Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
File: AS198624.roa (raw, json)
Hash identifier: Vk1xNEOKb3wAiNlIIJen7PjIuW3maWAvK+usYNCCJrk=
Subject key identifier: B4:46:4F:D9:E7:BD:E0:26:27:FA:4B:EF:46:11:A8:C3:D9:1A:6F:6E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 42EEE67E40C130E1D580C6D5CA7843641B157412
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
Signing time: Sun 06 Sep 2026 19:24:11 +0000
ROA not before: Sun 06 Sep 2026 19:19:11 +0000
ROA not after: Sun 05 Sep 2027 19:24:11 +0000
asID: 198624
IP address blocks: 2a14:7581:3700::/40 maxlen: 48
2a14:7583:ea00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ee:e6:7e:40:c1:30:e1:d5:80:c6:d5:ca:78:43:64:1b:15:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 6 19:19:11 2026 GMT
Not After : Sep 5 19:24:11 2027 GMT
Subject: CN=B4464FD9E7BDE02627FA4BEF4611A8C3D91A6F6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:8f:e9:d3:7e:29:b3:1a:6a:0d:33:8a:b7:
98:2c:9b:19:0e:5b:62:d9:92:5a:5b:15:11:8c:92:
c1:09:7a:e1:79:80:86:7d:97:34:af:08:72:bc:dc:
0c:1d:1b:9b:f4:e9:f3:a8:45:ae:d0:d0:5d:84:42:
6f:da:33:c8:35:19:10:8d:76:0b:d5:27:cb:b6:37:
34:8a:a7:67:49:f9:5b:d2:a5:a5:00:43:e2:99:53:
2c:cd:75:d8:8c:b3:9e:57:15:ca:b2:c9:48:8e:c9:
b1:6f:20:51:c4:ac:da:b5:47:78:f6:57:9a:e7:a6:
b7:d8:25:be:66:36:bb:5c:a1:a6:d5:ba:7f:a8:bc:
ad:8f:73:33:d2:18:4c:73:2d:81:2f:03:60:dd:87:
54:b6:97:5d:5c:0d:e3:ad:5b:3d:45:ce:c8:4a:58:
de:2a:21:6a:00:cd:03:d0:dd:e9:d0:ba:af:cd:f6:
98:ac:03:06:77:d8:79:b0:96:bb:c6:4b:bb:58:12:
a8:83:4d:63:95:1a:fc:41:fc:74:95:0f:71:1a:31:
37:fb:45:d8:ca:1b:b7:3b:21:49:fe:a3:d3:1b:20:
97:b6:5d:b1:c3:f9:fc:14:70:f4:b1:7f:e6:b6:3a:
c4:30:da:95:90:11:8e:f6:3a:a4:fc:fe:73:7c:23:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:4F:D9:E7:BD:E0:26:27:FA:4B:EF:46:11:A8:C3:D9:1A:6F:6E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3700::/40
2a14:7583:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:41:70:90:b3:09:2f:6c:b0:62:82:83:9b:08:5b:64:88:6e:
a4:ec:df:dd:b4:8e:54:e9:d0:a4:52:9c:e0:01:23:3d:cd:7b:
9d:a8:e9:7f:10:c9:17:f5:1b:3f:7d:d1:56:2d:6d:67:56:1e:
c0:86:ba:c3:27:43:db:88:5e:8e:1d:28:fb:5d:0d:ab:0a:24:
6a:f8:0e:fe:35:f5:1e:8b:fb:a3:01:b6:ac:46:65:d7:a8:f5:
08:a7:34:b6:df:9e:db:43:4f:a7:ac:57:e8:9e:63:45:6b:51:
71:13:9b:8c:84:7d:eb:0e:93:e8:62:47:da:7b:3d:c7:83:50:
68:ab:83:3d:1c:74:3d:40:e7:51:97:d7:b6:b3:5c:6a:8f:f3:
c9:a0:d3:fd:8f:d5:05:9d:3e:2a:57:64:12:9e:7a:92:5f:c6:
20:63:25:60:c2:9f:44:50:2b:01:23:69:c4:63:81:d6:0a:6b:
fd:09:8e:8c:66:27:a2:90:7d:2a:99:02:1a:36:7d:7d:29:32:
35:4d:fc:28:89:e0:c2:e4:0d:62:da:fc:5b:6c:2f:94:3a:ba:
54:38:4d:0b:90:87:ac:31:16:44:aa:88:fd:17:eb:ee:e1:b4:
15:db:45:2c:8b:bb:27:2e:55:9a:bc:9a:d6:9e:79:ad:41:84:
dc:d6:30:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:16:05 2026 by rpki-client