Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: s2onf+hsSiP/nk+BTpjhi2wjckaA9O2BKVcZL61lTyg=
Subject key identifier: 17:65:80:17:58:64:94:FF:80:02:9E:C9:28:4A:1D:3F:CA:B6:B1:BB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 36EBD6B0537CF2722E55A554DF59D64F464F3090
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198250.roa
Signing time: Wed 15 Apr 2026 08:24:02 +0000
ROA not before: Wed 15 Apr 2026 08:19:02 +0000
ROA not after: Wed 14 Apr 2027 08:24:02 +0000
asID: 198250
IP address blocks: 181.41.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:eb:d6:b0:53:7c:f2:72:2e:55:a5:54:df:59:d6:4f:46:4f:30:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 15 08:19:02 2026 GMT
Not After : Apr 14 08:24:02 2027 GMT
Subject: CN=17658017586494FF80029EC9284A1D3FCAB6B1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:9d:4f:1e:78:c0:f3:c1:db:01:7d:d7:9f:
bb:c4:84:ff:7f:67:8a:1a:a8:46:46:ff:7c:e8:c8:
42:7b:31:64:38:ce:5a:7b:95:cc:c3:15:f1:7d:92:
85:56:a6:cd:c7:50:3c:b6:14:33:41:54:31:a6:31:
e0:d4:85:54:26:a5:ec:f7:d2:c8:18:31:32:6f:82:
9a:16:ca:0f:45:9b:14:c7:1e:0d:2d:22:3b:5e:f9:
c8:37:8f:d1:0c:86:93:35:39:0c:f2:b2:58:d2:bf:
dc:de:1f:f0:3b:a3:8d:dc:6d:71:c8:1d:d3:b6:9b:
77:52:7c:3a:5d:35:d7:5c:7e:c7:05:7c:b8:4c:96:
59:47:bd:3a:bd:7f:64:e3:2e:1f:95:74:aa:6c:b9:
55:80:ca:ed:e2:4f:2a:ed:40:61:5a:c6:0a:2a:7b:
13:a2:31:b7:b4:df:aa:af:8d:f1:f6:02:98:7b:40:
ee:2c:ec:b3:ca:37:a2:df:70:6a:63:bc:62:be:35:
14:80:36:56:43:f6:fc:60:9e:1b:a8:35:29:aa:ae:
34:82:6d:27:2f:2f:5b:28:e3:77:91:bd:ea:1d:58:
c1:01:b9:b0:17:2c:a6:73:a6:46:dd:d4:6a:8a:60:
cd:c7:bd:c2:7e:ea:f8:4b:ad:68:34:01:c9:87:61:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:65:80:17:58:64:94:FF:80:02:9E:C9:28:4A:1D:3F:CA:B6:B1:BB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5a:14:54:71:ca:9d:df:9e:a4:9a:c2:98:13:e3:d1:9d:7c:
d9:f3:0e:76:ea:ef:c8:d6:05:96:1d:d2:ca:fa:60:33:2c:07:
7f:17:a5:5f:36:7a:36:2f:b3:63:a2:1a:d6:3c:26:38:c4:ce:
65:02:ce:aa:40:67:2c:56:6a:81:b2:8f:10:ce:53:35:66:a2:
f1:9e:74:f2:5d:47:44:9d:91:22:2b:43:41:98:c9:19:5f:5e:
33:b6:fd:24:d4:d4:b5:d0:44:af:fe:38:13:fc:e7:0e:d3:b9:
3f:f3:70:d8:35:e5:9a:fd:16:8e:1c:27:ce:ed:d9:57:26:97:
c3:12:34:b1:f9:59:ce:f5:1c:3d:74:6e:da:0b:53:a1:53:c5:
7a:7e:ad:05:73:13:b2:6a:5c:1c:95:0f:f3:fd:a7:d0:63:58:
9a:da:67:db:e1:69:28:ac:d7:db:b6:74:b7:8d:88:5f:4c:a2:
dc:2b:86:28:d8:1a:67:3b:0c:2b:07:11:01:93:7c:2e:2e:06:
be:61:cc:62:47:0c:c8:e7:5e:cd:3f:27:50:37:4b:9a:88:a1:
9a:3c:19:8e:72:68:64:22:89:ea:c4:1f:d8:14:5d:d2:37:5d:
e8:16:9f:ab:cc:19:f7:b0:8c:0d:84:4a:32:73:77:c9:15:a3:
c8:e1:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:35 2026 by rpki-client