Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: Ioz69Ke6dXuxivbfZUitLyB1tRcpdW/4RjhIA3ZcXUc=
Subject key identifier: EA:6B:B6:04:6F:93:D9:2B:04:D2:BD:93:CE:2E:F8:CD:B1:1F:0F:D3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6D4598DB059498503AC3F8EC79BE76CE9581A72C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
Signing time: Wed 04 Nov 2026 20:12:03 +0000
ROA not before: Wed 04 Nov 2026 20:07:03 +0000
ROA not after: Wed 03 Nov 2027 20:12:03 +0000
asID: 198566
IP address blocks: 96.62.249.0/24 maxlen: 24
140.233.167.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
146.103.28.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.90.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.72.0/24 maxlen: 24
168.222.117.0/24 maxlen: 24
168.222.118.0/24 maxlen: 24
168.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:45:98:db:05:94:98:50:3a:c3:f8:ec:79:be:76:ce:95:81:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 4 20:07:03 2026 GMT
Not After : Nov 3 20:12:03 2027 GMT
Subject: CN=EA6BB6046F93D92B04D2BD93CE2EF8CDB11F0FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:9c:af:79:b4:6c:2c:18:21:5f:36:9c:87:
68:ba:17:67:09:ec:e2:fc:6d:cc:4d:8f:89:df:32:
a9:fc:dc:6f:c6:aa:81:05:7b:e5:ac:e2:e1:83:bd:
07:d6:83:ce:d5:cc:f9:26:2e:f1:e3:05:1d:26:b1:
f6:33:2c:35:01:5a:82:a5:c7:52:d2:d3:85:32:ef:
49:f2:8b:18:13:b4:7b:80:4c:fe:07:fc:de:e5:07:
42:59:da:49:16:4a:49:ef:26:cf:d9:79:21:af:08:
33:60:ea:ed:32:25:0e:48:bc:c9:95:79:84:54:13:
58:6d:44:49:d5:5e:db:29:69:76:95:59:8f:ab:b0:
4f:29:ce:46:d6:ac:77:10:2a:b3:fd:f1:01:4a:78:
b7:21:15:61:67:86:e6:8f:d3:81:48:5a:4f:83:ab:
cf:8a:dc:68:7f:c5:da:44:7b:d7:f5:41:ed:bd:df:
e7:15:03:94:3d:6c:d7:75:f6:ac:95:ab:2a:16:df:
c5:c6:4e:41:56:87:2e:6b:02:cc:c4:37:d6:1e:1c:
29:2f:f7:2f:11:be:22:80:5e:1f:9f:8d:b6:5b:e5:
78:d9:9c:49:d7:82:36:98:70:c9:fc:7d:0a:66:83:
75:95:c7:e0:7e:12:76:90:a5:f8:79:a4:e1:25:40:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:B6:04:6F:93:D9:2B:04:D2:BD:93:CE:2E:F8:CD:B1:1F:0F:D3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.249.0/24
140.233.167.0/24
140.233.184.0/24
146.103.28.0/24
150.241.254.0/24
162.141.70.0/24
162.141.90.0/24
167.148.215.0/24
168.222.12.0/24
168.222.72.0/24
168.222.117.0-168.222.119.255
Signature Algorithm: sha256WithRSAEncryption
b5:fb:99:71:4d:b8:d9:fe:ec:ee:bd:44:5b:37:75:d1:05:46:
62:94:36:3c:42:91:d8:72:2f:5e:1b:c9:0a:5d:ad:2b:54:d7:
9c:e2:c1:0f:5f:97:cc:56:8a:a2:d1:28:76:62:e5:4e:b7:85:
f1:fc:62:11:01:1b:71:de:1f:b7:5a:c4:06:9a:bc:e3:90:00:
fa:44:f5:63:2f:4e:51:9b:48:c2:f4:71:78:9d:e0:41:15:d6:
06:7b:05:fc:4b:0d:be:2c:b6:1e:27:36:d2:aa:72:7c:a5:97:
89:a2:bb:42:36:99:96:d9:4f:df:66:57:1f:db:1a:a5:9c:2d:
fe:cc:7b:5c:2d:da:b3:5b:c2:d6:0b:be:41:df:74:a5:df:1a:
01:bd:ed:00:c2:80:c5:07:db:c9:5b:6e:ea:39:09:31:26:8f:
46:35:d7:10:9b:6a:3e:7e:fd:aa:fc:ec:57:13:ba:ff:af:2e:
39:dd:1e:da:ab:f7:61:0c:54:3e:28:be:77:09:82:08:7f:10:
53:be:01:bf:36:7c:76:a6:14:f7:a7:cb:02:19:1d:eb:a3:87:
63:ed:77:88:55:ff:e2:22:e1:fd:e8:95:4f:9e:e5:21:73:89:
80:e1:f2:d6:03:e5:f4:ed:71:71:bb:c5:c8:60:52:1d:1f:39:
13:85:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:18:23 2026 by rpki-client