Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198087.roa
File: AS198087.roa (raw, json)
Hash identifier: mGv+7mkkdHiHdBwoSfccm1bcyQnsGslQ9/c7kpU5FVg=
Subject key identifier: 48:CC:18:96:EE:86:77:01:9B:BE:A4:86:E1:61:1A:1D:F7:D4:AE:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6F0D2C4439F6B9F7D1F6C42C6C8424820AD98C40
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198087.roa
Signing time: Wed 08 Apr 2026 06:49:28 +0000
ROA not before: Wed 08 Apr 2026 06:44:28 +0000
ROA not after: Wed 07 Apr 2027 06:49:28 +0000
asID: 198087
IP address blocks: 143.14.7.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
168.222.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:0d:2c:44:39:f6:b9:f7:d1:f6:c4:2c:6c:84:24:82:0a:d9:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 8 06:44:28 2026 GMT
Not After : Apr 7 06:49:28 2027 GMT
Subject: CN=48CC1896EE8677019BBEA486E1611A1DF7D4AE3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:69:eb:e0:32:f9:48:12:0a:cd:08:af:50:
ec:27:02:ae:f2:41:52:96:f6:8b:bc:af:e4:3b:9a:
d0:19:75:b9:cd:c6:7c:78:ce:7f:47:b6:65:bb:76:
65:3b:54:f7:f5:09:4c:85:39:65:de:25:64:d7:f7:
53:d3:62:2b:72:53:e3:24:3f:0f:5c:50:b3:7e:e4:
40:5e:60:1f:3b:d4:ad:cd:16:94:68:e6:1e:e1:f8:
cd:8e:bf:ff:dc:6c:49:08:1e:70:25:5a:1d:77:54:
5b:18:55:5f:5f:ef:f8:3a:14:5e:4e:3f:64:12:0f:
39:84:c5:0d:eb:97:1a:92:ab:dc:e3:fe:16:47:7d:
e8:de:3c:3f:b8:b1:4c:82:b0:4a:4e:37:1b:2c:64:
8c:dd:52:98:64:f2:2c:ad:b6:a5:a9:f1:32:69:31:
e0:40:ba:b8:02:a9:b8:5a:44:99:b5:0c:35:2e:4b:
f5:91:a1:88:8e:cc:42:83:43:af:56:44:85:66:3d:
70:ef:ca:a8:40:10:73:9c:b1:a6:6c:5f:95:8a:fd:
8e:8e:13:48:e7:79:0d:34:51:2c:53:f4:c5:00:ce:
9c:a8:b7:7c:43:92:76:5c:b3:3e:d0:e1:13:18:a0:
24:5f:b9:85:33:62:e7:89:8c:32:82:85:77:0c:02:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:18:96:EE:86:77:01:9B:BE:A4:86:E1:61:1A:1D:F7:D4:AE:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.7.0/24
150.241.131.0/24
162.141.4.0/24
167.148.200.0/24
168.222.8.0/24
Signature Algorithm: sha256WithRSAEncryption
79:94:37:3e:e4:89:b5:d8:1d:32:27:45:64:88:c4:b4:29:8a:
11:ae:bc:26:9d:f2:45:88:b5:96:9b:69:93:bc:74:06:fb:df:
6f:06:c0:03:81:db:e4:4d:94:ee:76:86:61:ba:0a:53:da:9a:
e0:37:11:45:8b:4a:fc:71:5b:ed:82:ec:4e:2d:6e:54:e4:29:
3c:c5:fc:2b:7c:42:d4:7f:9a:44:9a:81:60:2b:23:2c:14:44:
a0:56:14:82:69:73:13:8b:ae:d1:bd:12:d2:7a:ae:bf:2f:85:
3c:5f:a2:1f:8f:5f:aa:42:12:83:08:06:a0:e5:d1:2a:5a:de:
b2:b3:82:14:13:66:b9:01:0b:15:cc:25:6d:6b:fb:15:d1:cd:
df:e4:45:11:c1:36:e5:0e:4f:32:c6:ae:37:34:51:5a:67:05:
2c:e6:8c:c9:12:00:3e:c5:ae:82:45:88:f7:f2:7b:c0:be:2b:
82:da:56:6a:81:5a:d4:d7:04:e4:5e:14:ec:95:52:24:25:c0:
c8:56:a1:ad:27:37:a7:1b:51:02:ce:73:4d:cf:d8:0a:22:b4:
45:5a:96:31:b6:5b:5e:e9:6f:3c:0a:73:8e:60:3d:60:89:09:
f7:60:31:15:ea:c8:e5:40:a8:1d:9e:4e:8b:a7:16:aa:aa:f6:
9f:09:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:33 2026 by rpki-client