Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198924.roa
File: AS198924.roa (raw, json)
Hash identifier: UJGjjlPHazazjM+JEJ27Ew+1BzAI0ZzUEVVsOfRNgGM=
Subject key identifier: D6:0C:9C:A9:D8:16:F6:45:3F:36:6F:0F:13:4C:8B:62:05:98:B7:8E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 10888531AF3900DCA8156E4BFA913148DDE35D1D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198924.roa
Signing time: Thu 08 Oct 2026 12:41:29 +0000
ROA not before: Thu 08 Oct 2026 12:36:29 +0000
ROA not after: Thu 07 Oct 2027 12:41:29 +0000
asID: 198924
IP address blocks: 94.118.97.0/24 maxlen: 24
94.118.118.0/24 maxlen: 24
94.118.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:88:85:31:af:39:00:dc:a8:15:6e:4b:fa:91:31:48:dd:e3:5d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 8 12:36:29 2026 GMT
Not After : Oct 7 12:41:29 2027 GMT
Subject: CN=D60C9CA9D816F6453F366F0F134C8B620598B78E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:4c:d4:71:e9:13:da:41:8a:6e:8b:95:bf:
b8:68:f1:70:02:d0:c3:a2:6f:dd:34:07:13:09:49:
b8:14:76:7c:f2:9d:2d:18:15:6b:9f:e3:1f:b6:40:
79:79:a3:43:0b:ec:1b:04:b2:fd:04:a5:9d:6b:cb:
d7:79:ca:8a:65:49:8e:ac:b1:b4:d5:d3:ba:34:3f:
45:b7:c3:1b:db:8f:3a:da:7f:c8:09:e9:b4:85:52:
be:93:48:fb:98:d5:7a:75:b7:6f:c5:52:52:a4:0c:
36:4e:f8:b4:1f:52:23:22:a0:70:51:16:3c:8c:da:
39:93:ba:c3:27:43:58:36:f3:b4:4f:cd:57:f2:5d:
ac:f2:dc:00:5b:02:8a:d0:90:df:16:e0:99:16:ca:
9c:21:a7:29:41:ee:74:cb:e3:49:df:85:c5:25:bc:
1b:f4:dc:f5:e8:12:24:c0:95:36:4b:9b:4e:1a:ef:
96:a6:7a:4a:dc:3d:f6:51:fe:a2:5f:de:d4:c3:37:
8c:b9:1a:9e:d0:37:21:ca:64:88:c3:cf:78:6b:33:
50:66:46:b4:21:6a:11:83:56:88:1b:63:02:b0:39:
91:83:6f:3d:f3:15:43:ea:27:ed:f0:df:1f:95:85:
d1:28:2c:1d:46:bb:f8:ab:bb:90:d0:77:91:6c:35:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0C:9C:A9:D8:16:F6:45:3F:36:6F:0F:13:4C:8B:62:05:98:B7:8E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.97.0/24
94.118.118.0/24
94.118.152.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5c:f2:e8:97:54:e2:70:a6:7d:0c:47:8d:99:cd:b9:51:73:
23:7f:55:ce:63:18:d8:56:a5:f7:17:a6:b6:3f:f8:3c:d4:aa:
e7:9d:73:9d:84:fe:9e:e1:7f:15:2b:e0:e9:15:26:66:7c:7d:
ea:c9:65:1c:10:0d:96:61:7c:73:95:e9:f9:14:93:8b:54:56:
a9:e2:b0:eb:c7:2f:df:e7:bd:07:36:61:f9:b3:a1:7b:d8:cc:
7a:3f:89:2b:e8:7b:bb:80:71:5c:fb:d1:a4:f2:5b:f6:04:e1:
a7:c8:ec:d8:b5:16:e3:61:41:f7:1e:48:76:55:17:97:67:f8:
a7:b4:cd:3d:ed:e7:21:82:ca:de:11:a3:1e:f4:52:f7:b7:e2:
72:5d:27:3e:60:ac:ab:da:12:22:89:f9:3e:16:cc:dc:a1:4c:
bb:11:26:26:d7:d6:aa:e6:35:c1:cb:da:f9:6d:39:43:88:12:
71:f3:bc:0d:cf:3b:fa:c6:a2:2c:8f:cb:28:b8:f8:62:68:60:
90:ae:d6:a8:ab:7d:dc:b7:22:e6:20:bf:b9:9b:e9:20:7c:54:
13:bb:6a:2e:f4:50:dc:5c:26:ac:a3:4c:89:b9:4e:b6:e7:ae:
1d:9f:bf:c8:b4:33:a2:28:a8:7a:36:20:0c:db:d8:1d:92:32:
13:d8:2e:13
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUEIiFMa85ANyoFW5L+pExSN3jXR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMDgxMjM2MjlaFw0yNzEwMDcxMjQxMjlaMDMxMTAvBgNV
BAMTKEQ2MEM5Q0E5RDgxNkY2NDUzRjM2NkYwRjEzNEM4QjYyMDU5OEI3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZI0zUcekT2kGKbouVv7ho8XAC
0MOib900BxMJSbgUdnzynS0YFWuf4x+2QHl5o0ML7BsEsv0EpZ1ry9d5yoplSY6s
sbTV07o0P0W3wxvbjzraf8gJ6bSFUr6TSPuY1Xp1t2/FUlKkDDZO+LQfUiMioHBR
FjyM2jmTusMnQ1g287RPzVfyXazy3ABbAorQkN8W4JkWypwhpylB7nTL40nfhcUl
vBv03PXoEiTAlTZLm04a75amekrcPfZR/qJf3tTDN4y5Gp7QNyHKZIjDz3hrM1Bm
RrQhahGDVogbYwKwOZGDbz3zFUPqJ+3w3x+VhdEoLB1Gu/iru5DQd5FsNbZBAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU1gycqdgW9kU/Nm8PE0yLYgWYt44wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk4OTI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXnZh
AwQAXnZ2AwQAXnaYMA0GCSqGSIb3DQEBCwUAA4IBAQCCXPLol1TicKZ9DEeNmc25
UXMjf1XOYxjYVqX3F6a2P/g81KrnnXOdhP6e4X8VK+DpFSZmfH3qyWUcEA2WYXxz
len5FJOLVFap4rDrxy/f570HNmH5s6F72Mx6P4kr6Hu7gHFc+9Gk8lv2BOGnyOzY
tRbjYUH3Hkh2VReXZ/intM097echgsreEaMe9FL3t+JyXSc+YKyr2hIiifk+Fszc
oUy7ESYm19aq5jXBy9r5bTlDiBJx87wNzzv6xqIsj8souPhiaGCQrtaoq33ctyLm
IL+5m+kgfFQTu2ou9FDcXCaso0yJuU62564dn7/ItDOiKKh6NiAM29gdkjIT2C4T
-----END CERTIFICATE-----
Generated at Mon Oct 19 18:49:38 2026 by rpki-client