Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199856.roa
File: AS199856.roa (raw, json)
Hash identifier: CMgbij/DlA1LHsU36Hr4J6BLsn1OaQ9rmVGkBkXcu4g=
Subject key identifier: 23:D3:21:97:00:7A:E2:D6:9B:C8:1B:51:88:E2:D1:48:5C:05:60:7C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0106226A581E3AF8373123B7EC27B445FDC57A58
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199856.roa
Signing time: Fri 19 Jun 2026 08:47:47 +0000
ROA not before: Fri 19 Jun 2026 08:42:47 +0000
ROA not after: Fri 18 Jun 2027 08:47:47 +0000
asID: 199856
IP address blocks: 150.241.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:06:22:6a:58:1e:3a:f8:37:31:23:b7:ec:27:b4:45:fd:c5:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 19 08:42:47 2026 GMT
Not After : Jun 18 08:47:47 2027 GMT
Subject: CN=23D32197007AE2D69BC81B5188E2D1485C05607C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:25:04:60:74:d6:e0:58:ef:1b:2c:a8:57:
5b:30:5c:0c:07:2e:e3:44:99:19:a3:01:2c:ff:3b:
ea:ef:5f:f9:61:be:75:18:c7:da:30:98:e9:0e:d8:
ad:b2:66:64:bc:27:e7:04:50:1e:79:44:e4:33:21:
0c:58:f4:27:1f:e9:d7:fa:24:26:ef:d6:2f:95:67:
e8:98:a2:72:fe:83:7e:8a:ae:6a:1e:86:1f:55:a4:
d2:86:65:93:53:41:27:30:63:d3:f2:10:70:9a:8a:
67:35:f5:21:c9:ae:60:fa:c2:00:12:76:a7:e2:17:
fb:0b:ed:45:bd:fa:b2:65:75:1d:6b:7f:dc:6b:5d:
f4:e8:0c:28:ab:b8:12:6b:61:59:d0:97:29:12:9f:
c2:84:0e:96:71:91:6c:2d:1a:dc:9e:7b:7b:44:30:
b3:ae:cb:34:83:24:a2:b3:91:ae:f8:39:55:fe:78:
ba:84:b5:10:66:ad:74:8d:b4:c4:64:a2:b3:8e:5f:
5b:2f:75:69:bc:62:6f:3f:94:23:19:03:91:d2:32:
8b:e6:e3:60:1c:ba:dc:e2:90:3c:b4:59:fa:1f:37:
55:49:1d:37:30:65:d8:46:e1:45:e9:76:cb:f5:bc:
0a:81:76:f2:08:af:3d:38:05:a0:1f:53:ae:b8:48:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:21:97:00:7A:E2:D6:9B:C8:1B:51:88:E2:D1:48:5C:05:60:7C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.236.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1c:92:95:0e:c9:8e:a7:5d:78:86:bd:7a:99:ed:f8:b7:fe:
25:70:de:21:ea:6c:d1:2f:f8:5a:f9:a2:49:2b:5a:8c:2e:a9:
92:c6:85:93:c5:ef:68:94:65:6d:f6:c0:9f:a2:f7:00:a8:d2:
5c:8b:fb:07:5b:bb:00:65:2f:0a:2f:07:69:ec:4c:1e:70:4b:
81:02:a1:c7:90:ba:e9:2b:1e:b4:b4:99:84:79:de:8d:ce:48:
62:b7:fe:9a:0e:10:85:c8:8f:5d:fd:8d:d0:ba:9b:15:23:04:
5c:e0:6c:96:05:e4:99:dc:9a:71:57:55:3e:2c:1b:ac:ed:99:
5c:6c:85:71:c3:82:4b:61:b9:f9:28:d5:31:7e:c1:e8:ed:f0:
1c:20:f9:5e:27:50:f9:5d:53:27:ea:02:5f:8a:4a:15:b4:f3:
e2:12:40:b5:18:d4:85:e5:8e:dd:73:dd:74:01:d1:23:d0:64:
9c:7b:a0:5d:01:1f:1a:62:60:30:60:4b:9f:1f:9a:db:e2:31:
1f:9d:b9:14:4a:97:b4:c8:80:54:85:08:92:d2:5b:9d:cb:c6:
15:b8:7b:54:10:ad:e1:6f:e3:88:f1:ae:d3:93:f3:fc:0b:9f:
33:04:04:c7:5a:14:13:5a:44:8d:4f:ba:30:1e:e7:16:c2:e3:
15:6e:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:15 2026 by rpki-client