f:a2:2e:63:f9:18:
17:c3:d2:d6:e6:f7:44:57:85:7b:d7:72:d3:7c:2e:1f:9f:f8:
61:06:ed:d4:d6:49:e1:f7:f9:b5:97:5b:9e:1c:c2:ac:5a:99:
af:f2:ec:fb:d5:58:2b:44:a4:dc:ff:4d:1e:08:02:8e:b1:af:
4b:c2:64:25:0b:0d:a7:9a:54:2c:93:00:9b:04:15:5c:5f:37:
b1:f4:48:58:b3:c7:4a:18:53:9e:ec:6f:68:d7:38:e3:f9:4c:
dc:6f:a3:71:7f:36:6d:1d:d0:74:88:93:b9:02:3e:f4:47:1c:
6a:69:63:59:f3:4d:3a:11:c9:fd:15:3a:29:d1:28:84:44:8c:
c8:6c:65:a9:f2:dc:5a:18:89:12:bc:4f:54:3c:17:90:5a:6a:
89:57:b9:aa:a5:a0:c5:81:2c:f0:45:01:66:cd:c1:06:1a:60:
02:bb:09:19:66:c4:37:b5:c8:68:3b:10:1f:01:a6:68:9a:ff:
cb:9c:12:91:1b:84:8f:7f:ef:9f:85:34:a5:96:1e:54:23:b4:
e4:87:50:ce:88:d7:b3:1c:50:87:03:4c:8e:d9:a1:02:ab:0f:
e6:8b:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:38 2026 by rpki-client