Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198558.roa
File: AS198558.roa (raw, json)
Hash identifier: DIpOCIH0+8Aw+R2IIoqhZH/UlDd/JKtNbkD25KDdCTw=
Subject key identifier: 4C:EC:58:26:BC:09:15:C9:07:30:3A:09:B3:1D:22:7E:14:76:CB:8E
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 112132D8E557481571414756C2C9975835FBE57C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198558.roa
Signing time: Wed 04 Nov 2026 20:32:51 +0000
ROA not before: Wed 04 Nov 2026 20:27:51 +0000
ROA not after: Wed 03 Nov 2027 20:32:51 +0000
asID: 198558
IP address blocks: 2a0e:8f02:f05c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:21:32:d8:e5:57:48:15:71:41:47:56:c2:c9:97:58:35:fb:e5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:51 2026 GMT
Not After : Nov 3 20:32:51 2027 GMT
Subject: CN=4CEC5826BC0915C907303A09B31D227E1476CB8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:4e:18:bc:42:5b:5b:6e:b2:e0:7d:5a:42:
55:6f:b5:be:7c:7f:e9:3f:13:b2:7d:6a:d0:21:06:
3b:9e:b4:b2:b6:4d:84:23:61:f7:fa:d2:30:67:a4:
ba:23:84:a2:74:9f:e1:cd:c5:b0:24:7f:f3:d8:06:
30:dc:16:b1:57:50:57:48:1b:8f:2a:d7:49:7c:5f:
40:d4:52:a9:67:14:a9:bf:6f:d8:33:7f:6b:38:5b:
d0:00:bc:a0:65:e6:be:6e:02:08:67:f2:8a:21:87:
7f:7e:1d:b7:99:da:3b:8c:20:29:34:84:b0:3f:22:
f0:e1:d0:c2:72:98:aa:bf:8c:fe:8c:af:28:7c:76:
d5:a4:f2:09:dd:3d:3f:fb:b1:92:60:3d:13:5c:5b:
e5:97:36:7c:e8:c6:e6:b8:04:8d:30:6f:43:0a:71:
5f:a2:e2:d7:93:54:f6:80:3f:c7:bf:2b:01:61:ca:
08:d5:c9:a2:ca:55:64:ab:9e:97:bb:58:67:5b:c3:
27:89:9a:e7:76:75:a2:15:e3:5d:e3:2d:10:24:35:
d9:16:55:65:61:5e:7d:09:44:0d:8d:79:08:63:9f:
f5:80:8d:0a:4f:fc:0d:d3:dd:d3:e0:bf:9b:17:57:
4c:87:c1:09:cd:60:29:df:3a:55:24:1e:60:88:bd:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:58:26:BC:09:15:C9:07:30:3A:09:B3:1D:22:7E:14:76:CB:8E
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f05c::/48
Signature Algorithm: sha256WithRSAEncryption
1a:14:06:de:44:e5:2e:bb:3e:a5:9a:c7:03:08:7c:53:c4:cf:
8c:63:d3:e8:dc:0f:aa:bb:25:77:9a:f2:bd:6b:3d:6f:2d:66:
d5:60:e3:53:a5:d2:5d:20:3d:bd:58:41:ec:f3:a5:d2:6f:05:
38:6d:f3:03:c3:6e:f7:3e:dc:bd:fa:ef:a2:8c:0b:f8:f3:bf:
ff:90:62:3e:f6:d3:8b:9c:8d:42:f6:ac:41:d0:68:74:e5:f1:
58:97:16:5d:b2:ad:e4:4d:a0:50:f1:f3:d8:15:4f:62:c7:82:
95:03:ff:4d:35:4a:c5:d0:b2:8d:96:d2:13:41:7c:14:db:ef:
81:50:0b:97:22:e2:5f:4f:d7:27:ee:58:e0:a0:62:30:34:81:
c7:5d:8d:5e:69:28:e4:9d:d9:79:b8:dc:e1:0b:2e:2c:67:e8:
fd:13:b4:1d:ef:63:74:19:9e:0d:c7:06:fb:45:62:67:1c:d5:
97:a1:eb:e6:f6:8d:6b:55:ed:bc:b9:cf:ec:e0:1e:59:5f:e2:
41:e1:c6:d2:c1:45:36:78:2b:db:ed:f3:18:31:1b:cd:e4:e5:
47:ba:12:60:11:a3:29:16:31:2b:3f:65:ec:40:28:24:6e:84:
46:de:9f:b3:80:b1:8f:3b:6e:6a:0d:e9:b8:76:a2:3f:8b:bd:
85:54:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:58:07 2026 by rpki-client