Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198969.roa
File: AS198969.roa (raw, json)
Hash identifier: gBmHU7kYODcfhvQViMhm/JjTskz4vQ7CGMQ11n9i8Zw=
Subject key identifier: 9A:5D:C3:1A:6C:B3:66:FE:DB:F5:9A:B2:3F:D9:D4:EC:5D:55:B3:2C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 190C7998265CD9048EAE87067B394DDAFD09B619
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198969.roa
Signing time: Mon 26 Oct 2026 15:02:56 +0000
ROA not before: Mon 26 Oct 2026 14:57:56 +0000
ROA not after: Mon 25 Oct 2027 15:02:56 +0000
asID: 198969
IP address blocks: 141.11.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:0c:79:98:26:5c:d9:04:8e:ae:87:06:7b:39:4d:da:fd:09:b6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 26 14:57:56 2026 GMT
Not After : Oct 25 15:02:56 2027 GMT
Subject: CN=9A5DC31A6CB366FEDBF59AB23FD9D4EC5D55B32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:b9:f8:46:a8:d0:8b:cc:43:98:6d:5b:35:
6d:42:1b:88:4b:93:a3:23:00:fc:43:0c:84:c7:fe:
12:f0:d0:be:30:d9:47:6d:9b:64:6e:13:2e:06:4d:
79:ad:b1:e0:bc:8f:ad:f5:e0:ff:cb:21:c7:c5:8c:
e5:0a:c0:4e:8e:d7:b4:82:ca:9d:db:0b:b0:36:76:
9b:99:4f:3c:57:33:57:f7:4f:56:68:43:c5:e4:a6:
14:2a:5b:b6:ae:f2:b8:c2:cc:14:7c:28:e5:f7:63:
d2:1d:e2:80:71:ab:aa:5a:fd:34:c3:dd:b5:19:85:
2b:48:a8:eb:12:3c:bc:47:2e:ee:25:3d:05:59:59:
0d:95:2d:04:a0:4e:6d:a7:b9:f7:e3:11:5c:59:42:
62:de:45:cd:5e:39:93:68:1c:91:ce:d4:60:98:d0:
28:00:fb:b3:d9:2f:22:a6:10:4d:79:98:31:b2:49:
7d:c8:1d:6f:e6:9d:3d:ca:6f:88:8b:31:1a:d8:2c:
be:89:a7:57:3a:07:b7:b3:3e:fd:31:1e:6e:c0:de:
67:9e:c0:97:8d:f1:0f:29:1e:d0:f3:d5:e9:98:ad:
b1:4b:da:d7:8c:e6:1c:88:cd:43:a3:87:7e:1c:01:
ef:1f:88:53:73:d9:93:dc:2f:11:a0:f7:cc:48:b9:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:C3:1A:6C:B3:66:FE:DB:F5:9A:B2:3F:D9:D4:EC:5D:55:B3:2C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.145.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b5:d4:10:2a:bf:3b:ee:f0:97:c3:14:a7:64:56:c9:71:9b:
f7:53:09:b3:49:10:8a:35:41:9f:b9:81:ba:c9:0c:d7:8e:7e:
0f:71:41:49:be:dc:2f:e8:ec:ab:52:10:e0:cd:6e:3e:62:51:
80:58:8d:62:e0:de:79:f6:f7:44:51:3d:8a:7f:36:cf:1e:a1:
c6:75:70:eb:6f:98:f5:21:e6:64:21:03:89:6b:0f:10:02:7a:
37:fb:66:ec:b1:2b:4a:92:f3:8f:eb:32:9f:54:cf:13:dd:44:
a7:76:9b:c7:18:20:cd:1f:6f:1e:ef:c4:d2:0a:0d:2e:18:5f:
9c:73:75:b1:b0:91:78:64:30:ff:07:65:0d:ee:d6:74:7b:c2:
80:b7:b3:a3:3c:4c:5d:c2:59:63:20:c3:c8:ef:84:30:a4:6d:
a4:9e:96:91:fb:09:b6:5f:ce:ae:e7:1b:b7:27:d2:35:83:f4:
e6:8c:e2:a2:57:41:8d:54:08:08:2f:66:7a:6d:79:5d:23:60:
7c:87:43:15:f8:96:b5:a5:00:1e:a5:98:9f:d9:64:c2:f4:17:
0d:4a:76:2f:3b:b3:ba:a1:47:7d:8a:95:c6:04:7b:63:91:15:
c2:0a:77:e9:0b:24:5b:27:b0:74:96:d2:aa:5e:cf:b7:f9:0b:
f6:f0:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:06:27 2026 by rpki-client