Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: FrcXNDuDsllDmTteDSLtlQE0FhaKBZ0e7CP3hD07p6g=
Subject key identifier: 1C:85:2C:88:F5:7F:DF:1A:62:5E:4D:D2:91:25:23:13:3B:92:ED:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 12941852FB8A08C7F4953375A0539EF61CA173EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199550.roa
Signing time: Fri 13 Nov 2026 18:52:17 +0000
ROA not before: Fri 13 Nov 2026 18:47:17 +0000
ROA not after: Fri 12 Nov 2027 18:52:17 +0000
asID: 199550
IP address blocks: 140.233.163.0/24 maxlen: 24
162.141.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:94:18:52:fb:8a:08:c7:f4:95:33:75:a0:53:9e:f6:1c:a1:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 18:47:17 2026 GMT
Not After : Nov 12 18:52:17 2027 GMT
Subject: CN=1C852C88F57FDF1A625E4DD2912523133B92ED10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:ad:ab:56:e9:f6:13:7b:50:9d:76:f5:c7:
07:27:fe:37:e5:31:e6:88:36:f6:f8:41:b8:a3:3b:
e5:c6:94:d0:c9:85:0a:5c:74:e9:8d:04:37:20:c4:
2f:99:49:bf:6c:d8:c2:bc:b5:89:e0:c8:1f:4d:63:
82:3f:f5:1d:c6:17:db:1e:98:97:03:2a:13:38:c7:
fe:a1:66:e1:63:54:b0:6f:dc:7e:17:0e:e4:94:58:
af:0c:d5:78:d8:7a:0f:ce:2c:d7:93:52:61:a5:e7:
25:19:e7:27:ca:fb:c3:e1:78:89:20:d2:f5:8b:5a:
b1:0f:fe:ac:83:89:62:42:6c:f7:6a:ef:51:a0:6a:
87:73:6b:a9:35:59:fd:6c:ea:7c:0f:d9:12:ee:be:
85:9f:38:4c:11:08:50:63:55:b0:76:ad:8f:32:c8:
70:d3:17:d3:3c:4f:3e:de:57:d6:7d:1c:74:56:24:
bc:8c:3e:99:02:03:8f:e1:8a:a8:91:60:58:b7:c6:
33:48:c2:50:2a:39:a4:7a:48:d2:97:8c:f5:80:96:
2f:c2:da:49:d0:75:a8:11:70:9d:8b:4b:40:9a:a1:
54:ab:b1:7a:61:a8:39:51:6e:5b:15:32:37:c2:a0:
54:00:a9:30:13:28:80:e3:e0:e0:60:55:7c:b6:b4:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:2C:88:F5:7F:DF:1A:62:5E:4D:D2:91:25:23:13:3B:92:ED:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.163.0/24
162.141.1.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7f:fc:be:0d:ff:61:3d:e9:00:05:86:9f:a9:4e:87:7c:59:
a3:9c:d0:46:09:15:92:06:46:13:5d:6d:e9:73:58:24:66:00:
62:23:61:78:f4:76:0c:fb:61:13:60:20:5c:fb:6a:50:69:ca:
45:10:f8:ae:88:97:13:2f:0f:af:47:57:77:37:73:d4:ed:4b:
f2:39:ff:2f:9d:fa:e5:82:4a:ba:1f:1f:d2:f5:0f:5b:29:50:
9e:fb:3f:f2:70:82:f9:08:44:32:8a:2e:80:f9:c0:36:bf:8f:
a9:34:ba:cf:60:c1:f7:2d:e8:88:ac:f6:8d:b0:d2:1d:af:05:
93:c7:ff:1b:ef:ae:b3:ba:4b:31:b5:95:94:9e:6b:19:5f:c9:
35:b7:37:eb:34:43:f3:a5:4b:58:28:c6:9e:08:33:3a:9a:26:
3f:38:70:8d:3d:e6:3b:c9:11:0c:d2:52:53:4b:8c:94:ce:17:
5c:e5:e3:5f:db:01:5c:db:37:80:8c:7f:36:0d:f3:05:5c:b2:
df:56:41:28:2d:cf:98:80:ae:2c:90:28:3e:cb:d1:d8:63:30:
d4:7a:31:b3:dc:35:3b:36:4b:75:da:12:4c:24:fc:69:c2:0e:
b3:3b:12:1a:0a:d2:af:b1:a0:59:01:ad:ed:81:66:34:19:81:
29:8a:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:28:03 2026 by rpki-client