Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: WykyMDUlzReWRRo6PLsiQ+iA5MGHT10RnkN0o2HkkYY=
Subject key identifier: 3C:DC:8C:36:8B:AB:58:11:BB:CF:DC:A9:8E:B0:4F:67:6B:F2:41:E1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 709B08326772FCF1C567B4BE9FA3FF811B680463
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
Signing time: Thu 03 Sep 2026 20:00:39 +0000
ROA not before: Thu 03 Sep 2026 19:55:39 +0000
ROA not after: Thu 02 Sep 2027 20:00:39 +0000
asID: 198566
IP address blocks: 96.62.249.0/24 maxlen: 24
167.148.2.0/24 maxlen: 24
168.222.4.0/24 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.72.0/24 maxlen: 24
168.222.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9b:08:32:67:72:fc:f1:c5:67:b4:be:9f:a3:ff:81:1b:68:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 19:55:39 2026 GMT
Not After : Sep 2 20:00:39 2027 GMT
Subject: CN=3CDC8C368BAB5811BBCFDCA98EB04F676BF241E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:0b:53:46:66:6d:0a:3f:51:f8:ed:dc:4c:
66:33:10:71:af:a1:da:e6:10:17:e3:97:27:0b:af:
bd:38:f3:e8:43:48:f2:05:18:c0:b8:56:01:68:b2:
90:07:b5:a5:f0:40:4c:5e:4e:8f:26:86:a2:69:5a:
5c:09:d8:1f:e0:bd:bf:24:27:f1:18:5c:6e:b2:f8:
6c:40:7a:00:43:d3:90:f4:95:5f:66:d3:ad:2e:90:
86:27:91:64:df:7f:3b:09:62:24:7b:7f:d1:67:a0:
b0:0e:2a:82:db:23:d3:ec:61:0f:f7:e2:b5:66:c6:
1d:44:67:e5:c8:a6:56:ee:a5:89:89:fa:b3:09:7c:
d2:25:d0:ce:dd:17:d2:80:66:e3:40:1b:37:a4:47:
af:b1:9d:da:3d:e6:c4:64:42:56:ae:fc:24:19:b3:
96:8a:71:c4:40:87:ff:a0:a0:d0:f7:31:a0:60:07:
6d:6b:aa:d8:66:4a:ae:c5:38:41:3c:77:92:bb:fa:
fc:1d:e6:80:38:b5:c5:7d:8f:ba:9d:70:6c:94:d0:
b5:91:f1:b1:f0:d8:5a:53:ea:51:5d:01:b2:3c:de:
42:b0:07:11:d7:d5:03:85:21:bc:b2:b5:cc:80:ea:
49:ca:f8:56:86:de:82:d8:3e:57:5c:22:54:af:04:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:8C:36:8B:AB:58:11:BB:CF:DC:A9:8E:B0:4F:67:6B:F2:41:E1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.249.0/24
167.148.2.0/24
168.222.4.0/24
168.222.12.0/24
168.222.72.0/24
168.222.118.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b2:9b:c3:7a:9f:51:31:c2:21:cb:a1:74:b5:de:6a:b9:42:
c5:b8:00:c8:e8:a9:29:59:3f:84:b3:2b:ff:96:51:c4:d9:49:
30:6f:92:35:61:36:d8:75:b1:39:bc:c7:72:33:04:70:55:e9:
ed:9f:ce:84:af:8c:9e:c2:df:d8:49:73:ac:72:3f:cc:90:37:
bc:55:fa:40:0c:68:10:7f:3c:53:3a:42:98:b7:3d:e6:09:f1:
e1:4b:85:dc:4f:fa:9c:3f:ce:e6:44:74:19:0c:dd:7d:df:92:
50:cf:cf:7e:62:32:86:a3:5c:d7:2e:4b:fd:e3:6d:4c:65:c8:
ce:66:ec:4c:48:70:0a:f3:53:95:85:7d:46:44:62:ff:f9:b2:
ba:cb:00:b9:fc:a0:d0:83:32:d4:35:42:0e:65:e5:74:63:5e:
47:5e:e5:b4:0b:8f:60:18:76:23:25:b1:9d:ac:24:71:7f:cc:
ce:f9:be:1b:ce:5d:98:33:3d:f3:da:4d:05:4d:38:05:92:a9:
0d:32:14:48:b6:78:b9:80:f9:51:8b:bc:d0:04:31:04:42:85:
84:66:e0:3e:28:86:4e:cc:18:19:cb:0f:9f:ab:5a:bd:12:d5:
63:47:07:1f:8c:32:d0:00:23:43:7b:10:5b:fc:e3:ed:04:c5:
81:7f:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:59 2026 by rpki-client