Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199735.roa
File: AS199735.roa (raw, json)
Hash identifier: xQm9cj3K21+7cMa0krmz9tWwK4spCTjVCXze9HgfoRQ=
Subject key identifier: 7B:C1:A2:76:5C:68:14:E6:4F:3C:64:A1:75:A0:AB:6E:6E:AB:69:55
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0936C413B9DA82B0EB7EDECADBDF9E8075BA0054
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199735.roa
Signing time: Sun 21 Jun 2026 14:31:48 +0000
ROA not before: Sun 21 Jun 2026 14:26:48 +0000
ROA not after: Sun 20 Jun 2027 14:31:48 +0000
asID: 199735
IP address blocks: 96.62.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 14:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:36:c4:13:b9:da:82:b0:eb:7e:de:ca:db:df:9e:80:75:ba:00:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 21 14:26:48 2026 GMT
Not After : Jun 20 14:31:48 2027 GMT
Subject: CN=7BC1A2765C6814E64F3C64A175A0AB6E6EAB6955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:e5:f5:7f:ea:2a:6b:b2:e2:40:83:41:d7:
b7:35:5d:83:aa:f2:25:0d:99:75:2d:34:06:2d:37:
db:3e:ae:05:e5:09:95:5f:33:10:f3:44:b2:03:60:
e3:b8:72:15:96:b5:e1:85:12:07:f5:e4:73:ae:ed:
49:6c:b8:c1:ba:fc:1c:96:d3:5b:82:2c:7f:62:1c:
30:dc:99:6e:a2:25:4e:51:1a:79:b5:8d:60:0d:a9:
ec:6a:3b:f8:be:c6:29:f6:9d:ed:04:38:e5:05:82:
0f:a4:29:93:55:26:6e:9a:56:93:df:d4:62:96:29:
22:91:0a:c5:b4:37:91:2b:f7:aa:b0:57:e9:3b:86:
58:97:a3:e8:59:b4:a7:f8:db:3f:92:2e:d0:b3:74:
5c:31:b4:79:b6:d3:d3:e7:07:0e:8a:ee:f4:4c:75:
90:24:a9:a4:91:68:6f:a5:8c:e2:02:a7:26:8b:29:
60:c8:8d:b5:52:1a:81:fc:05:69:6f:aa:61:f8:e4:
8e:b7:a9:6f:e1:b4:a6:78:64:a1:8f:ce:c6:99:23:
7e:19:9a:87:73:6b:cb:3d:33:54:db:0e:ab:39:a9:
a4:50:a1:c0:46:22:d3:88:6a:7b:f8:3f:9a:1d:b2:
b0:b6:13:0c:37:b0:21:7e:b9:71:5d:56:e8:ba:5c:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:A2:76:5C:68:14:E6:4F:3C:64:A1:75:A0:AB:6E:6E:AB:69:55
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.127.0/24
Signature Algorithm: sha256WithRSAEncryption
69:df:f7:d9:dc:51:50:70:47:4b:70:b5:e1:6a:07:a1:f9:70:
eb:a8:b0:82:9d:a8:4b:02:56:62:30:16:88:39:5c:ba:01:63:
74:20:66:c9:34:98:40:bd:f3:51:5e:a1:b3:41:85:f8:83:31:
31:f7:a8:89:e5:85:cc:66:b4:13:6c:94:20:03:54:3a:0f:4a:
27:2b:89:9b:cd:4d:05:0e:a7:d7:c4:fa:7c:04:6b:c0:c2:17:
17:5e:c7:11:e0:fa:fd:85:6e:db:93:a4:9e:b2:34:c4:a1:a6:
7c:dc:92:5f:32:f3:3e:f4:df:e6:92:19:28:c6:38:27:17:5b:
02:f0:98:86:c1:34:d9:96:c1:36:48:7b:8b:22:2e:c3:5c:6b:
96:98:4d:d8:50:93:b4:63:f2:cc:ab:b3:af:40:10:dc:d0:38:
88:af:5f:87:f8:d9:f6:e0:38:60:d5:99:af:b1:23:2e:18:c6:
7a:24:64:06:37:7d:bc:47:df:38:88:d5:36:03:dc:db:62:37:
90:56:ca:6a:f5:1e:73:38:7e:ca:5f:86:16:fc:a5:8a:ab:53:
26:66:e7:46:b8:89:15:ec:50:24:8f:27:80:e1:8f:18:cf:b8:
0c:01:c1:e3:2a:ae:3d:bf:51:65:0b:d8:dd:0b:bf:b6:b6:dc:
d1:80:c7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:29 2026 by rpki-client