Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
File: AS198584.roa (raw, json)
Hash identifier: zcQgYdnm0VkJG83LLrpEbppkxDWgieqvOtSsv5mD7W8=
Subject key identifier: 34:AD:5F:A9:07:38:23:B6:5E:89:3A:65:10:E3:4F:FA:C7:0B:ED:AC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 152C921990D221BB577B26976BC9D062AE7CED68
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
Signing time: Mon 28 Jul 2025 00:00:39 +0000
ROA not before: Sun 27 Jul 2025 23:55:39 +0000
ROA not after: Mon 27 Jul 2026 00:00:39 +0000
asID: 198584
IP address blocks: 147.79.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2c:92:19:90:d2:21:bb:57:7b:26:97:6b:c9:d0:62:ae:7c:ed:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 27 23:55:39 2025 GMT
Not After : Jul 27 00:00:39 2026 GMT
Subject: CN=34AD5FA9073823B65E893A6510E34FFAC70BEDAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:dd:72:15:f0:a2:d4:fd:61:38:a1:0c:6c:
5c:86:6a:70:86:e0:13:a4:91:b1:08:5a:5e:a3:83:
ff:4f:94:ff:2f:08:b0:22:dd:02:43:d2:3a:b6:bb:
61:99:74:66:89:e6:c4:2a:fe:5a:2e:44:9d:85:87:
76:b7:62:78:cc:c9:b8:a2:08:b2:d2:95:c2:e1:b5:
f6:c5:3c:25:a0:77:38:cf:e2:19:49:5b:60:7a:0d:
ef:a9:82:42:fa:66:35:1f:c3:07:cf:12:92:5c:e4:
2d:38:eb:b8:c4:9f:09:61:8d:cb:25:b6:8f:98:9c:
23:74:4a:54:e8:c4:0d:1b:71:fa:77:c0:01:be:a4:
95:82:a0:a5:4b:a8:0d:c0:48:04:96:df:a6:dd:93:
e8:c2:b6:60:83:6d:80:1e:07:3a:8f:55:54:38:59:
b8:f7:97:9d:a1:ab:8b:5c:b7:13:52:c2:34:10:a9:
a7:b4:94:81:27:ce:29:e5:a3:58:73:be:ba:6a:b1:
81:66:46:fd:eb:4a:02:5b:38:78:a6:ea:77:a5:00:
79:33:e8:61:fd:cc:24:0a:a4:71:ee:b4:c4:b5:8d:
06:c1:eb:d2:8a:ae:64:1b:89:f4:ee:49:30:92:f3:
a2:e1:2b:6a:bf:7d:fd:29:a7:7e:cb:11:d7:70:cd:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:5F:A9:07:38:23:B6:5E:89:3A:65:10:E3:4F:FA:C7:0B:ED:AC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:80:bb:eb:9f:c5:a0:8b:50:7d:3c:b1:ed:5d:39:93:b1:78:
dd:9b:31:ed:72:84:4d:16:29:0f:76:4d:be:ee:e4:31:44:5f:
7d:18:7a:ff:b3:ff:d4:f0:9d:75:4e:b3:6c:02:5d:ae:45:a5:
f5:0e:ac:cd:f1:9b:cd:d0:3b:fc:b6:0c:4d:28:5c:28:25:be:
81:1f:e8:51:ef:19:28:30:ea:9a:e3:91:d0:a9:e6:ac:dc:e9:
19:12:8c:83:08:fe:e5:28:56:e5:58:c1:31:1a:06:c9:e4:50:
8a:52:2f:89:f7:dc:1c:ea:01:4e:84:79:d8:f1:ed:21:f5:71:
e2:7a:84:10:6a:e4:de:76:5b:3f:d7:bf:36:7c:63:b0:77:c7:
44:50:ab:07:55:27:e6:a4:67:a0:34:36:61:ea:4a:3c:6a:9a:
9f:c1:28:45:a8:3e:36:5c:d4:99:5f:51:bc:8b:dc:6c:4f:b4:
6e:c3:6c:26:73:29:b9:ce:c2:4a:5c:bf:2e:ef:81:80:1e:1e:
5f:c3:c9:6b:94:bc:b5:30:3f:05:fb:d6:76:d7:82:52:ac:90:
e9:8c:70:54:82:6b:49:36:f1:19:b8:a7:41:75:b6:fb:05:99:
ee:2d:00:60:09:c6:5c:09:75:33:47:03:3e:80:9f:c3:16:c2:
e8:95:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:03 2025 by rpki-client