Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
File: AS198487.roa (raw, json)
Hash identifier: DnU5T5An7ritaREgtrhOKZf4bOeMCA9c+sbBWHitA8o=
Subject key identifier: 6F:9E:60:1C:C7:7E:81:FE:85:57:2A:D9:57:D7:37:8A:AB:8A:8F:2D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3BCB19B1D5121B8380AF88FB7E6FA92C76018CCD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
Signing time: Thu 11 Jun 2026 07:25:38 +0000
ROA not before: Thu 11 Jun 2026 07:20:38 +0000
ROA not after: Thu 10 Jun 2027 07:25:38 +0000
asID: 198487
IP address blocks: 168.222.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cb:19:b1:d5:12:1b:83:80:af:88:fb:7e:6f:a9:2c:76:01:8c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 11 07:20:38 2026 GMT
Not After : Jun 10 07:25:38 2027 GMT
Subject: CN=6F9E601CC77E81FE85572AD957D7378AAB8A8F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:b1:31:49:d6:7f:83:d9:14:1c:1a:a9:c6:
37:fa:cd:94:b5:75:15:9d:08:07:98:f3:62:93:09:
00:58:24:2c:54:e4:9b:3f:ee:10:39:08:ef:07:57:
84:19:93:53:30:5e:cb:c0:e0:8f:35:9b:86:56:31:
7f:70:d1:0e:bb:99:3c:56:43:18:32:5a:eb:40:ad:
d8:7b:79:10:54:99:5b:8b:2b:21:8c:65:ec:96:b9:
5b:a7:ab:58:16:fa:d8:14:ab:58:93:73:44:af:30:
73:5e:cb:f9:df:4f:63:3c:b4:ed:b0:7c:bd:68:de:
17:a5:0e:ca:c0:db:c8:07:01:31:e4:29:38:96:7b:
26:89:3e:7d:f8:18:82:90:ef:18:97:43:dd:e3:18:
b5:1d:78:9f:59:f1:57:5d:c8:02:be:ef:77:20:5c:
11:42:74:4e:ba:4c:3d:05:f8:2a:4d:a1:79:fe:fc:
26:5d:b9:d5:d6:df:64:b9:44:01:2c:2b:cc:cc:ec:
dc:8c:79:5d:35:d4:f6:f1:99:fa:d0:98:e6:b6:18:
27:3e:f0:98:65:33:d6:d9:bc:f8:28:eb:39:95:f3:
bc:ae:bb:59:80:d6:84:63:3b:d8:a4:5c:9a:6d:0d:
4e:52:39:aa:8b:41:61:82:20:e3:04:9e:c7:80:cc:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:60:1C:C7:7E:81:FE:85:57:2A:D9:57:D7:37:8A:AB:8A:8F:2D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3f:f7:38:02:c0:38:98:4a:90:f3:5a:5f:07:e4:a5:19:9a:
50:3c:57:b3:29:3f:32:5b:a8:de:bd:2b:2f:1b:b8:8d:13:8b:
d9:e3:98:ab:bb:b3:92:7b:b3:a7:ac:63:88:e1:b5:be:ed:93:
6a:09:84:f3:1c:c5:90:fd:bb:91:cc:50:8a:a8:98:d3:17:d1:
3d:2f:a2:f0:39:48:2f:e1:ff:38:74:68:0d:56:47:1d:85:4f:
4d:cf:58:bf:10:7b:d0:9d:24:b9:75:d3:bb:7a:7e:2e:9a:b0:
b4:74:b9:54:39:cf:d0:88:db:8a:0e:8f:08:b8:f4:03:d1:fb:
e7:73:69:7b:35:4b:02:52:72:e3:b0:ba:d4:11:16:be:d5:33:
aa:33:88:71:0f:ec:f8:71:02:7e:35:37:ef:b6:a9:eb:e1:1e:
15:f1:ea:96:98:4b:df:00:9a:5e:a7:61:39:8c:9d:6a:2a:d2:
02:70:a0:cb:c4:5a:98:07:34:14:f3:89:b4:c9:db:cc:61:c6:
ee:b8:b9:a7:8f:91:db:ed:44:93:05:7e:52:05:66:e3:0f:0f:
f1:f8:e6:4a:79:aa:2d:7b:cf:1a:96:9a:d9:99:0a:3e:3e:f3:
5c:96:dc:41:f7:ce:fe:da:71:d6:47:50:74:29:67:b8:dc:a4:
f5:d5:48:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUO8sZsdUSG4OAr4j7fm+pLHYBjM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MTEwNzIwMzhaFw0yNzA2MTAwNzI1MzhaMDMxMTAvBgNV
BAMTKDZGOUU2MDFDQzc3RTgxRkU4NTU3MkFEOTU3RDczNzhBQUI4QThGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsrExSdZ/g9kUHBqpxjf6zZS1
dRWdCAeY82KTCQBYJCxU5Js/7hA5CO8HV4QZk1MwXsvA4I81m4ZWMX9w0Q67mTxW
QxgyWutArdh7eRBUmVuLKyGMZeyWuVunq1gW+tgUq1iTc0SvMHNey/nfT2M8tO2w
fL1o3helDsrA28gHATHkKTiWeyaJPn34GIKQ7xiXQ93jGLUdeJ9Z8VddyAK+73cg
XBFCdE66TD0F+CpNoXn+/CZdudXW32S5RAEsK8zM7NyMeV011PbxmfrQmOa2GCc+
8JhlM9bZvPgo6zmV87yuu1mA1oRjO9ikXJptDU5SOaqLQWGCIOMEnseAzGanAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUb55gHMd+gf6FVyrZV9c3iquKjy0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk4NDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqN5H
MA0GCSqGSIb3DQEBCwUAA4IBAQC5P/c4AsA4mEqQ81pfB+SlGZpQPFezKT8yW6je
vSsvG7iNE4vZ45iru7OSe7OnrGOI4bW+7ZNqCYTzHMWQ/buRzFCKqJjTF9E9L6Lw
OUgv4f84dGgNVkcdhU9Nz1i/EHvQnSS5ddO7en4umrC0dLlUOc/QiNuKDo8IuPQD
0fvnc2l7NUsCUnLjsLrUERa+1TOqM4hxD+z4cQJ+NTfvtqnr4R4V8eqWmEvfAJpe
p2E5jJ1qKtICcKDLxFqYBzQU84m0ydvMYcbuuLmnj5Hb7USTBX5SBWbjDw/x+OZK
eaote88alprZmQo+PvNcltxB987+2nHWR1B0KWe43KT11Uiz
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:57 2026 by rpki-client