Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: 0gYeeY+D8jGcbOF9Mdtpa/XqHdVRoIaamvhIKLjK0kw=
Subject key identifier: 94:6D:33:66:82:78:7A:46:BE:58:D3:EA:B3:31:32:0E:D8:96:33:7F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 43FDC3CC4B00DF215353EA728897C64BF873525F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198566.roa
Signing time: Thu 03 Sep 2026 19:09:33 +0000
ROA not before: Thu 03 Sep 2026 19:04:33 +0000
ROA not after: Thu 02 Sep 2027 19:09:33 +0000
asID: 198566
IP address blocks: 46.202.208.0/24 maxlen: 24
46.202.209.0/24 maxlen: 24
46.202.210.0/24 maxlen: 24
46.202.211.0/24 maxlen: 24
46.202.212.0/24 maxlen: 24
46.202.213.0/24 maxlen: 24
46.202.214.0/24 maxlen: 24
46.202.215.0/24 maxlen: 24
91.124.58.0/24 maxlen: 24
95.134.164.0/24 maxlen: 24
178.92.149.0/24 maxlen: 24
178.92.154.0/24 maxlen: 24
178.92.156.0/24 maxlen: 24
178.92.161.0/24 maxlen: 24
178.92.169.0/24 maxlen: 24
178.92.177.0/24 maxlen: 24
178.94.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fd:c3:cc:4b:00:df:21:53:53:ea:72:88:97:c6:4b:f8:73:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 19:04:33 2026 GMT
Not After : Sep 2 19:09:33 2027 GMT
Subject: CN=946D336682787A46BE58D3EAB331320ED896337F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:e2:2b:70:6a:c7:bd:d0:f8:f8:65:7b:bf:
f7:ec:97:7b:2b:36:c9:fd:a3:b3:4e:54:7c:70:31:
ac:ec:86:ca:88:ab:45:91:2a:6d:64:ec:19:79:af:
29:51:b3:80:5b:bc:b8:f0:cd:2a:d2:33:e2:56:b3:
36:2b:16:23:81:a9:8a:6a:c3:88:26:53:30:b1:ce:
59:60:d2:ad:41:a2:c4:91:1d:8f:f8:54:ca:af:b4:
95:d4:dc:9a:77:a3:6e:dd:6d:46:24:dc:9f:2e:b2:
13:82:b8:c9:41:e6:f7:63:24:7f:08:14:0a:71:ed:
66:39:ef:08:9f:69:5c:b5:be:8b:38:df:eb:d2:a3:
6c:f2:a3:da:a0:1d:65:b4:c7:c4:26:81:45:88:95:
c8:cb:b4:96:de:31:3d:94:1b:f5:eb:61:65:7c:14:
84:b8:a2:1f:7e:78:3b:87:ee:6c:fc:71:83:97:22:
d9:b7:6c:b5:e8:45:ac:c1:29:59:78:20:55:37:00:
b8:4b:11:91:14:b0:a4:60:7c:01:9f:ff:78:40:b4:
97:01:d5:2d:1a:79:05:05:66:2f:e0:3c:e2:fa:4c:
01:5e:9b:0c:2e:1c:6e:fd:76:98:e1:d3:bc:6a:e7:
27:06:2c:63:9a:8b:02:25:0f:41:89:4b:f9:df:18:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:33:66:82:78:7A:46:BE:58:D3:EA:B3:31:32:0E:D8:96:33:7F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.208.0/21
91.124.58.0/24
95.134.164.0/24
178.92.149.0/24
178.92.154.0/24
178.92.156.0/24
178.92.161.0/24
178.92.169.0/24
178.92.177.0/24
178.94.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:66:11:03:69:e9:52:ac:c4:0e:1b:3f:64:43:e4:33:bb:d0:
ac:33:49:63:24:77:c0:40:0e:d2:3e:46:91:06:c2:66:93:41:
51:69:00:7a:f6:a6:2e:eb:bd:19:14:47:c6:a9:70:54:2f:fe:
04:e1:99:53:b2:90:5d:6f:6b:0f:34:79:0f:fc:68:3f:c8:1f:
37:87:d6:26:fa:ea:8b:86:50:27:81:43:fa:5a:b1:ce:9e:c3:
10:0d:25:bf:8b:aa:13:83:e8:18:50:99:db:70:66:75:a0:84:
73:6c:ff:70:f8:9e:5b:d3:6c:27:01:e2:fb:bb:f4:e6:4b:c3:
c4:fa:7e:0d:0e:68:e6:94:fc:5a:19:70:72:32:09:99:15:c9:
fb:87:74:7a:11:5e:e9:a5:85:78:e7:8f:8b:3d:d7:48:73:58:
b6:3d:99:76:17:d7:af:03:0a:ad:3b:4c:21:a4:1c:5b:43:3b:
7a:46:fa:e5:07:c1:af:d9:d2:d1:96:f3:86:2c:af:63:39:35:
11:9e:31:6e:0f:3d:60:e9:20:14:76:0a:9f:69:9e:fa:53:d5:
dc:73:45:b2:b0:aa:d5:cc:e0:c4:69:62:aa:7d:ec:c5:e5:17:
84:f7:4a:89:d2:9b:bd:cc:83:b7:7b:9f:19:69:bd:d6:71:79:
d6:cc:07:e6
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUQ/3DzEsA3yFTU+pyiJfGS/hzUl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MDMxOTA0MzNaFw0yNzA5MDIxOTA5MzNaMDMxMTAvBgNV
BAMTKDk0NkQzMzY2ODI3ODdBNDZCRTU4RDNFQUIzMzEzMjBFRDg5NjMzN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypeIrcGrHvdD4+GV7v/fsl3sr
Nsn9o7NOVHxwMazshsqIq0WRKm1k7Bl5rylRs4BbvLjwzSrSM+JWszYrFiOBqYpq
w4gmUzCxzllg0q1BosSRHY/4VMqvtJXU3Jp3o27dbUYk3J8ushOCuMlB5vdjJH8I
FApx7WY57wifaVy1vos43+vSo2zyo9qgHWW0x8QmgUWIlcjLtJbeMT2UG/XrYWV8
FIS4oh9+eDuH7mz8cYOXItm3bLXoRazBKVl4IFU3ALhLEZEUsKRgfAGf/3hAtJcB
1S0aeQUFZi/gPOL6TAFemwwuHG79dpjh07xq5ycGLGOaiwIlD0GJS/nfGAsnAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUlG0zZoJ4eka+WNPqszEyDtiWM38wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk4NTY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDLsrQ
AwQAW3w6AwQAX4akAwQAslyVAwQAslyaAwQAslycAwQAslyhAwQAslypAwQAslyx
AwQAsl7OMA0GCSqGSIb3DQEBCwUAA4IBAQCeZhEDaelSrMQOGz9kQ+Qzu9CsM0lj
JHfAQA7SPkaRBsJmk0FRaQB69qYu670ZFEfGqXBUL/4E4ZlTspBdb2sPNHkP/Gg/
yB83h9Ym+uqLhlAngUP6WrHOnsMQDSW/i6oTg+gYUJnbcGZ1oIRzbP9w+J5b02wn
AeL7u/TmS8PE+n4NDmjmlPxaGXByMgmZFcn7h3R6EV7ppYV454+LPddIc1i2PZl2
F9evAwqtO0whpBxbQzt6RvrlB8Gv2dLRlvOGLK9jOTURnjFuDz1g6SAUdgqfaZ76
U9Xcc0WysKrVzODEaWKqfezF5ReE90qJ0pu9zIO3e58Zab3WcXnWzAfm
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:04 2026 by rpki-client