Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199058.roa
File: AS199058.roa (raw, json)
Hash identifier: A3P9fgdUmzuuPE9Kq5XqRNf3FvHXWBfJos/yYFsoMsA=
Subject key identifier: 57:66:33:7F:35:93:9C:30:FA:29:51:89:64:BB:67:42:FA:53:0C:72
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21F2E40B268CCF0C6149B2CDC285FE8ADC4726FC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199058.roa
Signing time: Mon 09 Feb 2026 14:55:37 +0000
ROA not before: Mon 09 Feb 2026 14:50:37 +0000
ROA not after: Mon 08 Feb 2027 14:55:37 +0000
asID: 199058
IP address blocks: 146.103.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f2:e4:0b:26:8c:cf:0c:61:49:b2:cd:c2:85:fe:8a:dc:47:26:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 9 14:50:37 2026 GMT
Not After : Feb 8 14:55:37 2027 GMT
Subject: CN=5766337F35939C30FA29518964BB6742FA530C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:92:13:34:65:a0:3b:d1:e5:56:8c:b0:4b:
c7:48:ae:57:33:63:25:f3:67:99:b6:86:b0:cd:4d:
2c:b8:aa:17:f4:3d:b6:ad:66:dd:d4:c0:a9:95:ee:
4a:af:b9:e9:d5:0e:d6:d7:db:bd:6f:57:d8:c3:ab:
54:5c:6e:07:35:ae:d2:cb:41:97:da:ed:bf:05:62:
60:29:ed:9e:f8:dd:04:77:e3:0a:b4:db:d1:0a:52:
a7:42:de:2f:d8:8e:72:0f:87:0e:ed:9e:8d:e6:43:
11:08:e3:4f:48:94:ff:bf:f1:5c:36:65:26:f4:04:
a9:49:4e:58:1a:5d:d6:e5:4c:a0:7e:88:8c:2b:e0:
4b:88:63:0d:43:a3:dc:5a:d4:55:a4:84:9e:3f:b1:
05:44:73:e1:5e:f3:69:c3:7d:b5:f1:7f:26:fe:fd:
e5:ed:e3:5f:d5:87:f4:5c:14:6a:10:3e:56:5b:c6:
6f:e9:6e:05:8e:e1:7b:c7:16:28:ef:6d:a9:ff:a6:
96:01:48:c2:73:83:1c:4b:21:27:78:e2:00:9a:d7:
5f:bb:d1:86:16:d1:9d:c0:83:47:46:e9:f2:d6:ed:
ff:a7:8f:d2:88:91:75:55:6e:a9:b5:fa:fb:1c:c6:
be:3a:1c:1d:80:b6:cf:bd:1b:11:7b:05:fd:4a:b7:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:33:7F:35:93:9C:30:FA:29:51:89:64:BB:67:42:FA:53:0C:72
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.33.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d2:3a:d1:46:f7:12:d5:cb:65:e3:e5:de:3d:f4:d5:e7:73:
85:b2:59:2a:c4:54:4f:59:3c:96:62:23:dc:ba:c4:f4:2e:fc:
ae:78:dd:05:a2:83:a5:1e:60:00:a6:e9:43:a5:50:55:01:d3:
01:79:ad:a6:17:d2:a4:11:50:4a:a5:02:36:06:56:91:51:bd:
23:70:74:be:4e:a9:0b:32:0d:f5:44:f2:a0:df:5b:24:43:58:
0a:e2:0b:3b:2a:9f:4f:4b:b3:d6:7d:ea:7e:65:9a:3c:5a:ea:
86:87:02:c9:c0:f6:c0:4b:b9:fa:77:c8:f8:a8:eb:f7:ba:ac:
02:c6:5d:13:6d:ec:ed:3e:2c:9d:4a:33:07:60:b1:8a:4f:6a:
63:85:da:4d:0f:72:d5:45:25:62:24:34:a7:4a:92:41:e3:6b:
f4:59:6d:6c:d2:26:1a:73:15:e3:e1:39:1b:39:1c:e3:c0:5c:
60:91:70:77:b8:bd:2a:f2:58:86:76:52:19:b5:81:c3:62:1a:
11:2c:81:d2:59:82:78:b4:0d:fd:ff:4b:ef:13:2a:ae:32:ad:
81:da:78:3a:b2:c9:d8:94:69:64:ea:fa:94:89:67:b6:ed:40:
6c:2b:00:61:d0:2c:0f:2a:b4:83:80:99:13:ac:e7:58:53:9d:
fa:6c:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:03:49 2026 by rpki-client