Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198486.roa
File: AS198486.roa (raw, json)
Hash identifier: genoj4P/ECiAofUR/KZG9MTzuNB2JKVi69fZNK6QOFI=
Subject key identifier: C4:15:E3:89:E5:E8:CE:77:DE:39:EC:78:E7:E8:C8:4B:AF:D2:BA:F9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5574C1FE9EA554AD4CEEB038379AC1AC5C74F7CC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198486.roa
Signing time: Sun 13 Sep 2026 00:00:18 +0000
ROA not before: Sat 12 Sep 2026 23:55:18 +0000
ROA not after: Sun 12 Sep 2027 00:00:18 +0000
asID: 198486
IP address blocks: 78.105.193.0/24 maxlen: 24
78.105.208.0/24 maxlen: 24
78.105.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:74:c1:fe:9e:a5:54:ad:4c:ee:b0:38:37:9a:c1:ac:5c:74:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 12 23:55:18 2026 GMT
Not After : Sep 12 00:00:18 2027 GMT
Subject: CN=C415E389E5E8CE77DE39EC78E7E8C84BAFD2BAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:63:dc:4c:06:96:b2:ee:e4:da:a9:be:ac:
90:20:36:b2:12:61:73:80:9f:e8:a0:81:57:f2:18:
09:54:62:35:5b:4f:77:3b:d5:ed:a8:05:4e:9f:1e:
57:74:90:9a:5e:85:0f:63:6b:23:5c:51:32:70:b5:
11:2c:2b:7b:a7:1f:d1:52:8a:03:03:1e:ea:28:90:
0b:c1:96:0f:95:81:25:ff:56:58:b4:25:fe:5e:a9:
75:64:26:7f:45:aa:b5:04:0b:16:01:c4:74:a6:0d:
0c:35:94:6b:2a:6e:af:81:f7:bd:1f:89:9b:8b:45:
be:fe:3f:cf:08:91:4a:bd:db:a0:cf:ad:c7:44:b9:
2c:28:18:5e:46:59:5e:8a:7d:c9:ef:9d:07:e2:b5:
4d:03:f1:0d:08:68:eb:0c:ba:f3:24:7b:b6:6b:31:
b9:51:50:a9:ec:6f:2c:eb:2f:13:b2:e4:c4:6d:72:
e1:d1:72:08:56:ad:8e:56:6d:0b:7f:27:16:39:4f:
32:d0:b6:f4:a0:0e:f9:68:58:dc:df:e0:de:04:c5:
c0:3e:9c:d5:1a:ac:51:d3:de:de:0b:2d:09:85:da:
96:1e:d6:72:07:1d:6a:bb:76:10:4f:c6:64:ce:4b:
19:37:37:e4:7c:5b:41:e8:97:93:69:40:3d:5d:bf:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:15:E3:89:E5:E8:CE:77:DE:39:EC:78:E7:E8:C8:4B:AF:D2:BA:F9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.193.0/24
78.105.208.0/24
78.105.210.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e7:bf:f9:61:30:47:6b:9d:76:d9:dc:39:77:fe:0b:bd:30:
69:7f:a6:9c:69:14:68:b6:77:bc:ad:58:e2:08:13:28:7c:f3:
b7:74:00:17:b4:88:7d:32:c4:6d:74:32:e3:f0:2d:44:65:b3:
46:c9:b1:d7:24:2a:77:b8:32:76:e5:d5:14:b8:77:3f:51:8f:
78:e7:8f:f6:98:b5:07:9a:7e:4d:82:46:74:35:b1:ba:df:be:
00:8c:29:f5:fb:c7:56:81:82:ef:c2:50:0b:51:c3:d8:d3:51:
32:8f:64:ce:ad:0d:b9:2d:c6:8e:e6:98:43:c3:9c:67:77:14:
f4:d1:54:b2:b0:39:b0:e5:29:1d:db:5c:7f:1d:0e:bb:ae:34:
6c:5f:d0:7c:17:30:c4:c1:aa:f6:eb:5d:1b:55:2f:0a:aa:16:
49:da:31:6a:fb:55:30:38:49:80:68:a8:24:ab:4f:08:31:d8:
c6:c2:ff:ea:76:16:54:9d:9d:e7:5c:44:f6:63:78:d0:10:51:
d8:f1:02:cd:96:da:4e:c2:1f:2c:b0:06:9f:ab:18:15:06:bb:
6e:03:6c:30:90:c6:34:28:51:8b:91:ac:53:ba:41:28:0d:14:
e9:b9:b2:ea:08:0e:cd:1b:bc:ff:01:c5:8d:1b:4d:09:08:b0:
b0:74:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:45:44 2026 by rpki-client