Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198810.roa
File: AS198810.roa (raw, json)
Hash identifier: sX4Q92Cf7j85FeiC/tXU8SzuXlnqNWqJByc7hpDAtYk=
Subject key identifier: 93:FB:4D:DE:C3:3C:C2:CF:03:BF:6A:24:2B:AE:D0:D7:3C:55:22:BE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5027D56CEB7EA458A3B6B4585B7844BFE6064380
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198810.roa
Signing time: Fri 05 Jun 2026 09:38:36 +0000
ROA not before: Fri 05 Jun 2026 09:33:36 +0000
ROA not after: Fri 04 Jun 2027 09:38:36 +0000
asID: 198810
IP address blocks: 181.215.176.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.101.102.0/24 maxlen: 24
191.101.116.0/24 maxlen: 24
191.101.120.0/24 maxlen: 24
191.101.124.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
191.101.236.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:27:d5:6c:eb:7e:a4:58:a3:b6:b4:58:5b:78:44:bf:e6:06:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 5 09:33:36 2026 GMT
Not After : Jun 4 09:38:36 2027 GMT
Subject: CN=93FB4DDEC33CC2CF03BF6A242BAED0D73C5522BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:1b:35:a8:53:71:51:63:4b:4f:2a:ac:ca:
95:a1:ad:8c:1a:86:d8:da:4d:b1:3c:d7:98:7d:99:
84:a9:58:a7:5b:2a:82:f0:21:a3:17:cd:38:67:ed:
c2:8c:31:00:75:94:40:fc:6e:c4:85:ab:ad:15:d3:
1d:03:b7:2b:ba:1c:60:a1:7c:07:b1:87:48:f8:31:
ba:12:7a:fa:02:8f:ba:ad:b6:1e:f9:4d:3b:3c:bb:
1c:84:c9:c5:f5:4e:ba:1e:8a:32:ac:51:0b:81:ea:
46:b8:89:74:df:e5:d5:dd:6c:08:3c:31:de:46:8e:
46:68:c0:54:b1:54:4f:cc:38:27:77:8e:15:45:ff:
04:1d:c8:7b:13:05:66:ee:0a:f5:38:cb:41:80:38:
90:5b:fc:63:16:e8:62:12:9b:df:22:88:3e:89:47:
a2:b4:4e:4f:f0:11:28:02:f3:b7:ae:fb:84:51:81:
c9:15:28:bf:d7:a6:97:56:34:0b:ae:47:9d:17:76:
03:29:e3:63:84:d4:07:fb:8a:7c:8c:50:9c:10:d0:
10:6a:65:2a:25:2b:ed:1e:14:19:e5:42:a0:ef:54:
16:63:9b:a2:93:2d:0b:db:2b:93:b1:1c:0a:f4:dd:
fa:7c:b1:59:08:4d:27:6f:b8:17:82:78:34:c2:72:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FB:4D:DE:C3:3C:C2:CF:03:BF:6A:24:2B:AE:D0:D7:3C:55:22:BE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.176.0/24
191.96.103.0/24
191.101.102.0/24
191.101.116.0/24
191.101.120.0/24
191.101.124.0/24
191.101.209.0/24
191.101.236.0/24
191.101.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:61:a6:0f:ed:27:b0:a7:7f:6d:e3:74:d6:33:cc:33:c7:48:
32:77:0b:b2:07:70:3e:d0:73:b1:9c:d6:96:94:11:e6:60:89:
ee:17:f8:aa:08:4e:97:b3:a9:24:e9:59:71:f5:48:a0:c4:82:
04:13:01:da:da:8d:fc:00:0f:0e:92:7d:a4:10:f2:5e:d4:21:
be:a8:d6:f3:c5:e8:8e:37:ff:e6:80:16:2d:c2:e0:ff:ed:4c:
97:70:28:e3:04:14:e0:9f:8e:d6:79:2a:2d:a6:98:2a:9c:71:
4e:4f:50:59:ce:ff:ca:bf:1e:1b:e9:15:05:b0:a2:28:43:75:
00:6e:84:48:eb:5a:54:84:db:ea:5f:8a:1e:a9:0a:75:7a:a9:
7e:e0:08:d9:cc:e2:93:6c:32:0d:8c:b4:0b:9d:64:d8:78:98:
f6:2b:fc:43:8c:c7:1d:c0:27:2e:53:ae:b0:f4:09:91:02:49:
46:ad:66:3b:c8:68:58:09:a2:7e:db:f1:b7:75:ce:63:eb:56:
a2:11:8a:22:2d:ad:3a:39:32:de:63:0c:25:87:9e:c6:fd:58:
83:5b:04:05:b9:e1:8c:92:7b:10:fd:d3:70:a2:17:09:b1:e8:
e1:00:52:32:33:17:df:b2:7d:d2:22:3e:35:aa:ec:c8:e5:7d:
69:32:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:25 2026 by rpki-client