Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
File: AS199760.roa (raw, json)
Hash identifier: TJ2Eu25rWBMIzmIFhh7oQk5YwK0Wk3rXZCuTGDCiOmc=
Subject key identifier: 17:C9:9B:9E:20:8A:5B:D8:F7:A0:DA:1B:EB:23:0B:7F:FE:97:62:E0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2E9E1ECD3B569F2DBE4877CCF4CD5A204A699441
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
Signing time: Thu 21 Aug 2025 13:26:22 +0000
ROA not before: Thu 21 Aug 2025 13:21:22 +0000
ROA not after: Thu 20 Aug 2026 13:26:22 +0000
asID: 199760
IP address blocks: 148.135.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:9e:1e:cd:3b:56:9f:2d:be:48:77:cc:f4:cd:5a:20:4a:69:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 13:21:22 2025 GMT
Not After : Aug 20 13:26:22 2026 GMT
Subject: CN=17C99B9E208A5BD8F7A0DA1BEB230B7FFE9762E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:b5:34:69:ce:5e:92:bc:0f:7d:8f:95:30:
58:07:37:3a:9d:45:97:45:76:69:1b:34:e7:6d:35:
27:67:51:e5:94:c1:cf:65:c9:ac:0e:25:af:72:4d:
6c:e0:90:e8:db:cc:45:6f:e4:78:ea:6c:45:13:26:
e4:dd:96:df:4b:a0:c5:7f:73:84:13:2d:32:67:64:
ba:96:ab:37:50:e6:cb:89:35:94:d0:2a:6c:d3:db:
2a:b5:16:e0:6e:98:0d:1d:3e:d4:a6:97:47:be:61:
69:75:c5:40:80:97:b0:37:6b:a5:ef:53:8a:bf:aa:
8a:1c:bd:f8:84:84:da:54:2b:fd:d2:78:e5:0a:d0:
b7:cf:07:d1:37:28:74:99:97:f5:a0:e4:75:07:5c:
6f:a5:0f:ac:00:02:96:91:14:fb:ac:b9:07:56:95:
91:aa:76:b9:7d:95:a8:fd:62:d1:97:14:0f:19:93:
b5:23:69:33:9e:c7:1d:f6:11:bb:a8:bd:d7:70:3e:
7f:87:93:b6:75:97:cd:bd:a1:49:44:3c:2e:a6:7e:
bb:57:1b:24:a1:c9:ff:30:99:b6:c6:da:6c:8d:e8:
6d:c7:55:38:42:5e:00:64:1e:ad:98:20:a7:0e:ce:
db:9a:45:91:c2:a5:3c:31:e0:54:7d:42:bf:67:27:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:9B:9E:20:8A:5B:D8:F7:A0:DA:1B:EB:23:0B:7F:FE:97:62:E0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.192.0/24
Signature Algorithm: sha256WithRSAEncryption
45:58:55:5c:78:61:90:84:78:11:30:0b:b9:d3:ac:96:54:69:
68:b7:1f:9b:05:4a:16:34:b3:07:91:4b:84:a4:2b:66:3c:76:
34:27:f0:d6:4a:91:0a:ca:aa:15:19:89:87:75:59:c8:35:fe:
af:29:5c:5a:b4:34:40:e4:2a:43:4d:32:e9:d1:c6:b0:04:96:
c6:9e:67:86:1a:57:d0:e5:42:77:8f:e1:60:ce:b0:c8:9c:e6:
f1:f7:32:23:ba:ad:1e:7f:33:e7:6d:a6:e9:9f:f0:82:6c:cf:
e1:19:93:79:f3:c5:e3:ae:f2:96:60:54:d7:26:25:5d:3b:ce:
8f:ed:86:90:63:0d:ff:ce:83:4a:18:d5:01:e0:b9:0f:9c:56:
84:5a:4b:a3:19:b2:1a:5a:dc:8b:56:a3:7f:68:f3:b9:72:d0:
8f:ee:29:5b:d5:d5:a1:7f:51:52:6a:2c:c6:53:0a:02:47:65:
af:4e:d5:fb:dc:e0:73:39:9f:a3:49:4e:46:68:1b:6f:b1:85:
1a:d7:7d:cd:a2:19:f7:0a:6c:39:fb:3f:a0:d6:bf:1a:07:13:
06:59:e1:92:56:d1:d6:d4:eb:e5:97:b5:c8:01:ed:cc:01:2e:
05:54:34:d7:93:83:ba:45:b2:d4:90:f1:1b:89:dd:e2:2c:11:
b8:de:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:18 2025 by rpki-client