Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: a9ygL5c2sbzkgdKMt92BOFxaAmVTkVdN4uLecnHiwKc=
Subject key identifier: C9:AB:F6:B8:C3:D4:6F:B7:A4:20:82:7A:43:C0:2A:B0:97:0A:DF:29
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 368AFFF59D8597ABCCF287E72EDA35F479A5BAFA
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS198566.roa
Signing time: Mon 28 Sep 2026 13:23:09 +0000
ROA not before: Mon 28 Sep 2026 13:18:09 +0000
ROA not after: Mon 27 Sep 2027 13:23:09 +0000
asID: 198566
IP address blocks: 5.199.1.0/24 maxlen: 24
5.199.6.0/24 maxlen: 24
5.199.11.0/24 maxlen: 24
5.199.13.0/24 maxlen: 24
5.199.31.0/24 maxlen: 24
5.199.33.0/24 maxlen: 24
5.199.34.0/24 maxlen: 24
5.199.39.0/24 maxlen: 24
5.199.41.0/24 maxlen: 24
5.199.54.0/24 maxlen: 24
5.199.55.0/24 maxlen: 24
5.199.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8a:ff:f5:9d:85:97:ab:cc:f2:87:e7:2e:da:35:f4:79:a5:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 28 13:18:09 2026 GMT
Not After : Sep 27 13:23:09 2027 GMT
Subject: CN=C9ABF6B8C3D46FB7A420827A43C02AB0970ADF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:ae:b8:e4:1b:9c:09:c7:b0:01:1b:70:af:
70:21:ba:0d:c5:ed:89:b3:31:24:6a:e6:92:a5:ac:
6a:6a:81:c3:00:80:37:60:20:c9:ad:d8:18:97:04:
5a:d4:be:72:48:ca:bd:5b:b5:dc:d8:e4:77:d5:a3:
b5:04:a7:e8:d2:0f:80:48:69:5d:e8:25:75:ae:1b:
67:eb:1e:d1:4a:15:2b:1f:89:96:0d:64:d5:5c:4e:
85:11:ea:e2:05:f2:20:4a:b2:98:2e:49:c0:f0:f0:
ef:eb:fc:cf:ca:1c:e0:fe:ea:06:db:d0:79:3e:b5:
63:37:68:18:b4:be:4d:14:bd:ce:91:d0:8f:7a:eb:
29:41:c7:99:3c:85:c7:3a:46:8d:41:52:17:a9:4b:
d5:f2:79:27:b6:0e:c5:32:f8:b1:81:88:5e:d5:f9:
76:8a:ec:7a:a7:73:b1:ec:09:f9:7f:2c:c4:5b:43:
18:7e:c0:6c:77:36:f8:2a:5e:02:d2:4c:05:16:e1:
ad:c1:1e:47:64:0f:b0:82:fa:f1:8a:e0:39:f5:e0:
9c:17:c4:05:a8:56:dd:f1:4e:56:b9:cf:b3:3b:3a:
30:b1:8c:41:b3:a1:e9:db:c9:5f:1e:48:24:a9:f4:
f4:6e:8e:76:87:bd:07:94:20:a5:86:25:de:41:be:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AB:F6:B8:C3:D4:6F:B7:A4:20:82:7A:43:C0:2A:B0:97:0A:DF:29
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.1.0/24
5.199.6.0/24
5.199.11.0/24
5.199.13.0/24
5.199.31.0/24
5.199.33.0-5.199.34.255
5.199.39.0/24
5.199.41.0/24
5.199.54.0/23
5.199.60.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2b:e1:a0:2d:2b:b9:9d:c5:2c:c8:5b:e8:1e:46:59:87:b3:
7e:47:57:83:a1:ec:71:33:d6:0e:e7:5d:7a:a5:7a:dd:3e:01:
51:3e:28:7c:f2:15:aa:1d:8f:8b:30:91:db:7f:d8:47:3f:d2:
cf:fe:8a:87:60:86:6f:07:b6:61:4e:1d:7c:82:95:3e:8b:09:
1b:69:6c:4a:2f:68:41:b9:87:16:c7:e0:19:13:4c:fa:6c:30:
54:cf:ea:5f:b6:5a:13:be:ec:23:a3:ce:ea:6a:3e:00:f4:de:
63:cd:18:77:e7:a8:b0:49:d1:5f:67:39:41:23:01:ff:9d:b8:
f4:11:aa:e8:00:79:2f:ae:db:9d:98:3a:7a:af:e3:da:1c:07:
2c:60:d9:0a:d3:30:51:88:4b:72:63:92:19:c3:ff:1a:de:41:
a5:25:00:54:77:51:c7:aa:e6:f8:24:87:51:16:29:5a:ab:e3:
3b:48:78:05:8f:b6:c2:32:74:cf:b5:8f:f5:4c:1c:bf:8b:cd:
d3:e5:eb:bd:3d:f6:ef:df:30:cc:b3:d8:66:22:18:fb:69:5c:
0d:ac:49:0c:bc:bd:f2:4e:37:21:78:43:01:83:1f:93:ea:f2:
f0:42:5c:35:08:4f:f4:5f:e4:e6:0e:eb:c5:db:ea:37:53:a5:
93:65:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:28 2026 by rpki-client