Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: ssNHTzba22P3fSR/hkFMsopCuACVXS1jz2fvBlI58Mw=
Subject key identifier: 84:B6:A1:8B:B0:72:B8:F7:BB:DD:49:7E:9D:78:95:97:5B:AF:7D:16
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 701051337D7405110B63F61800FE5BC5F8E25737
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS199550.roa
Signing time: Tue 13 Oct 2026 19:02:29 +0000
ROA not before: Tue 13 Oct 2026 18:57:29 +0000
ROA not after: Tue 12 Oct 2027 19:02:29 +0000
asID: 199550
IP address blocks: 212.60.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:10:51:33:7d:74:05:11:0b:63:f6:18:00:fe:5b:c5:f8:e2:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 13 18:57:29 2026 GMT
Not After : Oct 12 19:02:29 2027 GMT
Subject: CN=84B6A18BB072B8F7BBDD497E9D7895975BAF7D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:2b:ff:47:6e:1d:e5:15:b1:61:76:23:12:
4a:ee:13:66:31:d1:af:9c:2e:82:13:f3:d7:ef:0f:
27:e6:e0:db:03:be:86:c2:0a:b2:a1:71:86:d0:74:
49:15:d9:80:43:79:e3:1e:88:92:b0:cd:f1:50:5a:
ae:24:8a:87:e7:83:12:8c:81:a2:2c:fc:ad:1b:22:
35:46:34:81:28:46:d4:58:ae:ad:88:fb:c1:9c:7f:
72:d0:d0:f7:cd:07:d9:d5:4c:f9:65:7b:ab:ff:44:
2f:ae:56:df:00:b4:e6:f6:44:4f:38:52:a6:aa:c6:
e1:1a:89:79:56:f7:fa:06:8f:b9:c1:ef:3b:b3:39:
67:52:69:bf:93:4b:dd:b6:67:f3:99:2b:a7:df:28:
ec:58:06:aa:12:2f:80:1d:43:0c:21:b5:0e:a1:51:
5e:71:7e:18:c0:f0:0f:08:7a:ca:ae:70:51:73:8f:
ad:72:3b:dc:28:a1:09:15:33:eb:1c:a4:1a:e2:09:
cf:7d:d7:a5:82:f5:a0:00:d9:16:02:ea:4e:ca:1f:
ef:8d:3c:bc:2e:8d:4d:55:d0:32:a2:c3:bb:94:06:
3c:18:69:f7:a0:44:ed:31:28:9d:d2:92:b0:39:d5:
54:1e:22:db:55:98:47:59:72:a9:74:fd:12:97:8d:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:A1:8B:B0:72:B8:F7:BB:DD:49:7E:9D:78:95:97:5B:AF:7D:16
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:55:d0:50:96:48:b3:10:f5:01:02:1f:29:de:5d:96:20:e3:
43:9d:79:a1:39:bb:c2:cf:d3:8f:f1:94:f6:00:c3:f7:f1:2d:
8b:9f:8c:0b:83:42:55:6e:d7:8c:1a:a0:e5:2a:49:bd:36:10:
74:4d:c7:fe:2b:1c:8f:95:86:c2:6c:77:d6:27:19:92:7f:00:
0d:02:18:11:fa:e3:36:fc:51:8a:bd:b7:c9:18:34:45:26:5d:
72:73:52:cc:30:0b:84:b4:81:e2:9c:19:15:f5:75:2e:3e:01:
30:9f:46:ba:bb:35:81:41:b5:77:ab:60:05:64:16:a8:6b:b9:
ba:2c:1a:80:fd:ca:45:ae:fa:a8:f6:2a:17:04:5d:d6:ad:41:
c6:44:80:14:71:0f:1d:da:de:0c:42:1d:22:67:11:9d:bd:ae:
8f:08:78:cf:f6:c8:1a:8e:d2:20:85:15:f6:eb:cc:b4:88:3e:
a2:6e:70:82:9c:53:41:88:32:67:24:bc:e7:6c:06:ba:a2:cf:
3a:16:33:e6:1d:eb:a7:29:db:b1:32:f9:e6:8a:10:9e:f3:91:
e2:63:75:2f:ee:da:f0:17:e9:6a:1f:d7:a5:6f:61:77:99:23:
21:a0:2e:3e:00:ef:7a:02:35:cc:62:19:c1:45:85:af:85:ec:
d2:75:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:09:17 2026 by rpki-client