Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199986.roa
File: AS199986.roa (raw, json)
Hash identifier: Eu/LM17k4yGah/ehTWeHtNfMLNC9J2N1kTsDlvkWFuw=
Subject key identifier: 1F:38:53:01:08:C0:D2:D9:D3:F2:04:60:47:1E:F2:58:C3:B4:6B:F4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69AD1E9F23C5B5AF1AA9E3455B851170010358F8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199986.roa
Signing time: Mon 30 Mar 2026 06:38:49 +0000
ROA not before: Mon 30 Mar 2026 06:33:49 +0000
ROA not after: Mon 29 Mar 2027 06:38:49 +0000
asID: 199986
IP address blocks: 168.222.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ad:1e:9f:23:c5:b5:af:1a:a9:e3:45:5b:85:11:70:01:03:58:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 30 06:33:49 2026 GMT
Not After : Mar 29 06:38:49 2027 GMT
Subject: CN=1F38530108C0D2D9D3F20460471EF258C3B46BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:b2:95:46:f5:c0:30:63:c4:41:61:c7:55:
90:f2:b3:7c:ff:10:0a:7f:ee:eb:da:29:ea:ec:36:
6e:18:ec:6a:c4:8f:ed:10:76:a9:af:9c:98:e6:7d:
0b:76:fc:17:a9:54:95:9c:c0:85:a0:6f:19:e3:af:
0e:55:d5:d1:dc:4d:71:ba:fd:1e:0a:87:d4:07:53:
18:1d:80:a1:47:79:f0:c4:cd:bd:af:32:16:9f:a9:
ec:b4:e4:64:18:be:89:6d:da:79:bf:cd:df:7a:d6:
41:0a:e6:9e:75:33:d8:91:cf:2a:01:38:cd:dc:23:
24:70:cb:af:79:ec:8b:a8:92:cb:fa:33:b7:4f:4d:
9e:06:e3:97:41:f6:5f:bd:fe:be:6f:5d:d2:e3:ff:
db:3c:e6:bd:6a:ac:74:71:f2:16:a5:33:24:b0:bb:
cf:22:d8:8a:90:e8:20:cc:21:08:d8:da:35:8c:0b:
4b:27:16:47:a4:77:c9:07:f2:c4:a8:c0:e2:6e:30:
73:51:6c:d5:1a:29:90:ba:ee:96:f7:88:20:20:bc:
65:3c:a1:76:a2:ef:cf:97:29:ed:ce:18:72:ed:d0:
82:22:e4:c0:64:87:ce:07:c5:78:8c:f8:14:8e:b4:
6e:1e:78:55:6e:3c:51:37:19:8f:f6:e9:66:ae:76:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:53:01:08:C0:D2:D9:D3:F2:04:60:47:1E:F2:58:C3:B4:6B:F4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199986.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:96:24:b3:c7:53:85:9b:77:91:6e:28:4e:91:bc:ad:da:5a:
4c:fa:a6:0e:5a:07:d3:de:36:59:35:02:c5:79:3d:c6:25:4c:
c7:25:29:77:30:f5:4c:85:9d:6f:1d:31:66:c3:be:6d:b1:27:
68:c5:f6:17:ff:f7:35:5c:0b:72:5c:5b:ba:96:ba:78:f5:fc:
0c:52:60:f4:ad:45:75:4a:b7:16:61:41:38:1e:8f:98:9e:62:
ac:d1:91:64:31:77:dc:4c:a4:9e:80:83:6b:06:7b:ce:a7:c3:
a4:26:ec:55:f2:c3:32:56:18:13:ab:18:58:fe:9f:8f:3e:5c:
62:40:6d:dd:95:47:e1:b7:81:ac:71:16:ea:98:45:11:5f:9a:
0e:c7:ce:40:8c:0b:37:fb:34:03:8f:89:bf:e1:f1:a0:ff:4f:
d2:ed:0d:e2:cb:7f:24:1c:76:87:1e:85:07:f9:5c:6a:f2:66:
f2:3d:9c:b8:4e:2b:47:99:bf:7c:f0:0b:07:e6:6d:5b:c8:2d:
ac:4a:f1:f5:fe:ff:54:fb:1e:d5:5a:94:4e:9c:06:82:17:e3:
0c:be:ce:7c:32:7b:eb:63:67:1a:1e:e8:4f:d1:83:17:f1:46:
40:42:67:44:c2:89:05:6a:70:be:84:21:8a:8d:fc:fc:79:a3:
86:7c:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:00 2026 by rpki-client