Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: JqjZ3BOc1mabKxGDn/3WgalUx/i3UOSFD7LnYRyPeK4=
Subject key identifier: 7C:69:74:75:BD:3A:75:71:1C:48:85:CE:ED:FD:AA:32:30:BC:A3:A4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 305FA2BC79010C65130C73E2E08F5AD7B173BCF1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198250.roa
Signing time: Mon 13 Apr 2026 22:50:57 +0000
ROA not before: Mon 13 Apr 2026 22:45:57 +0000
ROA not after: Mon 12 Apr 2027 22:50:57 +0000
asID: 198250
IP address blocks: 82.47.11.0/24 maxlen: 24
82.47.12.0/24 maxlen: 24
84.75.137.0/24 maxlen: 24
178.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5f:a2:bc:79:01:0c:65:13:0c:73:e2:e0:8f:5a:d7:b1:73:bc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 13 22:45:57 2026 GMT
Not After : Apr 12 22:50:57 2027 GMT
Subject: CN=7C697475BD3A75711C4885CEEDFDAA3230BCA3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:0d:3b:d6:f0:10:68:ae:8f:e5:80:95:f6:
65:e3:8e:fb:07:44:5f:31:af:c8:24:33:82:cb:ec:
b6:83:0f:39:b1:a5:87:a0:a2:45:ce:90:56:3d:05:
e1:70:9d:40:82:37:9e:9d:d4:93:0f:3f:86:33:f4:
74:63:38:8e:82:02:a3:8e:88:48:ec:bb:13:6b:81:
22:bc:35:2b:01:a0:76:d3:8b:41:26:4f:99:38:1a:
81:1b:76:72:0b:73:41:84:55:31:45:4f:73:de:80:
96:87:c3:18:55:1b:8b:7e:27:27:20:f8:88:9a:80:
fd:c2:23:bf:5e:92:67:fb:b6:59:f7:d3:ca:91:92:
9b:18:da:60:55:a9:ec:e0:69:30:cd:ca:42:03:b8:
33:fd:2f:74:8f:4b:35:cd:5a:2a:ee:3c:c9:9b:b5:
29:b4:f6:18:10:be:1e:f2:b8:8c:d1:b9:cf:df:1e:
61:a7:a6:5f:8b:86:26:5b:80:88:48:83:e3:b9:e4:
65:a4:3d:26:c9:c8:e4:86:9e:d9:8e:56:46:aa:e6:
a5:b2:fa:de:f2:c4:1e:2b:2b:58:4e:ce:0e:43:ec:
08:55:6a:eb:c5:2b:31:99:8b:ef:ae:23:c9:4c:26:
87:5d:c4:3a:24:f3:03:1e:c8:74:67:19:40:91:45:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:74:75:BD:3A:75:71:1C:48:85:CE:ED:FD:AA:32:30:BC:A3:A4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.11.0-82.47.12.255
84.75.137.0/24
178.83.103.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5b:88:34:c2:dd:b9:21:1c:1c:dd:6d:8f:c9:a5:bc:47:4f:
99:33:44:a4:26:cb:42:38:c7:d6:e6:c3:6a:e1:a1:ad:52:07:
de:71:28:3e:78:4a:b7:6c:61:a1:90:84:a4:bb:a6:a9:53:40:
6b:f7:97:18:b9:f0:f9:a8:97:ff:9b:67:a4:c3:7e:dd:ac:a6:
ee:53:1d:f6:a7:19:7e:35:14:70:9a:4a:1a:5b:75:36:60:12:
e0:b7:19:3d:60:0b:ca:7d:04:90:fc:fc:27:d9:01:16:58:14:
e0:ee:f3:7f:01:0b:fc:eb:5d:1d:ed:5d:3e:5f:9e:cf:85:8e:
da:09:85:ed:e6:c1:bd:b2:78:5f:b1:e2:f8:32:cb:69:6b:b2:
5b:01:b2:6e:03:cf:d5:95:9b:84:d7:1f:af:7c:30:21:a1:8b:
0e:9e:10:4b:aa:37:b4:ba:b8:b6:64:b6:94:fd:a7:48:39:d7:
fe:1f:10:32:fe:25:c5:f9:01:59:66:dc:09:4f:cd:ea:cc:4a:
a2:e0:3a:91:23:3a:27:ea:87:58:ad:23:c6:38:71:56:d0:a5:
a2:8b:6c:6b:d4:e7:4d:c9:b0:08:2f:b0:41:e1:e3:a7:fe:6d:
3a:b5:f4:1a:5e:70:1f:04:9d:24:1c:6b:0e:9a:b6:b0:4b:2e:
91:02:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:12 2026 by rpki-client