Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: MNFzZDRwNvB4zKsW6DPukZ8pdQfBAE54zz67GPXYj6g=
Subject key identifier: BE:45:14:16:9B:ED:59:E0:2A:39:49:A7:11:72:A5:D0:5B:2D:98:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 19ACDD1369865A43A324AF8442BC746A98DC68CB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199741.roa
Signing time: Tue 27 Oct 2026 19:21:46 +0000
ROA not before: Tue 27 Oct 2026 19:16:46 +0000
ROA not after: Tue 26 Oct 2027 19:21:46 +0000
asID: 199741
IP address blocks: 147.79.12.0/24 maxlen: 24
147.79.13.0/24 maxlen: 24
155.117.228.0/24 maxlen: 24
167.148.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ac:dd:13:69:86:5a:43:a3:24:af:84:42:bc:74:6a:98:dc:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 27 19:16:46 2026 GMT
Not After : Oct 26 19:21:46 2027 GMT
Subject: CN=BE4514169BED59E02A3949A71172A5D05B2D987A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:44:70:1c:be:98:d2:e8:18:33:8f:06:c3:
93:78:76:16:69:6d:c3:14:96:90:c1:87:33:c0:67:
03:25:7e:5f:c1:3c:c4:6a:f2:b7:67:9e:95:57:58:
5f:51:9e:67:b0:c8:59:ea:0a:1e:b3:04:3d:9d:ba:
e1:72:0b:f3:66:4d:82:be:2c:ee:a8:15:90:9d:0f:
1a:60:7b:2c:3a:65:73:ca:c7:04:c1:f9:e0:16:43:
fc:12:62:72:be:ee:63:db:c4:0a:41:41:0e:de:10:
7e:d3:1a:d1:8e:a8:d2:6b:22:cf:76:9c:40:7e:da:
c9:5a:1f:41:20:a4:d0:bb:1a:4b:fa:d9:3d:ad:d0:
2d:88:9b:40:3e:4a:ae:fe:00:e5:5d:fe:e1:01:0a:
d9:2d:0d:36:19:09:e1:25:84:92:a6:d3:ff:30:a4:
44:65:20:6a:88:ac:2d:b2:dd:40:95:4d:0d:98:e6:
fb:1c:5e:a7:f3:87:db:8e:52:dd:a1:ec:3c:e0:88:
e0:fc:f8:02:29:5f:1a:e4:89:a6:72:6a:db:4a:ae:
d9:00:40:78:50:1b:19:0b:fe:e3:4c:87:10:9b:61:
2d:63:7d:8c:5c:c0:ea:36:65:f8:b2:72:df:a4:6b:
45:80:bd:06:98:af:9d:cb:cf:36:0c:27:66:10:d3:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:14:16:9B:ED:59:E0:2A:39:49:A7:11:72:A5:D0:5B:2D:98:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.12.0/23
155.117.228.0/24
167.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fa:3d:ba:a4:e4:72:eb:fa:cf:44:a9:7e:e4:93:6c:fc:99:
eb:2d:c1:6e:5a:86:35:1a:de:eb:ae:d8:2e:70:53:8b:01:5f:
93:6d:43:18:45:27:0e:75:67:be:03:2e:ff:98:2c:a2:68:77:
c3:41:4a:f6:ec:ee:55:9d:a0:2f:43:b1:cf:3c:f3:af:f0:d9:
ea:43:1e:e8:df:df:61:30:ca:48:be:31:82:20:61:bf:19:43:
1e:05:f4:5f:31:ee:bf:13:d0:f7:12:7e:7f:e1:4e:01:87:7d:
60:1b:a1:cc:27:e2:c7:8a:39:41:af:77:7f:f5:10:13:f9:2d:
5d:bd:03:6c:1d:5d:93:c6:17:23:da:f1:c1:d3:39:5a:56:53:
26:02:5b:cb:ac:ca:38:5d:6b:5f:6f:e0:a9:91:cd:51:da:31:
ba:66:28:14:c9:de:4e:c9:a5:42:b4:af:95:81:c6:60:ef:93:
81:f4:c0:c2:1b:cf:48:c5:3b:fb:d3:d3:87:97:98:45:01:5f:
8b:19:b1:e3:26:85:1e:b6:7a:6c:f1:2d:1c:41:ee:64:e5:e8:
ba:92:7d:26:5f:3c:d5:f0:51:4c:b8:93:11:ae:be:8a:db:da:
38:96:4d:c0:63:b9:20:1d:2e:04:bd:37:1b:9b:db:ae:88:59:
73:3e:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:59:32 2026 by rpki-client