Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199454.roa
File: AS199454.roa (raw, json)
Hash identifier: YDEJBBPmQkcHcMRvgRpazcyqCj2gvX1cwULNjxhihNE=
Subject key identifier: FB:A7:8A:42:C5:99:CF:19:F1:94:EB:6B:94:48:CE:3B:64:C3:73:F3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7277228D0EFA45079A76394A425F8008DF8360E6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199454.roa
Signing time: Sat 04 Apr 2026 15:20:52 +0000
ROA not before: Sat 04 Apr 2026 15:15:52 +0000
ROA not after: Sat 03 Apr 2027 15:20:52 +0000
asID: 199454
IP address blocks: 162.141.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:77:22:8d:0e:fa:45:07:9a:76:39:4a:42:5f:80:08:df:83:60:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 4 15:15:52 2026 GMT
Not After : Apr 3 15:20:52 2027 GMT
Subject: CN=FBA78A42C599CF19F194EB6B9448CE3B64C373F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fd:1f:fd:d3:e5:ac:13:87:0e:10:32:aa:2a:
7d:73:9a:a0:20:fe:f8:6f:c5:9f:b4:72:6a:4c:10:
89:ab:a4:1e:d4:d2:fb:e7:21:69:a9:e5:7d:f7:88:
c0:44:06:e7:0e:21:6e:a0:89:a2:15:5f:67:e4:ec:
9a:52:7a:62:21:94:38:14:91:f7:91:b4:02:52:02:
40:7d:16:9d:38:fa:c1:b2:0e:32:4e:9b:0c:62:da:
69:7c:fb:f6:26:67:a4:ee:f0:ed:41:53:3b:49:50:
23:68:4c:44:4e:5d:89:0e:42:ce:dc:16:10:f2:c8:
a6:ae:88:f1:b1:ae:93:8e:2c:15:6b:42:81:80:10:
e9:4b:23:cf:d7:4f:53:ce:96:8b:ee:ef:a7:4b:f4:
68:5e:59:5e:c8:bb:5c:f5:8d:3c:83:0b:9a:d6:52:
cf:db:31:65:0c:7e:d0:1d:4f:72:12:25:28:fd:54:
7a:09:1f:36:9a:e3:01:f6:85:09:73:11:63:3c:c8:
0d:8e:09:09:47:7a:4a:3b:2e:3f:4a:5f:05:08:71:
bd:11:1c:a5:63:7b:78:b2:30:51:35:94:2a:e9:48:
23:8b:b3:1c:06:ec:99:05:6e:fd:cf:06:4f:6c:23:
18:54:c9:d5:4e:5a:e9:e0:a0:a4:60:d7:a9:97:31:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:8A:42:C5:99:CF:19:F1:94:EB:6B:94:48:CE:3B:64:C3:73:F3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199454.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.163.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ec:f6:f5:2b:12:c1:a3:d5:8b:e9:19:6c:41:4a:0e:ae:c7:
0f:ac:1e:6b:24:30:13:eb:39:61:cb:23:9c:23:d4:cd:39:73:
b5:1b:03:2c:c6:2a:bb:b9:31:44:68:3b:fd:cb:49:a6:f0:b2:
a8:5d:09:0c:40:e3:74:5a:fa:71:37:92:0f:a8:72:1e:7d:93:
09:3f:60:7f:9c:59:5f:90:9f:a8:35:13:9e:e9:57:e2:4b:d1:
a0:3c:90:4a:eb:29:30:a9:19:66:c9:1a:13:09:6a:d3:f3:6b:
bf:b4:5b:bf:a1:3e:db:c1:d8:ed:79:f9:30:e6:43:0b:36:28:
25:5a:ca:76:1c:3a:4a:d7:28:60:5f:82:88:96:10:ef:d9:af:
11:74:09:61:6f:81:e2:46:4a:0c:94:e5:38:6f:ad:fe:ab:17:
03:b4:4c:32:48:6e:cc:a2:e8:dd:56:29:ae:cd:cf:15:eb:e7:
be:42:49:c8:60:68:a9:68:d7:51:28:0c:fc:68:97:f1:c1:aa:
1c:6a:ca:93:8b:68:09:34:15:8e:e6:b5:ab:5e:b5:14:82:1f:
f4:36:51:f6:fb:2f:22:be:e8:e7:36:de:6e:d9:80:ff:86:ad:
9d:a6:16:db:bc:02:36:51:93:b7:b7:09:73:f1:21:eb:d5:48:
73:3a:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:00 2026 by rpki-client