Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199218.roa
File: AS199218.roa (raw, json)
Hash identifier: yrAsxMU1o0VdBletXsjZ2HBNaRs0siM//lArcoh7P4o=
Subject key identifier: 9A:3F:4F:15:0C:39:E7:07:FF:B2:F7:AE:A2:CE:BC:91:A4:F1:AC:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2C4456EF8F293C79896C85E7ABF9E6C9ABE25C09
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199218.roa
Signing time: Wed 29 Apr 2026 09:47:07 +0000
ROA not before: Wed 29 Apr 2026 09:42:07 +0000
ROA not after: Wed 28 Apr 2027 09:47:07 +0000
asID: 199218
IP address blocks: 155.117.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:44:56:ef:8f:29:3c:79:89:6c:85:e7:ab:f9:e6:c9:ab:e2:5c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 29 09:42:07 2026 GMT
Not After : Apr 28 09:47:07 2027 GMT
Subject: CN=9A3F4F150C39E707FFB2F7AEA2CEBC91A4F1AC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:18:ff:41:36:8e:4a:ac:4e:16:78:72:29:
9d:7e:9a:4c:5c:73:62:d0:bf:af:48:1d:84:2d:05:
f5:73:7b:6a:86:42:e9:02:2e:0e:4d:1b:eb:6f:f5:
e9:c4:a8:83:53:41:9a:b5:3b:a8:a5:3f:45:06:20:
3d:ed:50:b3:5f:3d:2e:63:63:22:30:ec:6e:b5:e2:
c3:0a:3f:07:52:6c:58:5f:3c:a7:d9:73:d8:9e:2a:
32:e4:ae:31:7c:29:c2:7c:61:90:7c:e4:f5:09:1a:
47:24:10:0d:d5:f6:dc:7f:b4:a8:18:ab:b5:7c:18:
3c:49:3f:3d:90:87:0f:c6:31:a7:38:6d:62:cb:f5:
f3:76:98:9a:26:78:82:5d:dd:85:10:3b:84:f9:e6:
57:e3:24:af:a7:df:f2:84:4f:48:0b:66:9b:fd:11:
55:63:32:88:c5:a9:86:0b:4a:bc:4c:06:ae:96:91:
7d:59:8d:bb:9d:05:3a:a0:9d:a5:84:cc:02:5d:d9:
a9:03:0a:d6:b7:9c:23:90:32:d9:65:cb:2f:63:a6:
53:eb:95:74:fe:14:0d:33:dc:ba:bc:78:2c:6e:5a:
eb:27:0a:2c:38:80:bc:f7:85:81:93:d7:de:85:b6:
6e:6e:96:6d:2d:78:7b:86:df:77:70:d7:cf:09:b9:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:4F:15:0C:39:E7:07:FF:B2:F7:AE:A2:CE:BC:91:A4:F1:AC:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.189.0/24
Signature Algorithm: sha256WithRSAEncryption
91:43:7b:78:92:05:01:36:8e:4e:0a:72:b3:f8:85:46:3c:74:
52:55:cb:47:f0:36:1d:2a:e4:e9:6d:f3:85:af:cc:05:92:fe:
88:a9:e6:f1:b7:77:7d:f3:ca:49:11:6f:10:b7:20:3e:73:c8:
f2:76:59:57:c1:f8:58:81:6f:7e:0a:cb:41:28:bb:ee:fc:1b:
f4:b4:1a:ed:0a:5b:3b:47:bb:37:44:04:8c:31:c5:33:04:d7:
67:83:61:1c:5c:cc:1e:a1:6f:aa:c3:50:71:51:37:40:5f:ef:
24:7d:66:91:ec:5d:9e:d9:81:4a:17:a7:9a:ab:df:cf:b3:fe:
dc:57:96:08:d1:e6:9b:9c:16:3d:9c:45:9d:09:50:9b:64:6f:
dc:ee:f8:7a:e5:f7:b9:fe:21:3b:0a:14:b7:03:26:0f:60:f2:
44:79:b6:66:e8:fe:13:45:1e:99:a1:71:7f:05:a4:e1:ab:eb:
88:a7:1d:73:29:e2:ab:2a:1e:e5:fb:66:70:89:19:1c:d2:2c:
09:83:1e:fe:d4:3f:68:66:0d:0c:e2:38:12:ce:c7:69:15:a4:
f3:8b:f7:70:e0:fb:8f:c0:ac:d5:b8:0d:1d:5b:ee:94:f5:18:
cd:8d:c1:e9:4e:10:27:9c:73:e4:7e:4d:f7:0f:83:a8:4a:e7:
6e:c8:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:36 2026 by rpki-client