Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: srFsRAw5u+EsmjnFga6KOT5z6aSPtqwC/iZPwlC1J6g=
Subject key identifier: 9B:99:CC:57:01:2A:8A:5E:3F:68:39:BA:D4:73:23:A5:FC:C5:F2:77
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B2D4E12F09F7B9302047A363069F65A2CF07DBC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198566.roa
Signing time: Thu 03 Sep 2026 19:09:18 +0000
ROA not before: Thu 03 Sep 2026 19:04:18 +0000
ROA not after: Thu 02 Sep 2027 19:09:18 +0000
asID: 198566
IP address blocks: 82.47.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2d:4e:12:f0:9f:7b:93:02:04:7a:36:30:69:f6:5a:2c:f0:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 3 19:04:18 2026 GMT
Not After : Sep 2 19:09:18 2027 GMT
Subject: CN=9B99CC57012A8A5E3F6839BAD47323A5FCC5F277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:1e:ef:1c:1b:33:b1:6c:7e:0a:53:e9:c1:
f6:6a:83:f4:d5:91:81:a3:f9:a8:6e:9a:10:6a:12:
a4:81:c1:2f:36:07:81:3e:54:a8:12:d9:98:1e:1e:
91:23:52:a9:57:05:20:8c:a1:57:de:7b:c0:98:4b:
ff:92:f6:10:5f:51:4f:2c:36:ff:96:68:12:47:d9:
a2:d8:06:68:09:b6:a3:bf:6d:97:9e:92:23:56:8d:
4c:b7:52:10:c0:ca:e5:0d:2a:f6:9c:b1:89:fc:3a:
8e:77:30:c0:3b:36:95:06:4f:1a:ff:e3:6a:12:da:
14:3c:96:0f:d1:ec:7e:11:3e:d2:a5:23:78:a9:20:
6d:78:7e:84:17:2f:24:17:8b:09:f1:66:3a:83:09:
16:f2:06:ff:95:b0:82:7c:8b:97:d3:6e:68:e7:35:
c0:47:0d:f2:27:a0:35:c8:90:01:30:66:0c:90:a5:
f0:a9:41:44:77:9f:c7:52:f9:9b:ca:57:d0:0b:27:
5d:19:35:10:b9:84:ba:5c:6c:ff:80:38:bc:72:5b:
31:71:0b:87:69:ee:30:4e:e9:3f:a4:06:0d:42:74:
d5:b2:bf:f9:f6:01:67:8e:97:59:e1:90:87:f5:66:
a9:43:3b:c1:b0:88:04:0b:b7:76:62:16:46:82:7e:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:CC:57:01:2A:8A:5E:3F:68:39:BA:D4:73:23:A5:FC:C5:F2:77
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.193.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c5:af:ba:39:a8:73:10:a6:52:ca:7a:f1:44:f1:d2:ed:1f:
87:e5:4e:a2:c1:bd:6f:0e:89:a5:5b:05:3a:de:69:2c:09:89:
22:40:9f:ae:2c:0f:63:4a:b4:9e:b2:97:ff:fc:7c:4a:fe:10:
ce:48:80:22:69:f7:42:66:34:62:c5:3f:6c:49:66:b0:db:c3:
08:ac:77:53:b5:a5:2f:bb:00:2f:af:d6:79:9c:71:dc:93:bd:
b9:74:c8:ae:10:99:38:6e:43:ea:69:c1:d7:d0:c6:4f:42:b4:
4b:62:a1:1b:91:88:3b:80:7a:65:20:cf:02:22:64:07:c3:e3:
bc:98:fe:4b:b2:9a:13:38:0f:cd:0c:87:1f:9f:e8:a1:bd:55:
73:9b:78:a7:9f:3a:83:21:06:d0:76:b3:a6:2d:d7:9a:ce:eb:
44:39:9d:64:70:9c:15:82:d0:dc:ad:07:51:f9:4e:b0:d3:61:
d6:59:51:e5:7d:39:ce:f9:02:4a:4c:3d:d1:6d:90:cb:09:a1:
12:6d:60:63:6d:e1:2a:c5:4b:cb:89:e0:da:dd:2d:11:58:63:
08:8b:69:1a:68:58:a6:89:e1:86:74:34:3f:be:62:6f:ec:ff:
7d:91:d8:27:19:50:af:a4:0a:78:49:6a:8f:c5:9b:7f:fa:cb:
04:ab:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:07 2026 by rpki-client