Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
File: AS199760.roa (raw, json)
Hash identifier: 93nD2iYkcNXjxSKQDPZxv3MjdzXd4uZ/ZXiaJw8IJTA=
Subject key identifier: 64:D1:F1:43:10:BF:60:40:7E:8C:C5:9C:F2:04:71:F8:89:83:BB:41
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4C847C2B11B60D9E598EA7F6F49D07E35E303CEB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
Signing time: Sun 03 Aug 2025 17:31:30 +0000
ROA not before: Sun 03 Aug 2025 17:26:30 +0000
ROA not after: Sun 02 Aug 2026 17:31:30 +0000
asID: 199760
IP address blocks: 148.135.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:84:7c:2b:11:b6:0d:9e:59:8e:a7:f6:f4:9d:07:e3:5e:30:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 17:26:30 2025 GMT
Not After : Aug 2 17:31:30 2026 GMT
Subject: CN=64D1F14310BF60407E8CC59CF20471F88983BB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:64:4a:00:6d:7d:5e:a4:02:27:5a:eb:5b:
69:99:11:c6:83:96:00:df:9d:9b:c2:b8:cb:2a:7d:
38:45:e2:21:24:43:1b:dc:e0:a4:12:bb:55:d3:14:
63:8f:96:6d:be:cb:39:c9:8a:9a:8c:58:41:42:a1:
92:23:60:d2:a3:72:ba:ba:1f:c3:28:0e:21:75:52:
61:08:d8:7e:2e:e6:c6:30:72:72:3a:a2:f5:b3:d2:
76:f5:8d:45:aa:55:4c:ee:9c:4b:b8:67:4b:a7:dd:
88:72:b4:d0:d2:49:50:e4:7f:26:50:90:17:0c:2a:
b1:63:3d:50:d2:59:43:fb:27:23:cb:1c:5c:01:9d:
a0:3e:61:1d:9d:17:c1:e8:a2:4e:e8:35:4d:0c:f8:
ee:68:da:fc:63:f3:26:e6:cf:e4:13:73:92:fc:ba:
42:90:57:63:24:72:16:d1:2b:68:7c:96:2d:f4:f5:
9e:bb:42:16:6a:48:62:fa:a4:94:04:cf:02:12:8f:
3d:4c:76:0d:21:f7:58:24:cd:5b:0a:db:15:c2:1a:
b0:ec:10:cf:fa:24:e6:dc:bc:2a:9c:87:b1:64:e6:
e7:33:ae:43:fc:6d:61:57:9f:b2:02:26:b5:f9:51:
c0:2c:de:ea:a9:85:17:36:90:87:77:a1:f9:cb:7d:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:F1:43:10:BF:60:40:7E:8C:C5:9C:F2:04:71:F8:89:83:BB:41
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.192.0/24
Signature Algorithm: sha256WithRSAEncryption
89:15:fc:cd:ce:53:13:9e:d2:6d:f8:ba:41:e9:f4:58:96:08:
cf:0d:42:4b:4d:ee:c0:04:a7:96:af:58:fb:fd:49:86:67:17:
68:3a:f1:e0:a8:0e:a4:2c:d1:bf:75:10:7d:3f:e4:23:f6:3d:
31:38:d1:cb:a0:84:d7:5a:80:a4:aa:18:1c:d4:08:01:df:b1:
72:21:4e:df:4e:46:46:7f:74:d0:f2:55:e9:0c:0c:48:e8:86:
9f:1e:34:aa:9a:9d:c1:35:94:b3:f0:cb:cb:f6:7e:34:4c:41:
a0:44:83:f2:f3:a1:51:d2:1f:ca:7f:c8:78:b6:59:6e:d6:c4:
a8:9c:e5:76:2b:2a:00:d0:1f:d9:41:79:ea:bd:79:fc:7d:75:
13:00:34:3c:c3:0c:e5:02:2c:80:8b:a5:bc:01:b9:7c:07:22:
72:47:da:cb:16:6e:9c:99:cf:99:c1:40:20:2d:5f:91:75:1f:
3f:40:53:85:bd:76:5a:03:5c:87:c8:21:52:e7:0b:80:64:eb:
b7:5c:03:33:fa:39:f1:40:98:ab:db:1b:7a:57:15:cd:09:aa:
13:2f:4a:23:89:2b:9a:de:ef:d6:8b:80:3a:1f:37:b6:23:51:
85:56:28:c1:93:d6:39:07:2c:4f:09:4e:2b:58:44:f6:5f:0f:
0e:76:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:11 2025 by rpki-client