Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199737.roa
File: AS199737.roa (raw, json)
Hash identifier: qxoSx15biwznpYAlyvtFL0Sy4fQgn3wcAz/9FuJikgo=
Subject key identifier: A6:28:61:01:79:56:B7:16:0D:74:2F:AC:73:E2:1E:28:76:22:F2:22
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 290C6E34FFD7A6F41361AB38FD7FC24887555213
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199737.roa
Signing time: Fri 24 Jul 2026 06:37:19 +0000
ROA not before: Fri 24 Jul 2026 06:32:19 +0000
ROA not after: Fri 23 Jul 2027 06:37:19 +0000
asID: 199737
IP address blocks: 140.150.234.0/24 maxlen: 24
146.103.36.0/24 maxlen: 24
146.103.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0c:6e:34:ff:d7:a6:f4:13:61:ab:38:fd:7f:c2:48:87:55:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 24 06:32:19 2026 GMT
Not After : Jul 23 06:37:19 2027 GMT
Subject: CN=A62861017956B7160D742FAC73E21E287622F222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:a2:c9:fc:37:78:17:1b:16:fe:46:5c:be:
0a:0a:31:07:58:e3:b9:47:ff:77:29:3e:c8:fb:05:
7a:d0:b3:a4:a7:82:31:c4:de:a5:cf:b1:e1:c6:7a:
33:6e:11:26:75:c1:c8:e7:0c:e0:54:fe:4a:1f:8b:
e5:94:f2:e1:96:05:69:2c:74:dc:35:cb:c0:73:dd:
0c:1b:d9:ff:3c:72:38:83:50:0e:d2:02:d9:47:dd:
4e:a1:11:92:8d:bc:eb:54:67:9c:f4:63:31:1c:d0:
f1:fb:fe:b4:a5:6d:2f:44:05:d6:25:47:be:bb:f6:
70:5c:4d:a7:fe:ec:24:8b:91:75:f4:c8:75:5a:ea:
7f:09:fd:d8:7d:fd:3f:52:04:6c:f6:a8:7b:3e:c1:
0c:b4:5f:b4:3a:f2:8f:6b:88:19:55:08:33:51:28:
0d:93:d9:02:19:1d:5f:cf:9a:b3:7a:0e:e9:07:14:
54:c1:36:e4:18:ac:59:31:0e:a6:dc:82:01:94:07:
9a:7b:d5:9a:e0:3d:25:25:f8:23:67:8d:3d:a5:fa:
86:ba:cb:a6:e7:e2:99:69:77:c9:10:42:c6:6b:fa:
2a:6c:53:82:77:2f:cb:ba:34:ba:33:3d:3c:d1:77:
d3:3a:d2:55:df:f3:21:75:56:c7:ce:61:1f:ef:cc:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:61:01:79:56:B7:16:0D:74:2F:AC:73:E2:1E:28:76:22:F2:22
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.234.0/24
146.103.36.0/24
146.103.61.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d7:8c:5a:0c:43:30:47:3b:01:45:86:9a:50:a3:0e:b5:1a:
af:57:33:ae:d6:7e:51:22:24:6c:0a:8c:aa:4e:d0:da:a0:55:
c2:1c:74:35:87:aa:e5:fc:c3:01:b6:e9:8e:9f:06:a2:56:e9:
0b:d2:c4:09:75:db:36:53:7a:95:1a:c1:bd:34:9f:0b:07:99:
08:06:94:50:81:d9:fa:96:cd:23:74:24:49:9b:b4:e0:c8:6a:
1e:79:87:7b:f0:ea:34:b3:88:44:17:37:e7:b4:f3:8b:37:62:
15:94:3d:89:9e:82:70:97:82:f1:cc:26:61:06:cc:77:c2:4a:
72:24:c4:99:8c:f3:38:88:17:cf:7b:84:c4:15:37:2b:c8:08:
a7:23:38:4a:46:4b:6f:c1:c5:f1:02:95:8e:ab:5f:7e:54:e4:
3e:4d:a8:14:2f:6f:ba:49:35:60:03:86:07:71:81:bc:32:dc:
2f:97:22:94:95:7c:96:a5:4e:37:1a:c4:9d:ad:ff:a3:7a:d2:
99:68:e6:35:97:12:a0:12:89:62:7c:2a:3f:39:d6:69:2a:4e:
93:02:51:81:b6:92:c2:ba:b4:3e:7d:ac:f6:98:c2:12:74:10:
f7:3e:4d:3a:0e:ef:01:19:2e:1b:22:61:bf:48:ca:23:bb:1e:
a7:43:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:36:38 2026 by rpki-client