Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7224.roa
File: AS7224.roa (raw, json)
Hash identifier: VWbg4QAd7Eu6fx5tn+wzoUWL8uDF9x53vPWBhswSveA=
Subject key identifier: 93:60:25:EF:B6:60:51:BF:5C:D4:64:07:50:01:F2:39:B0:62:25:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7242BC241FC6FF75C5FEBC652362A26FADE4A532
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7224.roa
Signing time: Thu 05 Nov 2026 09:27:25 +0000
ROA not before: Thu 05 Nov 2026 09:22:25 +0000
ROA not after: Thu 04 Nov 2027 09:27:25 +0000
asID: 7224
IP address blocks: 167.148.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:42:bc:24:1f:c6:ff:75:c5:fe:bc:65:23:62:a2:6f:ad:e4:a5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 5 09:22:25 2026 GMT
Not After : Nov 4 09:27:25 2027 GMT
Subject: CN=936025EFB66051BF5CD464075001F239B06225AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:34:a4:f6:8f:8b:cb:75:7b:a2:54:8a:2d:
8b:c7:16:dc:93:fc:c3:ca:ad:8b:ea:ad:12:e1:e9:
76:c8:7d:df:27:bc:30:f8:80:46:56:e1:0b:75:c9:
fe:83:2a:f2:4a:10:52:7c:e1:95:fc:35:cb:c9:c9:
cb:09:dd:97:92:a0:6f:1a:3d:66:fd:6f:0c:52:52:
23:67:4f:1a:33:89:b3:21:91:0a:5a:45:0a:b4:1c:
b7:c6:4e:de:da:34:d2:ea:9f:a4:5a:f1:6f:da:9f:
85:8a:be:27:16:91:cb:0b:f9:bb:e0:d2:97:53:8c:
6f:fc:b0:bb:42:51:b4:e9:7d:4c:5c:72:c8:3d:ad:
16:d8:c2:16:09:da:90:f2:20:81:66:f1:bd:ee:3a:
95:36:ca:01:84:99:d5:7f:37:56:55:a1:8a:71:f0:
14:63:0d:11:8a:ed:df:0d:30:b1:8d:e9:20:d3:05:
e4:55:49:60:48:46:03:27:ff:4d:9a:2f:41:00:b7:
80:d4:aa:07:0a:d0:1f:b9:b6:94:4f:d3:34:24:3e:
84:72:1a:42:8d:15:08:93:1c:3a:b4:40:1d:25:fa:
f4:1c:74:02:6b:eb:6d:4b:94:b2:38:6b:cd:fb:51:
9d:17:b3:90:bc:ce:fc:76:54:cb:12:23:52:92:c2:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:25:EF:B6:60:51:BF:5C:D4:64:07:50:01:F2:39:B0:62:25:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.173.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a5:8c:a3:e0:af:63:dd:d8:1d:7c:59:1b:d3:b0:c0:dd:ff:
31:29:82:fc:b1:f0:9b:d7:82:33:8a:56:21:68:51:dc:e0:2f:
5b:70:2c:39:ad:f6:30:03:5d:7e:4f:13:16:93:65:e0:33:2d:
d6:e2:dd:48:05:59:7f:21:9a:29:25:74:f3:b6:42:48:e8:fb:
c6:16:09:a6:08:58:53:34:c3:82:d5:cc:82:e5:39:92:c4:4d:
2c:42:a2:f2:44:74:0b:30:b9:8c:be:bb:68:08:dd:18:b8:7d:
28:94:d4:1c:c9:a5:3e:dd:c7:4d:f1:3c:32:f7:9a:45:73:2d:
be:7f:c3:b3:90:49:2d:46:2e:6a:61:f8:32:68:e2:81:9f:e3:
92:62:08:41:3f:57:7c:07:9b:3f:eb:95:f2:6d:a6:d0:79:d7:
4d:45:1b:7e:24:c6:8d:2b:61:f1:0c:af:c8:79:3e:c5:46:57:
8d:b5:82:ab:fd:7d:fe:1c:ec:3c:fa:07:8d:e4:4d:f0:27:68:
8a:90:fb:b5:6d:fe:15:7e:2f:2e:3b:45:94:45:16:64:13:54:
fc:02:47:47:5a:fc:6d:d5:d6:0b:9a:05:c0:15:7b:11:14:e7:
52:81:c3:d3:40:34:68:70:ed:a6:d8:a3:a0:03:12:ca:dd:b3:
20:c1:93:8e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUckK8JB/G/3XF/rxlI2Kib63kpTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMDUwOTIyMjVaFw0yNzExMDQwOTI3MjVaMDMxMTAvBgNV
BAMTKDkzNjAyNUVGQjY2MDUxQkY1Q0Q0NjQwNzUwMDFGMjM5QjA2MjI1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkjSk9o+Ly3V7olSKLYvHFtyT
/MPKrYvqrRLh6XbIfd8nvDD4gEZW4Qt1yf6DKvJKEFJ84ZX8NcvJycsJ3ZeSoG8a
PWb9bwxSUiNnTxozibMhkQpaRQq0HLfGTt7aNNLqn6Ra8W/an4WKvicWkcsL+bvg
0pdTjG/8sLtCUbTpfUxccsg9rRbYwhYJ2pDyIIFm8b3uOpU2ygGEmdV/N1ZVoYpx
8BRjDRGK7d8NMLGN6SDTBeRVSWBIRgMn/02aL0EAt4DUqgcK0B+5tpRP0zQkPoRy
GkKNFQiTHDq0QB0l+vQcdAJr621LlLI4a837UZ0Xs5C8zvx2VMsSI1KSwgBZAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUk2Al77ZgUb9c1GQHUAHyObBiJaswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNzIyNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKeUrTAN
BgkqhkiG9w0BAQsFAAOCAQEAgaWMo+CvY93YHXxZG9OwwN3/MSmC/LHwm9eCM4pW
IWhR3OAvW3AsOa32MANdfk8TFpNl4DMt1uLdSAVZfyGaKSV087ZCSOj7xhYJpghY
UzTDgtXMguU5ksRNLEKi8kR0CzC5jL67aAjdGLh9KJTUHMmlPt3HTfE8MveaRXMt
vn/Ds5BJLUYuamH4MmjigZ/jkmIIQT9XfAebP+uV8m2m0HnXTUUbfiTGjSth8Qyv
yHk+xUZXjbWCq/19/hzsPPoHjeRN8CdoipD7tW3+FX4vLjtFlEUWZBNU/AJHR1r8
bdXWC5oFwBV7ERTnUoHD00A0aHDtptijoAMSyt2zIMGTjg==
-----END CERTIFICATE-----
Generated at Wed Nov 11 13:54:20 2026 by rpki-client