Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199186.roa
File: AS199186.roa (raw, json)
Hash identifier: E+HLOYIwRn5zj6u0ccZBjLDdqfz74D1BTEYOzv3/110=
Subject key identifier: A4:EF:31:7E:D7:40:F7:79:4E:E8:B8:41:E3:15:16:81:4B:93:90:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5C05939DFEFD7BA3C7D9DD67B00410A232D74346
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199186.roa
Signing time: Tue 02 Jun 2026 13:20:21 +0000
ROA not before: Tue 02 Jun 2026 13:15:21 +0000
ROA not after: Tue 01 Jun 2027 13:20:21 +0000
asID: 199186
IP address blocks: 162.141.13.0/24 maxlen: 24
168.222.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:05:93:9d:fe:fd:7b:a3:c7:d9:dd:67:b0:04:10:a2:32:d7:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 2 13:15:21 2026 GMT
Not After : Jun 1 13:20:21 2027 GMT
Subject: CN=A4EF317ED740F7794EE8B841E31516814B939012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:0c:8e:d7:9f:04:8b:f5:86:8e:dc:72:b9:
05:d8:19:46:a3:91:3f:42:7a:58:ec:3a:ab:4c:01:
c9:a9:a3:56:09:48:ab:c2:89:5c:07:24:0e:35:5f:
87:47:98:14:6e:9d:b9:3d:65:60:d2:4d:a4:33:78:
1c:7e:6a:d1:24:ba:29:d6:20:0b:ad:58:d5:d8:7f:
d0:85:6e:52:f9:8b:9f:da:ba:03:84:d5:d4:94:14:
4f:50:81:c9:09:d1:2a:d3:f9:2c:e3:b0:79:b7:a5:
ef:1d:62:dc:72:80:65:e8:4f:d3:fd:b6:b9:41:21:
4b:b4:bf:80:82:34:2f:51:15:05:a2:f5:81:d6:38:
4b:0a:d5:ac:eb:65:6c:83:b7:d0:e0:cb:23:0a:49:
8d:45:84:43:06:7b:1b:c9:70:e8:bd:c2:14:53:a9:
2e:40:44:0d:57:9f:2f:0e:50:32:7e:0b:1f:5f:3b:
eb:7b:8d:c9:52:38:e3:85:ab:ce:b2:5e:71:e0:f1:
71:7f:91:77:c8:f1:01:f3:70:a9:15:fd:31:87:11:
6e:df:66:f2:40:8a:51:3a:d1:0f:1d:69:c3:35:83:
bb:f3:04:b5:0d:c2:0e:95:9d:e9:1c:31:ba:ad:7b:
f6:7d:08:db:e4:5c:98:6a:d7:ee:c9:67:09:d2:78:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:31:7E:D7:40:F7:79:4E:E8:B8:41:E3:15:16:81:4B:93:90:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.13.0/24
168.222.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5a:9a:0c:18:c1:c2:fc:57:12:1e:b8:1c:ca:28:74:44:76:
a1:d4:5b:66:16:78:cd:b6:4c:d5:c3:7b:57:4d:2c:03:b2:e4:
b5:9d:7b:95:da:ba:4b:1d:cc:be:b3:d5:70:59:9b:76:b9:9e:
dd:18:bd:7d:d0:5a:f4:7e:03:05:5d:a5:33:70:fa:9d:57:9b:
c0:7b:83:a0:fd:48:f9:55:13:29:bd:83:58:2e:e9:0c:07:7f:
d2:b8:8a:52:19:4c:f2:b1:1e:6a:dc:bb:44:ae:62:50:7f:bc:
35:0f:02:83:7b:7b:83:d8:67:db:a1:18:60:1b:d0:70:54:48:
5d:07:39:38:56:ab:61:65:52:c1:3b:cb:ed:bb:e4:d2:7a:09:
8a:fd:24:7d:32:df:f7:da:40:30:fd:87:f4:a5:7c:50:33:46:
e2:6e:fd:38:7b:bb:69:38:36:41:f5:f8:b2:be:fb:a4:ab:99:
7d:db:43:8e:88:6f:5d:34:72:c5:3e:4c:dd:eb:cb:10:9f:96:
1e:12:31:a7:9e:6f:84:6b:db:18:24:c6:9a:42:2e:f5:b5:6a:
17:46:a6:0b:ba:57:70:8f:77:31:ee:a6:6f:61:79:b3:62:90:
a8:8c:99:58:80:76:2c:df:b9:84:92:16:31:0c:22:c8:b6:cf:
b7:e0:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:03 2026 by rpki-client