Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199423.roa
File: AS199423.roa (raw, json)
Hash identifier: z9xzXkj18ADcZqSlvYB1wCx202fuwaQTmXTYzahD6Qc=
Subject key identifier: 80:48:44:23:8C:61:BF:CF:DB:00:49:E3:DC:F3:B3:84:03:15:84:09
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 47A41905641936948C344E1D3C982A438823FF65
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199423.roa
Signing time: Mon 06 Apr 2026 16:44:33 +0000
ROA not before: Mon 06 Apr 2026 16:39:33 +0000
ROA not after: Mon 05 Apr 2027 16:44:33 +0000
asID: 199423
IP address blocks: 143.14.23.0/24 maxlen: 24
150.241.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a4:19:05:64:19:36:94:8c:34:4e:1d:3c:98:2a:43:88:23:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 16:39:33 2026 GMT
Not After : Apr 5 16:44:33 2027 GMT
Subject: CN=804844238C61BFCFDB0049E3DCF3B38403158409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:63:09:82:9a:eb:08:f1:6b:f3:53:2c:10:
b1:5a:be:3e:10:32:a1:c6:b8:b2:7c:c0:5f:68:c4:
50:1e:45:3b:c2:03:df:bc:79:48:49:58:fb:72:0f:
fa:9d:a5:7b:10:bb:b7:ff:64:87:b4:d9:69:1f:98:
94:84:19:ab:e3:54:60:f2:f9:87:bb:6d:e0:4f:88:
89:f3:66:33:09:e2:c8:37:ea:ab:c0:cb:01:bd:10:
12:8e:17:8d:62:1d:e5:03:73:f7:b6:b3:39:94:79:
be:10:ef:99:7f:13:af:62:7b:80:10:51:ef:1b:7f:
3b:dc:b7:80:fb:dc:e9:74:ec:21:c2:08:b4:b2:71:
8d:6c:90:6d:52:00:48:70:84:ab:0b:7e:71:e7:fd:
c8:59:09:a9:2a:9d:01:67:8c:d8:86:73:77:61:39:
9a:d9:0e:25:18:c0:1f:c9:d7:b7:6d:7d:2c:9e:48:
5a:47:95:b0:fd:75:a7:c8:d3:36:3e:a6:d4:27:09:
05:77:73:3d:0f:29:9b:76:42:d3:15:ae:a8:f2:2b:
d8:b0:f8:da:0d:47:85:0e:0c:e8:a4:d3:8d:62:4b:
10:90:5a:c1:17:91:55:3f:ea:82:3b:4b:0f:da:f6:
a5:a2:49:09:7d:31:79:19:c9:62:f4:f7:cc:8c:65:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:44:23:8C:61:BF:CF:DB:00:49:E3:DC:F3:B3:84:03:15:84:09
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.23.0/24
150.241.140.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d9:d9:9b:b9:05:47:1f:51:38:d2:45:00:22:b8:c1:4b:e9:
fc:82:fd:90:62:c6:ba:ee:43:6e:a0:57:d2:16:05:1c:a9:0a:
c3:8d:c4:e0:d9:a3:14:4e:be:3b:2f:5d:e0:ed:52:02:3d:9d:
19:0c:f6:03:1c:2c:f7:fa:c8:73:d6:6e:9d:f2:ac:8e:05:6d:
92:16:7c:5e:bf:0a:dd:63:4a:05:8a:ab:9d:04:e3:bb:7c:a2:
e1:08:ea:6e:5e:af:66:03:7a:0c:cf:b3:e4:72:bd:36:ef:6d:
e0:4f:95:7b:86:0e:e1:d9:10:60:a5:7a:9f:1e:07:30:ef:37:
a7:12:2f:8b:e9:6e:52:50:2b:e0:20:a6:03:1e:56:cd:67:cd:
6c:0f:4b:e9:c5:1b:02:6a:25:43:0a:8c:f3:30:ba:51:94:c8:
fa:38:1f:e9:54:18:ba:2e:da:80:5b:e4:42:b8:8e:66:8b:3d:
94:06:94:77:ea:41:be:fb:7e:41:86:a7:18:66:41:5d:c3:de:
02:e4:9d:e5:b1:7e:53:d6:09:fb:41:be:76:24:ab:f6:a8:18:
32:cb:b9:c2:31:b3:b9:4f:55:9a:ba:68:e5:d7:9e:bf:2c:7e:
f4:98:80:40:0b:ac:4f:b2:09:d4:4b:ac:0e:c4:14:61:ab:9d:
de:10:45:8c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUR6QZBWQZNpSMNE4dPJgqQ4gj/2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA0MDYxNjM5MzNaFw0yNzA0MDUxNjQ0MzNaMDMxMTAvBgNV
BAMTKDgwNDg0NDIzOEM2MUJGQ0ZEQjAwNDlFM0RDRjNCMzg0MDMxNTg0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1WMJgprrCPFr81MsELFavj4Q
MqHGuLJ8wF9oxFAeRTvCA9+8eUhJWPtyD/qdpXsQu7f/ZIe02WkfmJSEGavjVGDy
+Ye7beBPiInzZjMJ4sg36qvAywG9EBKOF41iHeUDc/e2szmUeb4Q75l/E69ie4AQ
Ue8bfzvct4D73Ol07CHCCLSycY1skG1SAEhwhKsLfnHn/chZCakqnQFnjNiGc3dh
OZrZDiUYwB/J17dtfSyeSFpHlbD9dafI0zY+ptQnCQV3cz0PKZt2QtMVrqjyK9iw
+NoNR4UODOik041iSxCQWsEXkVU/6oI7Sw/a9qWiSQl9MXkZyWL098yMZduJAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUgEhEI4xhv8/bAEnj3POzhAMVhAkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5NDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw4X
AwQAlvGMMA0GCSqGSIb3DQEBCwUAA4IBAQAU2dmbuQVHH1E40kUAIrjBS+n8gv2Q
Ysa67kNuoFfSFgUcqQrDjcTg2aMUTr47L13g7VICPZ0ZDPYDHCz3+shz1m6d8qyO
BW2SFnxevwrdY0oFiqudBOO7fKLhCOpuXq9mA3oMz7Pkcr02723gT5V7hg7h2RBg
pXqfHgcw7zenEi+L6W5SUCvgIKYDHlbNZ81sD0vpxRsCaiVDCozzMLpRlMj6OB/p
VBi6LtqAW+RCuI5miz2UBpR36kG++35BhqcYZkFdw94C5J3lsX5T1gn7Qb52JKv2
qBgyy7nCMbO5T1Waumjl156/LH70mIBAC6xPsgnUS6wOxBRhq53eEEWM
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:04 2026 by rpki-client