Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198886.roa
File: AS198886.roa (raw, json)
Hash identifier: juaM1D2JIAAbLHyPN/5MEisrxhJeuZ86mFqFr0EX+Kk=
Subject key identifier: 19:0A:69:6F:74:0B:40:CD:25:19:76:45:C4:53:45:FA:E2:18:83:14
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 40A5522A12048B34673386F4BAB2C127E817915B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198886.roa
Signing time: Wed 04 Nov 2026 20:32:49 +0000
ROA not before: Wed 04 Nov 2026 20:27:49 +0000
ROA not after: Wed 03 Nov 2027 20:32:49 +0000
asID: 198886
IP address blocks: 2a0e:8f02:2250::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a5:52:2a:12:04:8b:34:67:33:86:f4:ba:b2:c1:27:e8:17:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:49 2026 GMT
Not After : Nov 3 20:32:49 2027 GMT
Subject: CN=190A696F740B40CD25197645C45345FAE2188314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:96:45:d4:3a:0f:15:ed:51:c0:a2:86:5d:
9c:6c:18:01:4f:64:b8:f7:1c:12:d8:f3:7f:12:4e:
55:81:2c:c1:fc:fd:14:f4:1f:40:90:35:ea:58:dd:
6b:09:3a:5f:38:53:9b:b7:c5:28:a2:59:29:67:91:
5d:be:6a:39:f4:7e:75:58:29:f0:c2:b2:9a:39:cb:
e0:bf:0e:4e:d2:ed:0b:37:57:04:26:0c:f6:1a:b8:
12:5d:97:b0:c7:bc:4f:bd:1c:87:c9:15:be:ba:f8:
bf:8d:f8:c4:12:61:b8:7a:97:57:9e:27:32:dc:3d:
0a:fa:d3:bb:09:95:95:9b:ec:f8:2d:b9:55:14:07:
bc:f9:57:2a:3b:7a:db:5f:cd:e1:01:08:b2:7b:6b:
90:d4:9e:09:eb:f0:dd:da:2e:49:d9:94:cc:82:db:
17:57:82:e2:98:35:f8:4d:39:90:9a:d7:77:3d:74:
ed:2e:b1:b6:ce:e7:93:3a:65:6c:40:ab:90:1d:ee:
e5:27:e8:ac:ad:60:4f:5f:6a:62:72:49:ab:14:f7:
1b:ea:2b:c4:de:06:90:10:bd:37:75:e3:f3:69:41:
e2:ff:59:25:3e:5a:94:c8:e3:93:a6:20:c8:a4:e2:
6b:de:72:c5:dd:43:9f:f8:20:57:b2:cb:4d:bb:38:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:69:6F:74:0B:40:CD:25:19:76:45:C4:53:45:FA:E2:18:83:14
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS198886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2250::/44
Signature Algorithm: sha256WithRSAEncryption
01:6c:1d:5e:3b:d6:36:56:4e:b4:38:e8:60:d7:4e:dd:34:d5:
c5:5e:fc:57:d1:e2:25:90:9b:a4:c2:fb:61:c5:66:a7:41:af:
17:88:71:1a:37:57:c7:0f:47:57:97:a7:25:83:ac:70:4d:be:
8f:06:ee:cf:a2:f5:91:48:05:fe:de:33:fe:1b:28:3d:b5:2e:
50:56:97:41:e9:c4:c8:82:0c:7a:3c:3f:61:5c:cc:ac:1e:55:
3e:6e:cf:15:49:dd:2e:02:5b:7d:31:56:7a:36:1b:80:0e:f6:
cb:7f:c0:13:ac:91:06:69:6c:cd:a2:9d:ad:3a:ee:0c:3d:11:
02:8b:92:de:b2:ee:81:52:1d:93:99:69:af:21:91:ff:52:49:
a5:0a:33:0e:7e:b9:4a:e6:33:f6:5e:37:e5:28:56:05:6b:3f:
66:2c:90:5b:1b:aa:12:69:1f:90:b2:4b:76:7b:cb:56:ac:ba:
20:75:a0:93:2b:aa:e0:58:53:55:bb:33:8e:e8:ad:0a:21:8d:
cc:15:a4:79:3a:f6:bf:2f:26:f1:5d:8e:39:a1:1d:77:24:41:
73:82:7f:57:3e:8d:a8:e9:20:38:d7:3f:7c:d6:c1:68:bd:10:
43:72:ee:1c:f7:0d:60:6e:aa:0a:2b:f2:16:1a:94:7d:ae:ca:
7b:47:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:19 2026 by rpki-client