Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
File: AS199760.roa (raw, json)
Hash identifier: CsXVoEPG62lNCXe6R2kOOyMv9qW6g58YGipmU5yUYPA=
Subject key identifier: 97:F5:45:8F:20:84:15:6A:F5:4E:2A:B3:79:88:D0:AA:1C:10:09:1F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6FACF22C859749D7F333DC047279CFED70BCC159
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
Signing time: Sun 08 Feb 2026 13:24:23 +0000
ROA not before: Sun 08 Feb 2026 13:19:23 +0000
ROA not after: Sun 07 Feb 2027 13:24:23 +0000
asID: 199760
IP address blocks: 155.117.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ac:f2:2c:85:97:49:d7:f3:33:dc:04:72:79:cf:ed:70:bc:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 8 13:19:23 2026 GMT
Not After : Feb 7 13:24:23 2027 GMT
Subject: CN=97F5458F2084156AF54E2AB37988D0AA1C10091F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:d3:31:01:2f:9b:bd:34:a6:d4:15:67:78:
19:7f:cc:60:a3:1c:71:cc:02:2a:bd:88:13:ff:10:
42:a4:c6:bb:21:ea:c5:e8:b7:92:b1:51:35:eb:0e:
48:81:a8:29:03:bc:13:29:2b:13:01:72:c8:11:6b:
ad:fe:85:d8:f2:d3:78:20:23:96:2c:3c:9d:b1:b8:
65:e5:be:40:b6:94:5e:94:70:81:94:ba:d4:08:f3:
c0:e0:14:51:47:49:86:e7:3b:ec:8f:bd:77:12:39:
0e:55:bc:87:db:80:1b:3b:17:57:39:15:06:3a:38:
bd:55:f7:bf:73:35:94:ae:55:d6:6a:c2:f3:47:49:
58:25:bc:32:08:bb:ae:57:5a:30:e2:38:27:77:4e:
69:18:79:67:d7:94:23:7f:0f:6d:c8:75:70:2a:3b:
dc:34:3b:3d:f7:1f:5b:eb:67:d9:00:38:3a:23:38:
01:d5:a7:0c:e3:bc:d4:1d:11:a2:fc:08:b4:9e:18:
a3:39:85:73:c4:40:1f:28:f0:d9:fc:54:08:40:c4:
56:fc:e9:05:fc:51:ad:51:c0:9b:03:e3:c2:c8:b7:
27:96:8d:b8:93:06:fb:cd:08:16:c3:44:12:71:fa:
5f:4b:b9:2d:68:d1:cb:4d:b2:ac:4b:64:11:51:e8:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:45:8F:20:84:15:6A:F5:4E:2A:B3:79:88:D0:AA:1C:10:09:1F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.145.0/24
Signature Algorithm: sha256WithRSAEncryption
10:32:2d:aa:d0:b4:bb:3a:70:69:ef:9f:c2:5c:10:a9:89:84:
03:a9:95:e7:ed:9a:e1:8c:0c:96:2a:70:d6:d5:e5:68:ea:15:
79:14:09:af:73:e4:f3:23:e9:9f:21:c7:c7:40:f3:6d:18:4f:
91:95:41:de:cd:05:55:cf:3d:0a:a3:3a:eb:46:02:a1:d0:31:
b7:38:9d:a4:04:48:35:ec:4d:bf:70:c0:da:f9:1e:22:c5:f9:
5f:fb:e1:a3:7e:c6:9a:07:bf:c0:1c:09:71:a9:01:d7:54:c6:
87:8e:32:e2:5d:ad:60:37:93:96:2b:a4:cb:f6:93:01:46:4b:
77:f0:8c:10:59:c6:a2:db:4a:ff:30:54:79:04:86:2f:ec:f6:
c5:83:77:32:34:af:e2:0e:ec:81:c4:ba:0e:3b:dc:7d:5e:99:
50:0c:e1:7d:ff:46:28:1e:6c:f0:0b:e6:f2:4f:bd:67:16:ae:
7e:ad:91:cc:9a:ab:c6:45:9c:b8:d5:a8:ec:14:db:0f:bd:b9:
5f:0d:a2:25:10:b3:69:78:6d:6b:66:9c:a6:29:a5:a1:80:34:
a4:1e:1e:d9:e9:e8:94:0f:3a:e6:19:8e:1d:a8:9c:e5:9c:aa:
40:ba:63:34:88:68:b6:f7:a1:26:65:cc:6e:07:b3:1a:2b:cb:
27:fe:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:40 2026 by rpki-client