Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
File: AS198420.roa (raw, json)
Hash identifier: FqqhyKLTEQYrGCFZB3az8UDF8b6OcAJq85wrSwmOs/s=
Subject key identifier: FA:EA:CF:50:63:39:59:F6:B7:DC:D2:3C:99:9A:91:BC:7E:A4:D3:5A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 55622C7FC6CCB8BD22752C370F7CFB7BB7319D19
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
Signing time: Wed 02 Sep 2026 00:02:14 +0000
ROA not before: Tue 01 Sep 2026 23:57:14 +0000
ROA not after: Wed 01 Sep 2027 00:02:14 +0000
asID: 198420
IP address blocks: 82.29.43.0/24 maxlen: 24
82.41.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:62:2c:7f:c6:cc:b8:bd:22:75:2c:37:0f:7c:fb:7b:b7:31:9d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 1 23:57:14 2026 GMT
Not After : Sep 1 00:02:14 2027 GMT
Subject: CN=FAEACF50633959F6B7DCD23C999A91BC7EA4D35A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:13:27:88:65:84:35:81:23:3e:77:68:98:
80:72:89:66:ca:56:9e:4b:73:0c:80:b6:29:51:d8:
f0:c0:d5:ad:05:6b:81:90:6c:5f:d2:2d:09:cd:cf:
ca:42:20:58:2e:1e:82:9b:d6:fd:5b:95:57:b9:bd:
8b:95:0d:86:58:c9:4a:3b:83:65:12:26:f4:90:80:
e0:c0:8f:75:c7:b3:2f:d0:bc:f2:1f:fa:37:76:40:
d7:96:58:bf:0b:c2:be:03:0f:b9:d2:54:bd:7b:53:
57:49:83:08:37:d7:bf:44:7b:9d:1c:e8:15:67:dc:
6f:5f:d5:a6:61:fd:95:fe:b6:bf:01:fa:f7:ef:2a:
78:db:3c:04:d7:fe:63:03:7e:26:8a:ff:08:9a:0d:
40:2e:29:4f:e9:58:c2:ac:39:b3:1b:01:3e:48:6f:
57:3c:a6:59:92:0b:6e:f7:21:02:57:23:32:5c:7c:
a1:e3:25:ed:64:11:4a:b1:c9:13:04:b9:34:20:6b:
76:d4:ee:a3:df:fd:2a:5f:0e:6a:3d:d2:c9:16:d2:
a6:ed:e6:22:70:6e:d6:e0:3d:72:b2:ae:f1:67:e5:
de:4d:d1:c1:ae:e6:5e:b3:c2:e2:73:dd:c3:91:3e:
f2:d7:5a:38:cc:6a:de:5c:8f:b0:9b:31:bb:8b:f2:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EA:CF:50:63:39:59:F6:B7:DC:D2:3C:99:9A:91:BC:7E:A4:D3:5A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.43.0/24
82.41.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:82:03:0c:8b:64:52:0a:fe:c4:91:68:09:3d:be:e9:86:39:
f6:6c:25:e2:ec:a2:3c:85:93:1b:11:db:7d:3d:45:6c:3b:b3:
44:08:73:df:25:c2:54:2f:ca:00:9c:a6:93:26:e4:37:b5:25:
4f:85:6f:75:21:12:43:e6:41:1b:06:2c:26:a5:84:a7:63:f9:
3f:f6:44:5c:28:70:ac:8b:4c:aa:4e:e9:a6:63:0b:06:f5:f9:
b2:ec:3c:82:93:df:64:5d:17:dd:61:2d:bb:11:3e:66:af:69:
6c:a3:e4:48:8f:34:7c:a9:79:0c:2c:65:45:8d:57:7e:6d:c8:
ec:76:8b:49:c7:c6:d1:f5:1f:01:30:a7:1e:71:1e:56:0a:05:
88:5e:c1:68:6d:ab:23:22:bd:58:3d:14:f3:34:8e:be:fc:d8:
df:d9:75:f9:2c:47:e6:da:44:e8:dd:d4:4b:1e:b3:1f:3b:03:
e8:ee:bd:3d:3c:29:60:74:c0:f6:f5:32:e5:86:87:0b:6d:4a:
3e:2a:70:da:6a:7a:19:a5:6e:bb:aa:ba:57:12:9c:7c:81:a0:
d9:84:61:fc:2c:6f:07:78:ca:9a:74:bc:1b:86:38:c4:50:a9:
4d:f2:b7:1d:21:af:a8:8d:ac:d3:d9:8c:29:a8:ca:39:50:2f:
20:d5:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:17:59 2026 by rpki-client