Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: w5X2zlAIBoUsfnJEIl+9Uq78Xrr4kGThQ/YYVYmiSaw=
Subject key identifier: 0B:00:A5:2C:C0:CC:05:93:53:D4:13:85:04:95:C1:B2:E2:E7:1B:35
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 31B14747EBAB13C25293EEED8ED7121A8A69A11B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199741.roa
Signing time: Thu 24 Sep 2026 22:41:18 +0000
ROA not before: Thu 24 Sep 2026 22:36:18 +0000
ROA not after: Thu 23 Sep 2027 22:41:18 +0000
asID: 199741
IP address blocks: 155.117.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b1:47:47:eb:ab:13:c2:52:93:ee:ed:8e:d7:12:1a:8a:69:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 24 22:36:18 2026 GMT
Not After : Sep 23 22:41:18 2027 GMT
Subject: CN=0B00A52CC0CC059353D413850495C1B2E2E71B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:d9:14:79:cb:b9:8b:03:d2:03:52:4e:78:
be:1f:83:7e:2e:70:f7:6a:37:d5:4b:82:27:53:46:
3b:1b:69:5d:b6:0a:7b:92:5e:13:2e:3a:69:65:32:
37:29:78:f9:81:7b:31:04:01:5b:cd:21:da:36:bc:
95:87:a6:65:41:66:c9:0c:e4:c9:98:24:2b:93:3b:
8b:0d:f3:e5:4c:74:11:16:b3:b8:aa:78:83:04:c1:
0a:e6:1f:34:63:f1:b9:07:6c:79:5b:c6:91:1c:ce:
1a:34:ea:00:98:e4:b0:66:d0:ad:7e:aa:80:42:f1:
b7:97:d4:81:85:3c:e6:ed:ca:e0:7c:52:e8:23:da:
3b:49:0d:99:9a:a7:52:fc:5c:4e:1e:94:0c:c0:ed:
c9:e6:3a:e6:9c:b8:ac:e3:a8:a4:74:f6:7f:fc:1c:
09:da:86:23:e6:9d:4b:48:db:d5:cd:8f:95:38:3a:
3f:6a:96:c5:de:67:27:15:ee:c0:c3:32:1e:2a:f4:
14:93:b8:46:14:b3:3a:16:a8:08:3f:83:30:1d:ba:
c1:7c:04:8c:a1:f2:59:6e:99:8e:0f:19:67:99:ca:
36:91:ab:15:40:a1:b1:00:58:d8:12:c0:4f:d7:b4:
7d:8b:82:61:b7:d2:7c:72:7d:35:19:f2:cc:0a:50:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:A5:2C:C0:CC:05:93:53:D4:13:85:04:95:C1:B2:E2:E7:1B:35
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0f:81:9a:3e:09:d3:fa:f2:b3:37:e4:b7:9d:07:81:13:86:
ef:66:aa:64:57:9b:18:37:48:da:75:bf:b7:4f:dd:44:31:47:
fe:53:a4:23:f0:1e:8c:5d:3b:d4:93:2d:2f:16:f5:88:42:d2:
ca:98:29:1a:40:23:1a:f1:de:58:61:52:f8:0d:e5:c3:f4:8a:
b9:bf:2d:c1:a2:ef:f1:88:23:b3:ab:1f:67:2b:cc:b7:77:2c:
51:fc:59:67:ae:ba:ba:a0:d0:3b:a8:cd:20:6a:09:f6:b2:9d:
ce:55:43:86:c5:c2:23:dc:a1:67:6b:f5:eb:a1:3a:25:a8:71:
7d:fd:a2:15:c8:ee:7c:08:b7:34:5f:76:90:4d:b1:b9:98:5f:
eb:f1:78:1f:4e:36:c8:32:7e:cf:7b:fa:29:6d:45:5b:a3:78:
86:c6:34:5c:0e:dd:44:c2:a0:91:fc:03:3e:5c:69:d3:f0:b3:
ae:2f:f7:fd:31:38:0d:af:e2:57:61:d6:ee:9b:c2:5f:d7:fc:
0c:e2:cf:b9:0d:41:04:94:cf:d4:db:56:e6:bc:d2:9c:82:b0:
0d:cb:43:2c:f1:71:71:8a:db:7f:1e:87:55:5f:ed:17:db:02:
1f:d0:15:fd:2c:fa:52:ab:68:12:e1:06:2e:40:13:4a:d5:71:
e9:2e:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:59:27 2026 by rpki-client