Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198969.roa
File: AS198969.roa (raw, json)
Hash identifier: IghSdPMwFHSeefwunDu5BNanQafhkVf1am2jbyOMWpU=
Subject key identifier: 87:D5:3D:96:6D:DC:10:D5:6F:12:49:23:B1:B6:E8:9F:13:F2:7E:99
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 62A2D87985C27485A266B13B8ACF594E4F278F46
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198969.roa
Signing time: Mon 26 Oct 2026 15:03:00 +0000
ROA not before: Mon 26 Oct 2026 14:58:00 +0000
ROA not after: Mon 25 Oct 2027 15:03:00 +0000
asID: 198969
IP address blocks: 96.62.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a2:d8:79:85:c2:74:85:a2:66:b1:3b:8a:cf:59:4e:4f:27:8f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 26 14:58:00 2026 GMT
Not After : Oct 25 15:03:00 2027 GMT
Subject: CN=87D53D966DDC10D56F124923B1B6E89F13F27E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:a4:e3:03:61:a6:ed:86:75:bd:2c:b2:a3:
13:ba:82:7e:9f:a4:1e:3e:6f:5f:bc:9b:c1:80:b2:
57:f1:f7:96:a9:0e:54:88:39:f8:e9:76:8a:09:9a:
96:d2:f9:35:27:22:77:d2:3b:67:3f:17:31:47:7c:
38:9f:d5:6b:5c:c8:f4:8b:b8:3c:02:a9:87:46:5d:
d2:9f:47:7f:c5:7c:31:b4:82:a2:f4:e3:e2:b6:79:
c2:84:6d:24:ab:15:c4:cf:aa:41:0f:24:6f:10:fc:
76:5e:65:b9:3e:37:05:9a:70:f2:19:5d:55:85:a3:
26:42:b9:f7:c2:74:44:83:c6:b6:00:4f:ef:d8:c0:
92:d5:0f:92:b0:9e:b6:47:5f:ae:a0:c3:b3:f9:ad:
61:3d:f5:89:b2:4a:46:68:7e:0f:a5:11:89:a2:5a:
74:5e:9c:e9:8c:ca:b3:69:f3:06:3d:41:fc:4d:73:
0e:3a:88:91:14:17:cb:46:b6:59:35:27:d6:95:af:
b8:91:dd:2b:bd:ec:c7:6d:fd:06:73:bb:70:82:e5:
af:cc:e5:73:04:2a:9b:b1:fe:fb:58:c4:ec:ab:36:
b0:dd:d3:fe:ce:f1:9b:66:be:05:c4:35:18:ee:9a:
e0:68:f8:2f:1b:28:fb:cf:05:c4:5a:3a:71:88:f1:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D5:3D:96:6D:DC:10:D5:6F:12:49:23:B1:B6:E8:9F:13:F2:7E:99
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.97.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1c:7a:59:32:24:c5:4d:c4:e7:4b:ba:18:c8:fa:d5:bd:3b:
ad:9b:0a:ee:11:a2:66:4f:04:ac:67:63:f1:e5:26:45:57:fc:
55:7e:eb:23:ec:33:14:70:c1:09:dc:14:e3:50:c8:2b:92:4d:
21:35:76:26:d3:df:de:45:8f:17:ab:f6:e3:b9:21:81:c7:d0:
ef:9e:55:c1:b5:45:9b:cc:75:58:06:8f:9e:af:ec:8a:1b:59:
52:31:9f:8f:f8:c1:c2:2f:3a:43:02:0f:2e:1d:08:59:bf:ec:
89:28:cc:16:3f:76:8a:9e:2a:15:da:8a:43:78:7a:66:f1:8d:
48:1a:df:f2:34:d2:ea:bd:12:ba:86:dd:1b:8d:32:b3:b5:d5:
5e:08:11:20:53:0b:50:4a:46:40:11:6a:6a:9a:f5:d3:07:f0:
3d:d0:07:33:59:dc:d2:64:4c:93:48:00:47:a8:bd:41:2b:a0:
0e:9d:0a:d4:93:b0:0e:0d:9c:0a:98:61:c1:6d:90:67:61:42:
9a:9c:9f:4f:fa:81:5f:be:6d:8a:71:6b:00:43:2c:3b:12:eb:
0b:b3:0d:d3:79:3a:bb:5b:07:f2:1d:91:9d:1f:dd:50:27:db:
15:56:39:a6:43:a5:00:62:75:67:47:95:6e:cc:0c:86:de:ca:
70:90:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:46:19 2026 by rpki-client