Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: lp48hGbqCPyIW1878ufTgmvADJnZV9y8xGAlQE4P3sI=
Subject key identifier: C9:45:3A:9A:6B:C1:20:A8:B4:06:01:4F:C5:89:2B:B7:34:2B:3F:D8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 743D7459EAE8D0B42781F9F5DDA4E1A08D1675BA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
Signing time: Fri 17 Apr 2026 03:15:34 +0000
ROA not before: Fri 17 Apr 2026 03:10:34 +0000
ROA not after: Fri 16 Apr 2027 03:15:34 +0000
asID: 198250
IP address blocks: 46.202.13.0/24 maxlen: 24
46.202.14.0/24 maxlen: 24
46.202.41.0/24 maxlen: 24
46.203.38.0/24 maxlen: 24
46.203.78.0/24 maxlen: 24
91.124.9.0/24 maxlen: 24
92.112.20.0/24 maxlen: 24
92.112.21.0/24 maxlen: 24
178.94.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3d:74:59:ea:e8:d0:b4:27:81:f9:f5:dd:a4:e1:a0:8d:16:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 17 03:10:34 2026 GMT
Not After : Apr 16 03:15:34 2027 GMT
Subject: CN=C9453A9A6BC120A8B406014FC5892BB7342B3FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:fb:c7:95:c6:19:08:70:93:c4:e6:a1:54:
b8:9c:21:e0:e7:b7:eb:ea:ca:81:e5:e5:d5:23:64:
f9:80:b2:cb:ba:42:4f:81:b2:45:3e:51:1f:4d:13:
4a:07:cd:87:6c:62:33:71:65:92:ab:44:c0:9b:2d:
b3:5a:a9:f8:0c:f7:c9:93:78:27:5a:a4:81:72:31:
73:72:95:c1:8a:6e:e7:b2:67:34:77:43:70:18:b4:
ed:49:69:f7:d6:34:eb:bc:bb:ae:16:1c:27:f6:e4:
08:6e:97:42:d0:43:41:72:06:18:7d:26:50:5c:2a:
e0:1b:91:07:68:e2:84:cc:c2:22:b0:31:16:ab:83:
13:3a:bd:5f:12:ff:16:6b:85:f6:ce:6a:3c:78:b5:
57:8f:e8:19:04:21:77:56:76:43:52:8c:99:3c:25:
d8:d1:78:51:95:23:a1:2c:f8:7f:da:10:3c:91:be:
df:4e:47:57:5c:e1:bd:32:35:39:cf:76:35:f5:2c:
38:48:68:15:79:f6:f9:b0:15:02:d0:bb:54:7d:7f:
26:87:cb:cb:e5:78:be:fd:d2:7b:d8:8a:e6:50:45:
4a:1f:2a:03:c3:27:18:a6:85:ad:ca:49:53:67:24:
76:fd:a5:8c:54:c9:92:88:e1:6c:08:f7:92:44:02:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:3A:9A:6B:C1:20:A8:B4:06:01:4F:C5:89:2B:B7:34:2B:3F:D8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.13.0-46.202.14.255
46.202.41.0/24
46.203.38.0/24
46.203.78.0/24
91.124.9.0/24
92.112.20.0/23
178.94.176.0/24
Signature Algorithm: sha256WithRSAEncryption
17:13:49:9b:be:aa:29:8c:5d:a1:c1:4e:c6:84:bf:ac:d8:1a:
90:b6:ff:b3:7e:ef:5b:2f:b9:7d:48:d6:1e:30:3c:ed:fc:d7:
81:fb:8b:8a:79:3e:17:3f:bf:f6:6d:7f:77:59:38:02:7c:da:
e1:70:7c:c4:40:4f:b3:94:3e:a7:87:48:b1:97:24:c1:c5:0f:
41:75:36:de:cb:89:b1:b5:dc:8b:53:19:55:65:49:63:85:1c:
12:4c:e4:72:6d:c8:a8:0f:f2:a0:27:ac:de:ff:65:99:cc:1e:
f5:da:49:40:d6:1b:c9:75:fe:84:0d:3f:ea:73:27:63:d1:47:
19:d3:57:af:c0:b8:26:a1:75:1e:87:6a:e3:aa:63:ff:4f:84:
e5:04:55:4a:1f:51:6f:e2:59:3f:84:80:08:b4:97:18:32:df:
32:bc:c4:15:50:d4:85:8b:c9:8e:92:f0:d8:1d:42:93:90:52:
2a:23:ab:2e:e2:8b:16:7f:a5:ff:60:bb:31:dc:3c:b7:bb:a0:
9a:71:69:4b:8f:d2:62:65:a6:bb:69:a1:f6:0c:75:18:c1:11:
ea:b6:9a:e7:dd:2f:4d:ae:95:d6:4a:cd:f2:9c:08:d0:08:01:
72:4f:13:09:f7:6b:73:6b:dd:ce:e4:91:ef:22:66:e9:bc:49:
0a:a9:a2:1c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdD10Wero0LQngfn13aThoI0WdbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA0MTcwMzEwMzRaFw0yNzA0MTYwMzE1MzRaMDMxMTAvBgNV
BAMTKEM5NDUzQTlBNkJDMTIwQThCNDA2MDE0RkM1ODkyQkI3MzQyQjNGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgPvHlcYZCHCTxOahVLicIeDn
t+vqyoHl5dUjZPmAssu6Qk+BskU+UR9NE0oHzYdsYjNxZZKrRMCbLbNaqfgM98mT
eCdapIFyMXNylcGKbueyZzR3Q3AYtO1JaffWNOu8u64WHCf25Ahul0LQQ0FyBhh9
JlBcKuAbkQdo4oTMwiKwMRargxM6vV8S/xZrhfbOajx4tVeP6BkEIXdWdkNSjJk8
JdjReFGVI6Es+H/aEDyRvt9OR1dc4b0yNTnPdjX1LDhIaBV59vmwFQLQu1R9fyaH
y8vleL790nvYiuZQRUofKgPDJximha3KSVNnJHb9pYxUyZKI4WwI95JEAt19AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUyUU6mmvBIKi0BgFPxYkrtzQrP9gwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk4MjUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAAu
yg0DBAAuyg4DBAAuyikDBAAuyyYDBAAuy04DBABbfAkDBAFccBQDBACyXrAwDQYJ
KoZIhvcNAQELBQADggEBABcTSZu+qimMXaHBTsaEv6zYGpC2/7N+71svuX1I1h4w
PO3814H7i4p5Phc/v/Ztf3dZOAJ82uFwfMRAT7OUPqeHSLGXJMHFD0F1Nt7LibG1
3ItTGVVlSWOFHBJM5HJtyKgP8qAnrN7/ZZnMHvXaSUDWG8l1/oQNP+pzJ2PRRxnT
V6/AuCahdR6HauOqY/9PhOUEVUofUW/iWT+EgAi0lxgy3zK8xBVQ1IWLyY6S8Ngd
QpOQUiojqy7iixZ/pf9guzHcPLe7oJpxaUuP0mJlprtpofYMdRjBEeq2mufdL02u
ldZKzfKcCNAIAXJPEwn3a3Nr3c7kke8iZum8SQqpohw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:39 2026 by rpki-client