Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: 0AtrEvqe07hWd8Wqy2rJpr0jaaNWhdxqy23FH66II7Y=
Subject key identifier: 68:46:7F:98:BA:17:84:F6:D8:74:C1:E0:60:CA:2B:5B:42:37:4A:5C
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4B38996F34B5EFFD7D02B3858776ADCF5A91DD0E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS198250.roa
Signing time: Tue 14 Apr 2026 05:56:50 +0000
ROA not before: Tue 14 Apr 2026 05:51:50 +0000
ROA not after: Tue 13 Apr 2027 05:56:50 +0000
asID: 198250
IP address blocks: 212.60.149.0/24 maxlen: 24
212.60.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:38:99:6f:34:b5:ef:fd:7d:02:b3:85:87:76:ad:cf:5a:91:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Apr 14 05:51:50 2026 GMT
Not After : Apr 13 05:56:50 2027 GMT
Subject: CN=68467F98BA1784F6D874C1E060CA2B5B42374A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:d2:7b:f0:08:c3:db:0a:29:be:2a:b2:5b:
fd:d8:12:b1:7d:54:6c:d1:47:73:8e:c4:3b:75:2b:
ee:53:0d:cd:cd:2a:c7:b2:48:b9:a3:91:d0:98:65:
94:80:c5:86:7f:3e:e5:c5:af:7c:97:11:22:4e:27:
4b:a2:f7:2d:a5:3e:6c:a1:87:60:fa:dd:e8:44:4c:
7d:10:7b:17:cc:a7:5f:e8:10:10:55:ff:6e:d2:ec:
8f:24:6f:9b:98:74:7a:bc:d5:93:62:43:31:e9:d3:
4b:9f:51:32:d0:b5:5a:45:4e:22:92:41:d4:ed:a1:
8b:65:f5:f9:af:38:21:9f:ab:55:b7:ff:cb:ec:48:
d4:ba:e7:49:a5:d2:06:97:48:59:3d:11:d7:76:80:
61:20:9a:16:8e:7d:53:4c:44:0d:97:f8:bf:91:a6:
e1:ac:39:a7:80:a3:48:95:c9:bb:ca:e1:c6:f0:93:
68:2a:12:7c:42:36:92:05:34:cf:c0:b3:ff:b9:f7:
89:51:bf:04:29:96:69:83:ea:b8:85:4c:f1:44:59:
30:4b:b3:52:6a:ec:22:3d:c1:cc:01:b8:96:c8:07:
94:f6:4f:d0:06:ca:52:23:55:65:28:44:73:4e:77:
1a:96:a6:df:22:e0:fb:74:3d:03:d2:5f:75:ea:61:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:7F:98:BA:17:84:F6:D8:74:C1:E0:60:CA:2B:5B:42:37:4A:5C
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.149.0-212.60.150.255
Signature Algorithm: sha256WithRSAEncryption
75:86:c9:f1:2a:d9:5f:4a:c8:d0:b0:5c:aa:cf:51:e6:e4:97:
0e:17:9d:97:ed:b4:22:3e:d2:d7:63:cb:22:02:50:11:30:6c:
8e:90:4d:8f:f0:02:9e:da:d1:f4:bc:70:da:a4:f5:89:44:8a:
3f:e3:96:9f:b5:8c:ca:e5:8f:5d:4c:be:c2:36:52:3f:a8:bf:
34:50:d2:fe:da:f2:20:be:2a:60:c2:09:37:72:25:34:20:d4:
44:d7:d8:91:36:c4:73:c6:5e:62:a7:80:d1:31:66:91:12:a0:
02:52:e6:fb:7a:81:e6:a5:84:f0:2e:a7:44:7e:5d:84:3a:51:
f4:27:95:e3:36:c1:32:19:5d:15:bb:ef:18:74:b8:6d:75:a1:
6a:48:d4:c0:44:b7:06:71:77:7c:f3:ef:b0:4e:61:d1:c7:05:
44:d8:43:37:cd:d3:00:12:79:8f:f7:94:fc:90:23:41:d2:fc:
51:2f:c5:5b:83:ab:00:4a:6f:87:76:25:73:47:7e:82:1f:ba:
68:4a:e6:75:4b:8b:17:e2:72:5c:02:66:51:ca:70:f6:b2:9d:
ca:c9:a9:39:68:0f:40:c1:9a:2e:3a:57:1a:13:7b:f2:de:3e:
92:be:38:74:6d:9f:ab:5d:73:2b:b1:03:f1:bd:e0:85:a6:53:
2e:f0:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:37 2026 by rpki-client