Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198607.roa
File: AS198607.roa (raw, json)
Hash identifier: aChXeWUzMFkW54ZYcc98PMk5cWBM4sH9qYqu7QMShZU=
Subject key identifier: FD:3C:A4:9E:FD:F7:E0:48:F3:7D:6C:0E:1B:86:C4:75:81:FE:B8:D7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 656CE621A09126529A7E59CE8444D17F2AA93A8C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198607.roa
Signing time: Thu 11 Jun 2026 18:45:35 +0000
ROA not before: Thu 11 Jun 2026 18:40:35 +0000
ROA not after: Thu 10 Jun 2027 18:45:35 +0000
asID: 198607
IP address blocks: 2a13:9500:18f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6c:e6:21:a0:91:26:52:9a:7e:59:ce:84:44:d1:7f:2a:a9:3a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 11 18:40:35 2026 GMT
Not After : Jun 10 18:45:35 2027 GMT
Subject: CN=FD3CA49EFDF7E048F37D6C0E1B86C47581FEB8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:7b:1e:e2:0f:9b:31:4d:dd:aa:fc:fe:72:
ec:91:3e:f8:9f:f6:ab:b7:3f:ff:77:49:17:a7:85:
5e:65:66:c1:8e:fb:c7:cb:51:bd:2b:4b:bf:be:d9:
09:c1:d3:86:ba:6b:b4:04:7e:2c:62:00:02:c2:7b:
08:29:ea:76:7f:71:8b:d5:b1:0e:24:2d:51:92:b7:
b1:bd:d9:77:21:c2:c2:89:44:20:96:00:cb:39:70:
77:fd:9c:2b:33:4f:4a:48:f9:f2:d6:3c:41:00:86:
6d:5f:de:87:3f:e5:01:6a:40:b3:fb:a9:b1:79:b3:
78:fb:b8:3e:66:10:c0:5e:76:ff:b5:6d:28:90:a3:
23:1e:5d:bd:2b:4e:ee:df:a2:37:98:72:2e:50:a5:
d7:7c:86:6e:79:bc:5c:6e:fc:e9:3e:d4:3a:96:7b:
48:f1:de:e1:8f:af:fb:51:38:79:af:f2:d4:cf:39:
57:1a:5d:08:85:24:68:ed:c5:84:5c:20:a0:51:23:
43:c1:65:a5:3d:65:b9:7f:2d:2f:ad:d4:16:2a:e6:
75:b3:be:19:cc:b6:33:19:b5:c3:05:d1:8d:c6:60:
df:3d:1c:80:cf:98:22:5d:d7:11:20:9b:42:a4:52:
ea:ca:68:69:16:ec:5a:18:a0:53:87:09:a9:7c:f1:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3C:A4:9E:FD:F7:E0:48:F3:7D:6C:0E:1B:86:C4:75:81:FE:B8:D7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:18f::/48
Signature Algorithm: sha256WithRSAEncryption
1b:27:ca:74:85:65:59:36:0d:69:e0:51:55:5d:39:25:b1:c5:
48:28:99:4b:b8:d3:39:14:d3:23:b9:cd:a1:9d:2b:3b:be:79:
1f:d7:6b:29:83:ed:29:a0:5c:c8:87:fa:6e:c6:12:1e:b1:b2:
82:c5:59:dd:06:31:d4:c1:9b:2c:1e:43:d4:0e:fb:d7:5c:60:
db:08:a9:90:02:75:c4:96:20:35:53:c4:30:9f:9d:98:ea:01:
84:5a:0c:c5:57:10:b6:d3:b0:ae:b9:0d:fa:e2:14:a7:2d:ef:
09:ae:cf:87:f5:d5:57:ed:56:41:59:95:39:3e:ad:b8:ab:fc:
a8:2d:f6:7d:b2:40:14:74:f2:c4:62:5c:62:dc:4b:93:7d:82:
63:b1:b9:e0:6c:4b:6d:81:32:b8:c1:81:71:09:1e:5e:85:0f:
08:b4:9b:6d:29:b1:eb:f5:ad:0b:07:d1:a0:b3:c9:6c:6f:76:
72:76:ef:c3:1d:3c:24:7b:ff:e2:d2:53:06:92:c2:3a:74:30:
75:0e:89:14:b0:b2:c4:39:ac:5e:b7:6b:7c:0f:7b:ac:fb:23:
d3:5f:ef:63:b3:c2:fa:1a:82:2d:b2:df:75:8a:e1:46:e1:23:
72:d7:b1:9d:7b:d1:7a:d2:c8:4c:01:59:38:30:01:53:2c:dd:
95:90:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:32 2026 by rpki-client