Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199959.roa
File: AS199959.roa (raw, json)
Hash identifier: osF65d+tPba+hxg67M5KDC2FOIbHNMSOjfdUHrxJgWw=
Subject key identifier: 36:54:7E:B0:72:F6:A1:BE:C2:6C:18:7A:48:D1:63:00:63:DC:A5:0C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4DD508C9391EA0BB818BC0E341DAE316D3DDBE9D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199959.roa
Signing time: Sat 28 Feb 2026 00:06:05 +0000
ROA not before: Sat 28 Feb 2026 00:01:05 +0000
ROA not after: Sat 27 Feb 2027 00:06:05 +0000
asID: 199959
IP address blocks: 143.20.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d5:08:c9:39:1e:a0:bb:81:8b:c0:e3:41:da:e3:16:d3:dd:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Feb 28 00:01:05 2026 GMT
Not After : Feb 27 00:06:05 2027 GMT
Subject: CN=36547EB072F6A1BEC26C187A48D1630063DCA50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:40:b6:a3:51:cd:39:47:be:83:3d:a9:2a:
80:fe:1a:5e:56:2c:64:54:d6:93:f6:76:b9:74:3a:
bf:6c:1f:2b:c1:ff:41:15:f5:59:11:4a:95:cb:cf:
50:fc:5c:00:78:a3:f7:81:df:a4:bf:22:a8:95:b0:
5e:52:e0:1b:c8:9e:29:22:06:be:4d:7a:38:82:1c:
a1:0d:9b:2f:37:ea:13:07:60:d2:52:23:ba:86:cc:
59:80:9f:5b:f6:0c:2f:1a:b7:30:54:b2:35:0a:69:
5a:39:65:ef:81:44:93:53:af:b0:4d:45:74:3c:fa:
ea:7c:b2:86:3e:d5:b0:78:35:23:d9:24:5f:40:15:
5e:3a:4e:c6:8a:c0:13:93:69:54:68:2f:77:84:80:
88:87:18:c0:98:70:9e:c8:0e:f3:d2:3a:d2:c5:e2:
e4:be:82:08:33:c6:a7:91:2e:a5:b4:01:aa:d9:92:
a1:e2:a9:fb:30:e6:9b:59:a2:ba:c3:ef:19:0a:7d:
56:ed:d3:8b:0d:f7:48:42:0d:1d:44:ef:a2:42:df:
9c:7d:10:f0:1c:15:c0:57:12:a5:06:45:04:95:ea:
b3:02:a4:3f:49:ec:7e:41:04:7b:86:27:e6:02:07:
2f:a1:d4:16:7b:dc:cc:b5:36:fa:d6:7d:c7:a7:41:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:54:7E:B0:72:F6:A1:BE:C2:6C:18:7A:48:D1:63:00:63:DC:A5:0C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:1b:ee:96:91:67:2f:b9:4f:ab:93:87:c4:b6:bd:b2:17:9f:
3d:1e:0f:de:47:07:c8:55:f1:d4:a8:0e:48:6f:bc:ba:9e:98:
f6:7a:60:7a:37:09:04:d7:16:47:93:78:7f:4b:2c:f8:1c:1f:
d6:c1:84:93:83:35:72:6e:f2:a9:ab:ef:6e:27:2d:85:74:75:
49:4c:f8:b0:55:13:62:ef:32:6e:08:d0:0d:da:06:c4:d7:0a:
4e:dd:72:1f:a9:1c:59:05:a6:70:cd:e9:27:84:b1:a7:56:60:
15:24:e8:18:bf:e0:e9:8b:a3:e5:18:3f:ed:4f:a6:ab:f0:46:
32:4e:f1:30:60:06:9b:9c:3b:31:6a:a0:79:bc:66:b8:b7:e9:
5a:f4:d7:0a:b1:93:8c:ab:7f:9b:2f:36:ad:d2:73:1d:a9:11:
33:4d:a2:99:78:56:44:81:d4:fd:db:b8:e1:65:c3:3d:a6:d5:
f3:94:3a:e5:d6:ba:11:28:28:d9:4b:fd:22:0b:11:98:22:2b:
29:f8:d6:12:5b:ba:8e:a4:6a:0e:e1:9f:8b:72:86:46:52:2d:
53:20:ad:fd:4a:14:d5:57:da:8b:1a:54:7d:ca:e1:f8:fc:cc:
5c:2b:60:25:39:14:62:1a:ae:e5:59:5a:89:d0:b4:d4:dd:77:
69:88:cc:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTdUIyTkeoLuBi8DjQdrjFtPdvp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjAyMjgwMDAxMDVaFw0yNzAyMjcwMDA2MDVaMDMxMTAvBgNV
BAMTKDM2NTQ3RUIwNzJGNkExQkVDMjZDMTg3QTQ4RDE2MzAwNjNEQ0E1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5EC2o1HNOUe+gz2pKoD+Gl5W
LGRU1pP2drl0Or9sHyvB/0EV9VkRSpXLz1D8XAB4o/eB36S/IqiVsF5S4BvIniki
Br5NejiCHKENmy836hMHYNJSI7qGzFmAn1v2DC8atzBUsjUKaVo5Ze+BRJNTr7BN
RXQ8+up8soY+1bB4NSPZJF9AFV46TsaKwBOTaVRoL3eEgIiHGMCYcJ7IDvPSOtLF
4uS+gggzxqeRLqW0AarZkqHiqfsw5ptZorrD7xkKfVbt04sN90hCDR1E76JC35x9
EPAcFcBXEqUGRQSV6rMCpD9J7H5BBHuGJ+YCBy+h1BZ73My1NvrWfcenQRODAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUNlR+sHL2ob7CbBh6SNFjAGPcpQwwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTk5OTU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjxTQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCoG+6WkWcvuU+rk4fEtr2yF589Hg/eRwfIVfHU
qA5Ib7y6npj2emB6NwkE1xZHk3h/Syz4HB/WwYSTgzVybvKpq+9uJy2FdHVJTPiw
VRNi7zJuCNAN2gbE1wpO3XIfqRxZBaZwzeknhLGnVmAVJOgYv+Dpi6PlGD/tT6ar
8EYyTvEwYAabnDsxaqB5vGa4t+la9NcKsZOMq3+bLzat0nMdqREzTaKZeFZEgdT9
27jhZcM9ptXzlDrl1roRKCjZS/0iCxGYIisp+NYSW7qOpGoO4Z+LcoZGUi1TIK39
ShTVV9qLGlR9yuH4/MxcK2AlORRiGq7lWVqJ0LTU3XdpiMwN
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:02 2026 by rpki-client