Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198075.roa
File: AS198075.roa (raw, json)
Hash identifier: mgVfs9W6dgNswm+dj4LYF5FrWnVIj319lrMYj5AUE2k=
Subject key identifier: 4D:FC:55:28:FD:CB:EC:9E:E1:2F:5A:2D:B3:DF:C1:90:FC:96:A5:3B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 38B85FFFE50224810207768B64D64CF2A3A52962
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198075.roa
Signing time: Tue 09 Jun 2026 09:33:57 +0000
ROA not before: Tue 09 Jun 2026 09:28:57 +0000
ROA not after: Tue 08 Jun 2027 09:33:57 +0000
asID: 198075
IP address blocks: 2a13:9500:16d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b8:5f:ff:e5:02:24:81:02:07:76:8b:64:d6:4c:f2:a3:a5:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 09:28:57 2026 GMT
Not After : Jun 8 09:33:57 2027 GMT
Subject: CN=4DFC5528FDCBEC9EE12F5A2DB3DFC190FC96A53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:98:0a:51:b0:06:b3:55:97:33:30:9b:81:
15:25:47:5a:2b:72:dc:ea:96:93:18:e1:1a:ad:bd:
5a:85:c3:38:75:4b:58:df:90:4a:87:76:eb:6d:3b:
34:c2:81:06:cf:8b:96:86:08:2f:27:88:2c:d2:d2:
8a:f5:21:58:28:e2:64:10:d8:95:b5:78:ac:db:7a:
0e:89:5a:c8:65:ac:dc:6e:d5:ab:2a:8a:e3:fa:6c:
b3:f6:68:93:02:c3:d5:61:41:41:28:06:91:42:35:
9a:dc:22:90:5f:39:a0:ec:33:f2:ec:f8:24:3b:2a:
b0:e8:20:a9:46:69:77:6f:36:1f:c6:5f:cd:67:bd:
88:a0:d9:9c:d5:ff:c1:06:31:71:b6:4b:09:68:50:
c7:a9:4e:08:bc:1d:65:60:56:f8:2a:8d:56:6b:82:
0e:5f:c9:e5:fc:8a:4f:19:9a:03:90:11:ce:25:24:
05:1e:31:c9:70:b7:fa:fd:0c:2c:c5:b1:6e:c5:d6:
81:9d:fb:22:13:bd:7b:69:bd:6c:83:a4:f2:22:31:
6f:fa:6b:a0:38:a0:3c:e3:42:65:e3:81:15:b4:6a:
a3:7d:a4:2e:a2:48:ee:48:c2:18:91:24:52:46:14:
c5:14:ed:25:8e:90:4f:79:a0:23:7e:d3:02:36:2f:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:55:28:FD:CB:EC:9E:E1:2F:5A:2D:B3:DF:C1:90:FC:96:A5:3B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:16d::/48
Signature Algorithm: sha256WithRSAEncryption
35:2a:17:91:41:03:1e:bb:82:d6:0c:8c:91:83:5d:bd:79:6b:
4f:09:21:24:8a:b3:01:71:6c:ea:e2:f5:c2:cb:c7:6c:a5:ef:
6c:96:be:9e:da:57:83:86:e7:2b:60:2e:f4:7e:3d:7e:83:8e:
f8:bc:9f:1b:fa:96:82:4a:95:14:7b:cc:dd:d5:c6:8a:0e:f3:
cd:56:68:37:5d:23:da:10:33:66:91:d6:1c:58:99:02:63:61:
86:b1:62:30:5f:b8:cf:fd:f9:6d:b0:15:9d:80:e1:db:31:6e:
f7:3c:18:58:36:e2:f3:7f:07:d2:b3:47:f0:af:35:0c:2f:c4:
71:ff:58:fb:62:29:e6:7f:16:80:d9:7e:c4:b7:70:b1:52:9d:
16:3f:d2:77:fb:3d:83:38:79:36:b0:fb:37:81:24:3d:22:f3:
e5:6f:d3:e9:cf:18:d1:a3:0d:4d:96:dd:7c:e2:51:b0:b5:25:
c7:dc:a5:e6:d2:05:41:ec:e1:95:d7:28:40:69:5a:a0:21:7a:
e7:e0:3f:6b:ec:5c:cd:61:06:0f:2c:2c:51:2a:b3:46:49:00:
5c:71:b9:35:4a:dc:12:d2:b0:01:f0:6c:e9:32:1d:94:7d:91:
52:eb:f1:71:6f:08:86:4b:6d:83:45:3f:a5:95:03:c3:7e:22:
c5:1a:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:27 2026 by rpki-client