Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199948.roa
File: AS199948.roa (raw, json)
Hash identifier: u/8/wcFaPxWFUoKr/M4j6oihEpWxAWTvJZ2U630WyZo=
Subject key identifier: 7D:9C:B3:A4:D6:E1:9B:E1:A4:25:A4:CE:56:ED:9F:21:4C:E2:EA:CF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 67E8B5E68EE0FA77D5740E0597BAAE0533C4B074
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199948.roa
Signing time: Sun 22 Mar 2026 01:11:47 +0000
ROA not before: Sun 22 Mar 2026 01:06:47 +0000
ROA not after: Sun 21 Mar 2027 01:11:47 +0000
asID: 199948
IP address blocks: 148.135.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e8:b5:e6:8e:e0:fa:77:d5:74:0e:05:97:ba:ae:05:33:c4:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 22 01:06:47 2026 GMT
Not After : Mar 21 01:11:47 2027 GMT
Subject: CN=7D9CB3A4D6E19BE1A425A4CE56ED9F214CE2EACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:d3:3b:37:03:fd:0a:84:40:83:2d:cf:98:
e9:98:34:d5:07:22:a9:f6:20:d7:5a:55:e3:9c:04:
3b:28:6f:ee:fc:3b:0e:c6:0b:78:a5:05:dd:91:3a:
71:96:fa:72:7a:f6:1e:1d:a2:33:45:51:6f:8f:59:
fe:57:74:d2:91:6c:e0:99:f6:c4:1a:78:4a:7b:68:
a9:6c:bf:2c:1b:e7:1c:89:22:ef:14:9b:8c:fa:45:
3d:3b:66:dd:89:8d:26:17:77:00:9e:6a:04:b8:bb:
c8:e5:9b:ef:b2:a2:7c:85:65:0a:85:8a:e6:a4:23:
fd:bc:a5:74:67:9f:db:23:95:2e:40:cb:8b:f5:be:
3a:e5:be:3e:c4:b9:32:87:01:07:4b:68:5a:ed:a9:
bf:76:ca:e6:ea:12:54:dc:8e:7d:93:14:1d:5b:76:
7e:ca:56:f9:93:bb:eb:01:58:03:18:fa:f4:cc:84:
c6:f8:c9:26:a2:9c:78:5e:aa:0a:3a:fc:de:6d:d0:
6b:56:d3:c0:68:58:ee:df:11:39:78:fd:9f:a2:1f:
c0:8f:3d:ab:f5:87:9a:b4:1c:da:bd:e2:8d:02:59:
52:1e:70:b6:9d:4b:36:e5:8f:20:b1:76:a4:f5:97:
ae:ce:d9:c5:b4:80:8b:4c:24:82:dd:12:cb:59:b0:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:B3:A4:D6:E1:9B:E1:A4:25:A4:CE:56:ED:9F:21:4C:E2:EA:CF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.201.0/24
Signature Algorithm: sha256WithRSAEncryption
70:54:a7:60:59:76:9c:e9:d4:40:88:8b:51:06:8c:fd:39:72:
c4:5b:8b:79:1f:b8:c6:9c:4e:29:f4:c4:41:fa:38:b6:4f:58:
bd:3e:df:0d:1c:1c:31:b9:cd:63:5d:97:62:80:96:f8:43:42:
f5:9d:46:28:03:a1:c3:90:e2:ff:16:3c:59:19:2f:3c:cb:9f:
00:f3:a7:7d:85:ab:7c:2f:fe:e3:be:70:cb:8c:c3:a4:4d:39:
45:e1:36:0a:ee:5f:24:40:4d:d9:ba:41:f7:05:f0:b2:72:20:
bd:cd:72:f4:85:84:36:4c:bb:3c:97:bb:62:33:ab:27:74:ce:
43:1f:9b:0a:c8:d8:d6:ed:a4:a5:12:65:e1:42:b7:97:06:91:
11:fe:8b:d9:d4:bf:9c:ca:77:94:c2:7d:dc:26:27:2b:d4:26:
ce:18:3d:6e:08:b3:90:17:ea:c1:03:dd:2a:12:f6:da:0b:5d:
d4:25:dd:bc:3a:7e:24:a3:b8:d5:7d:b9:0e:2e:71:2b:0a:c4:
4c:b8:45:2a:7e:f5:5c:f7:09:4e:76:cd:27:a5:28:48:45:9c:
69:f3:4c:54:fe:c6:1b:4a:24:93:06:66:b7:51:e8:e6:a2:d9:
47:79:9c:60:9a:7d:ac:b5:88:96:17:4f:32:36:b2:b1:46:7f:
69:ec:9d:94
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZ+i15o7g+nfVdA4Fl7quBTPEsHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAzMjIwMTA2NDdaFw0yNzAzMjEwMTExNDdaMDMxMTAvBgNV
BAMTKDdEOUNCM0E0RDZFMTlCRTFBNDI1QTRDRTU2RUQ5RjIxNENFMkVBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPdM7NwP9CoRAgy3PmOmYNNUH
Iqn2INdaVeOcBDsob+78Ow7GC3ilBd2ROnGW+nJ69h4dojNFUW+PWf5XdNKRbOCZ
9sQaeEp7aKlsvywb5xyJIu8Um4z6RT07Zt2JjSYXdwCeagS4u8jlm++yonyFZQqF
iuakI/28pXRnn9sjlS5Ay4v1vjrlvj7EuTKHAQdLaFrtqb92yubqElTcjn2TFB1b
dn7KVvmTu+sBWAMY+vTMhMb4ySainHheqgo6/N5t0GtW08BoWO7fETl4/Z+iH8CP
Pav1h5q0HNq94o0CWVIecLadSzbljyCxdqT1l67O2cW0gItMJILdEstZsMh7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfZyzpNbhm+GkJaTOVu2fIUzi6s8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5OTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIfJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBwVKdgWXac6dRAiItRBoz9OXLEW4t5H7jGnE4p
9MRB+ji2T1i9Pt8NHBwxuc1jXZdigJb4Q0L1nUYoA6HDkOL/FjxZGS88y58A86d9
hat8L/7jvnDLjMOkTTlF4TYK7l8kQE3ZukH3BfCyciC9zXL0hYQ2TLs8l7tiM6sn
dM5DH5sKyNjW7aSlEmXhQreXBpER/ovZ1L+cyneUwn3cJicr1CbOGD1uCLOQF+rB
A90qEvbaC13UJd28On4ko7jVfbkOLnErCsRMuEUqfvVc9wlOds0npShIRZxp80xU
/sYbSiSTBma3UejmotlHeZxgmn2stYiWF08yNrKxRn9p7J2U
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:14:14 2026 by rpki-client