Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198275.roa
File: AS198275.roa (raw, json)
Hash identifier: 8Udg5LOYqhU2t2CD5nRX024gIALpJvv0XBpl24Ct/88=
Subject key identifier: 85:98:05:68:E2:59:76:C2:DC:DA:84:75:D6:4C:C1:08:A5:7A:47:E3
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3AEF01330101B80CDA74CDA2EE550531E14D3853
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198275.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 198275
IP address blocks: 2a0e:8f02:2240::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ef:01:33:01:01:b8:0c:da:74:cd:a2:ee:55:05:31:e1:4d:38:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=85980568E25976C2DCDA8475D64CC108A57A47E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:95:be:3c:bb:67:b5:d1:af:4b:f2:68:86:
9a:09:24:a2:fe:ac:f1:00:59:58:ae:40:91:36:08:
b7:a2:e2:5b:f9:24:f6:da:c2:21:20:85:28:ff:a6:
38:69:13:25:9d:03:a7:17:24:f4:39:45:91:1c:02:
38:77:28:04:43:b6:5d:5c:c9:c7:e4:e2:e9:fa:6b:
58:66:5d:42:27:0f:f2:e9:66:ee:7a:85:b9:ef:fb:
a4:3d:ae:08:6c:af:3b:7c:5a:0c:8f:bf:d2:c6:71:
3b:3d:b6:c6:ac:9e:5d:5e:d4:b0:c1:3b:ae:ea:08:
26:75:7c:2f:a8:8f:16:76:f7:a8:ea:62:f6:fb:17:
63:9b:f6:f4:4a:20:eb:b3:11:f9:15:4f:ff:81:69:
df:d8:8a:01:3d:19:36:d2:2a:05:76:8c:14:76:2e:
df:40:9e:91:f3:a6:0f:71:6c:ad:1f:86:b5:21:b9:
e7:4f:24:40:0e:7e:36:5c:8f:e7:4f:50:c3:88:e4:
19:ed:00:7c:c9:12:c7:8d:bf:82:ea:8c:1e:84:de:
33:46:64:fb:1a:a6:5d:b5:05:8f:98:cd:f8:d1:3a:
93:07:46:75:ea:08:81:ea:6f:f7:fd:50:5f:59:8b:
5b:5b:ef:5d:b8:43:2f:54:f9:9d:37:3a:14:6b:e9:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:98:05:68:E2:59:76:C2:DC:DA:84:75:D6:4C:C1:08:A5:7A:47:E3
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198275.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2240::/44
Signature Algorithm: sha256WithRSAEncryption
4e:58:2b:12:ef:3a:46:ef:f7:1d:13:9c:3c:b4:c7:b1:1e:17:
94:39:3f:d4:e1:2b:e8:48:1d:2f:1d:d1:38:3d:e9:c9:ae:33:
28:15:2e:e7:a9:14:00:f8:cc:15:7c:04:1b:94:16:33:0e:bd:
e6:a6:5b:73:bf:3d:a9:19:36:c5:bf:3e:27:55:f1:73:41:56:
9e:76:13:dd:2b:d4:48:bb:df:29:69:98:09:07:38:8e:56:9a:
c6:92:40:1f:5a:e6:47:49:da:1c:ca:b2:f6:c4:80:19:d0:4a:
8d:05:4f:11:ad:51:11:0a:ea:a0:c7:0b:6c:2f:b6:37:bc:97:
92:64:ba:b1:7d:45:1e:e8:d5:9d:6b:e3:db:53:b9:97:69:fb:
3d:09:33:4c:20:83:ce:a6:e7:68:83:d8:50:ab:2d:f7:21:48:
d3:39:e5:43:37:f7:d2:d5:7b:d5:b2:8c:1a:c5:a6:da:58:1e:
60:d3:7a:f3:65:98:8e:af:84:69:30:2b:59:e6:b4:8f:50:06:
cf:ef:99:ae:48:9a:41:62:18:5d:07:9f:3c:a2:37:97:7d:da:
b9:6c:f4:85:94:7b:88:98:08:d7:d7:b4:d2:c4:d6:08:c6:53:
e4:d8:ad:6f:09:40:16:c2:f1:b0:8e:a5:de:ae:9b:27:4c:88:
d8:a9:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:52 2026 by rpki-client