Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS198487.roa
File: AS198487.roa (raw, json)
Hash identifier: XNe12ynIMmPxmY2mSE9tnRQ4Y6TSsHTONcVDt4886UA=
Subject key identifier: 59:59:C0:08:19:2F:08:8D:9E:2C:7C:18:F4:73:F5:BE:CB:61:E5:36
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7EC61DA0B6A6E551E2242BBB6A5851A8830F5C14
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS198487.roa
Signing time: Fri 05 Jun 2026 03:07:46 +0000
ROA not before: Fri 05 Jun 2026 03:02:46 +0000
ROA not after: Fri 04 Jun 2027 03:07:46 +0000
asID: 198487
IP address blocks: 143.20.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c6:1d:a0:b6:a6:e5:51:e2:24:2b:bb:6a:58:51:a8:83:0f:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 5 03:02:46 2026 GMT
Not After : Jun 4 03:07:46 2027 GMT
Subject: CN=5959C008192F088D9E2C7C18F473F5BECB61E536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:fb:c0:a1:e9:c7:a0:8b:b6:e2:bf:2b:57:
84:d6:5a:3a:31:b8:45:25:fa:26:0c:b8:0f:55:1a:
48:75:6f:ec:f5:25:26:c9:43:fb:4e:82:be:e2:43:
c0:40:00:6a:03:5a:33:52:8e:0c:d5:1f:9d:47:96:
a3:df:d4:84:fb:aa:43:82:95:92:c2:28:e6:be:c6:
e7:07:16:54:fd:94:05:53:34:f1:87:6a:46:28:a0:
d5:1a:b5:65:4e:49:a4:b4:44:03:ca:98:33:d6:e7:
ed:d6:61:21:ea:d3:75:82:46:89:82:fc:8f:34:7c:
36:af:2c:f7:9c:97:7c:f9:ce:26:cf:54:54:53:5d:
ec:05:37:f6:01:a4:2b:08:80:97:38:ab:6f:ce:df:
dd:3b:df:e7:84:60:a4:4e:3a:09:f3:47:22:ec:4b:
33:a6:9a:28:e0:6a:c5:23:17:7a:14:98:19:2f:6a:
fc:3e:f3:e7:43:02:bc:8b:d9:5f:6f:76:ae:52:eb:
b7:a5:99:60:3c:22:4f:df:7f:b4:79:39:91:1a:39:
75:b4:be:9d:0b:4c:2d:70:81:01:83:0e:8e:2c:09:
f7:fa:1c:ba:26:26:a9:bc:39:c6:e7:3d:45:65:6e:
dc:90:3b:24:c0:28:d8:59:1e:0d:d3:bc:80:45:b9:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:C0:08:19:2F:08:8D:9E:2C:7C:18:F4:73:F5:BE:CB:61:E5:36
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS198487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.145.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2a:ce:69:03:13:de:3c:ee:bb:a4:5f:89:d5:3a:28:93:18:
5d:9b:49:94:e1:4c:72:5b:f1:95:27:cf:1c:85:b0:bd:93:2f:
c2:22:2e:27:36:b4:93:00:99:14:3d:b0:e1:30:96:e0:aa:89:
ba:46:5e:d6:74:d7:ec:0f:c3:0a:10:55:26:78:db:96:9e:f8:
59:6e:7f:ed:e3:57:48:94:86:ce:18:b9:c1:ad:ce:8d:b0:54:
09:15:a8:77:f1:e8:ed:97:16:21:c9:dc:f2:86:fc:bf:39:5b:
b3:a0:98:98:89:05:4e:f3:c0:d0:3f:53:c5:59:20:54:1f:0a:
ff:c1:18:6b:66:24:9a:ed:26:a2:f3:67:29:6f:2e:06:23:e4:
66:35:6e:12:9f:3e:da:85:c4:93:c9:5e:ae:b6:ae:d0:7a:24:
f0:8f:7e:bc:d0:a4:7a:94:c5:4e:05:84:26:9c:58:97:a4:f3:
ba:67:5b:95:80:49:ff:4e:54:77:a4:c8:ef:80:b5:51:bf:35:
7c:17:9c:c4:df:fa:91:db:95:9c:b7:9a:36:cb:c2:54:3c:eb:
f4:c5:2b:39:e1:9d:f2:e8:45:61:d8:13:04:e9:53:73:cb:82:
d7:fd:d5:ea:c1:c1:6d:74:60:92:e3:51:13:d1:ae:43:d2:ad:
60:39:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:54 2026 by rpki-client