Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198584.roa
File: AS198584.roa (raw, json)
Hash identifier: SkpVjfWUolPDcowKCSjApXpKwEqu8qjpn8FDtaDsixI=
Subject key identifier: 90:40:4D:76:E9:70:0A:DB:B1:34:5E:C7:9E:38:DB:7A:53:1B:E3:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3E9928EFCA88E8A90D7A6D7C97B55FB5EA748F9C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198584.roa
Signing time: Sat 07 Nov 2026 04:24:16 +0000
ROA not before: Sat 07 Nov 2026 04:19:16 +0000
ROA not after: Sat 06 Nov 2027 04:24:16 +0000
asID: 198584
IP address blocks: 94.118.71.0/24 maxlen: 24
94.118.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:99:28:ef:ca:88:e8:a9:0d:7a:6d:7c:97:b5:5f:b5:ea:74:8f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 7 04:19:16 2026 GMT
Not After : Nov 6 04:24:16 2027 GMT
Subject: CN=90404D76E9700ADBB1345EC79E38DB7A531BE3D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:99:2f:40:7c:3f:88:2b:bd:6c:14:d7:26:
24:bd:bd:30:fd:8b:bb:2f:9e:41:c9:04:96:de:e6:
a8:c8:94:9f:38:a1:bc:d3:c3:27:13:09:4c:c7:13:
dc:bc:a6:09:1d:f4:f0:dd:cd:90:ca:57:2a:16:0f:
70:27:9e:3c:a2:45:fb:8b:81:71:6a:96:dd:03:2c:
e1:0b:2b:59:b0:79:d2:9c:70:04:bb:67:ee:fd:da:
a3:0f:23:c7:51:a2:65:e3:51:b4:c4:ca:f5:1d:b7:
bd:69:50:b7:07:4b:b9:b4:41:cc:4e:0b:2c:60:ee:
9c:4a:b1:63:8f:31:11:24:50:c9:f1:46:91:e5:85:
e0:2b:51:58:c5:09:a5:83:26:a8:3c:e0:d1:7e:dc:
3a:0d:c9:7a:35:6b:b0:ee:11:91:cf:bf:fd:08:e4:
97:38:2b:99:a1:9d:57:4b:18:b4:ae:23:25:dc:d7:
6b:65:73:3a:e8:2f:b9:9b:f1:96:90:23:4c:a6:a5:
35:01:93:43:ee:3e:34:1f:c7:80:ae:79:58:a4:50:
28:5d:22:8f:02:a3:0d:8d:7c:5a:66:20:9e:a1:65:
27:61:57:5a:2a:0f:1b:ce:88:b4:96:20:be:e7:f2:
26:e2:d4:8f:7a:b7:a6:2b:fa:c6:7d:2e:c1:20:87:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:4D:76:E9:70:0A:DB:B1:34:5E:C7:9E:38:DB:7A:53:1B:E3:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.71.0/24
94.118.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:76:83:eb:70:6a:9d:73:49:2a:4f:a3:fe:88:83:1f:7b:41:
5c:aa:a0:b0:5f:a5:90:2a:6e:31:15:bc:50:d2:d8:b8:b7:68:
d1:55:37:db:9c:ff:a5:12:b0:19:fc:54:3c:37:10:17:c3:20:
06:8d:6a:f9:f6:f7:25:a3:cc:fe:aa:43:7a:14:2c:33:43:ae:
db:1c:eb:76:da:6a:69:dc:70:8d:04:03:13:50:bb:08:24:19:
88:bd:79:2e:1e:2e:1c:25:8e:e4:cc:ef:7a:58:d0:c5:1f:6c:
14:30:13:cc:59:94:52:59:1a:d3:31:c4:c8:ed:4e:35:8b:3d:
c0:d6:e1:67:d6:58:51:54:cb:d8:c5:78:a4:68:c4:36:52:a4:
84:37:9f:fc:c5:d4:47:06:06:27:7b:b5:91:23:cb:0b:4e:ed:
fe:6b:66:0b:ae:34:71:60:86:18:01:31:93:c6:93:1f:41:14:
c8:2c:71:fa:e5:41:04:62:ac:33:ee:97:36:8f:1e:06:e8:00:
ad:52:68:c8:a7:e7:ea:a1:22:d3:bd:1e:49:87:e2:d8:ed:29:
9f:3e:b1:06:6d:a5:50:15:55:b4:9b:5c:6d:30:3d:35:f9:7a:
d3:a2:c9:f7:09:11:95:2c:13:11:cb:d7:8a:67:92:ee:dc:c8:
18:1d:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:26:43 2026 by rpki-client