Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199592.roa
File: AS199592.roa (raw, json)
Hash identifier: 9n3G/4GUBPKxB6pmCPJxtl6kCqsGUnKp+7mjwD3Y2iw=
Subject key identifier: 80:6B:0B:C0:B5:94:E2:9B:45:BF:93:9C:24:07:75:38:42:12:C4:A4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 751C9FD0B5EDEF686D2DBCB4041CA05F27DF40C0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199592.roa
Signing time: Wed 20 May 2026 14:10:36 +0000
ROA not before: Wed 20 May 2026 14:05:36 +0000
ROA not after: Wed 19 May 2027 14:10:36 +0000
asID: 199592
IP address blocks: 155.117.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1c:9f:d0:b5:ed:ef:68:6d:2d:bc:b4:04:1c:a0:5f:27:df:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 20 14:05:36 2026 GMT
Not After : May 19 14:10:36 2027 GMT
Subject: CN=806B0BC0B594E29B45BF939C240775384212C4A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:24:20:9a:7c:af:1e:51:35:59:0e:50:79:
2d:cc:6a:65:e1:4d:25:fb:4c:74:cd:16:6a:98:01:
2f:57:80:54:27:34:fa:31:41:4c:21:3d:74:30:82:
47:8e:04:ef:4a:69:4c:63:75:97:54:f3:bd:19:63:
e6:da:9f:99:12:21:32:a2:d2:2a:1e:f2:f3:a9:09:
2b:71:76:7a:a9:b9:fc:48:7a:59:75:22:ef:67:65:
58:87:16:90:1c:6a:04:f4:8c:62:18:af:0e:00:b0:
1a:84:f0:4f:62:4c:a3:15:20:bf:ad:78:39:52:80:
23:d7:cd:c6:a8:3a:37:83:e8:68:04:55:55:b9:05:
7f:cc:c3:86:c3:42:1b:78:39:10:26:a6:02:12:f6:
21:de:49:d2:13:47:d4:88:fc:8e:e0:09:8b:30:21:
6c:90:a3:4a:73:97:f4:d3:be:e1:68:d7:15:11:8f:
44:c2:50:8a:5a:51:ab:64:23:81:48:64:e1:b8:0e:
fe:67:c1:15:ab:a2:78:c5:fe:5d:53:b8:2f:36:a6:
97:08:3b:06:85:52:3c:8f:bc:24:f7:9b:81:13:ff:
bb:3b:25:92:20:7f:18:52:a5:6c:9c:89:32:f4:3e:
81:53:f6:3d:72:d8:02:ce:91:16:7c:43:5a:89:16:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6B:0B:C0:B5:94:E2:9B:45:BF:93:9C:24:07:75:38:42:12:C4:A4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.1.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ca:96:c9:fb:e2:5d:32:c3:a5:82:23:71:10:15:cc:1a:5a:
10:21:ff:4f:7e:d7:06:a0:53:98:c9:96:08:4f:80:04:23:2f:
9b:73:66:fa:21:84:cb:83:b8:1c:8d:65:fe:6d:e5:72:e0:c6:
61:e5:5f:51:be:3b:db:9b:41:42:c6:a3:f8:6d:db:fe:14:1e:
7b:19:df:5f:4b:7f:ad:20:93:86:51:db:fe:dd:ef:38:c7:36:
95:e2:e5:64:a6:dc:d9:24:27:01:b4:81:9a:20:8d:d9:0a:e3:
74:88:33:ee:3a:a5:ae:9f:36:a2:18:b2:ed:c8:9f:ae:44:8c:
48:71:3f:f6:22:2d:36:20:31:a1:98:a9:f3:78:5b:53:8b:d9:
9e:22:1f:6a:3c:7e:11:7f:01:f0:0b:4d:d1:12:fd:52:3f:77:
34:55:be:18:e4:60:ba:8e:f5:bc:e8:a0:28:74:9d:5c:26:c7:
9c:ce:15:b5:3e:74:2f:e6:12:ef:ad:79:85:d4:3f:42:1d:30:
39:a4:32:b0:bf:57:ee:33:5c:5b:02:56:73:4e:04:e2:71:29:
75:77:00:b5:b2:4b:f6:bf:cd:be:ae:6f:e6:fa:b7:f7:b7:b2:
55:54:28:59:3f:0d:7c:34:6f:90:b8:52:51:8f:5a:d1:85:a5:
33:85:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:54 2026 by rpki-client