Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198949.roa
File: AS198949.roa (raw, json)
Hash identifier: 1Zbl5RVG/zEyY0gxQses5JhlwsLRvH70Gz1h/PDiT/M=
Subject key identifier: C1:3F:7C:9B:96:A6:A9:26:B7:FB:41:DA:97:49:AE:83:0A:1C:3A:1B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 36839CEBF94FD4AF9CDEBE939C5A065EF05C5E2B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198949.roa
Signing time: Thu 03 Sep 2026 10:25:39 +0000
ROA not before: Thu 03 Sep 2026 10:20:39 +0000
ROA not after: Thu 02 Sep 2027 10:25:39 +0000
asID: 198949
IP address blocks: 51.194.212.0/23 maxlen: 24
51.194.228.0/24 maxlen: 24
94.116.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:83:9c:eb:f9:4f:d4:af:9c:de:be:93:9c:5a:06:5e:f0:5c:5e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 3 10:20:39 2026 GMT
Not After : Sep 2 10:25:39 2027 GMT
Subject: CN=C13F7C9B96A6A926B7FB41DA9749AE830A1C3A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:bc:65:c6:9c:a3:df:5e:a0:bc:80:be:d5:
c4:e1:ea:14:4d:b1:83:2f:3d:88:86:aa:29:85:e9:
c8:ea:ae:99:fc:48:88:a8:9a:fc:a6:4e:59:b7:e1:
63:c7:47:5b:d3:5a:49:6f:21:5d:c5:64:3c:8f:28:
4c:a1:91:ef:cf:ea:e9:39:a4:9b:ef:49:8f:d7:ff:
b2:3c:79:23:b6:5b:76:a8:44:4c:2e:f9:06:6c:ff:
93:a0:67:f4:ff:44:a3:8b:95:bb:37:d6:d7:82:f3:
d8:d5:bb:d1:fb:1d:de:8a:a1:75:8a:47:70:fa:47:
83:23:b7:44:4a:76:f9:c8:7d:b3:6b:57:18:06:cf:
cd:e8:47:3c:e9:2d:cb:a9:4d:7a:c7:da:5d:ab:e2:
b1:a6:12:8e:5d:37:1c:6b:24:a6:69:c6:88:ae:ed:
71:a6:a9:0f:b9:e9:13:bd:24:f8:9a:c5:ee:a3:0a:
12:0e:cd:79:d0:3d:bb:d7:20:a1:1a:c4:6a:da:66:
30:93:79:6d:ac:03:2e:cf:4b:86:5c:70:2a:0d:27:
6a:14:93:2a:c3:f6:73:41:9d:f3:c9:5f:8b:dc:8f:
09:45:51:7a:f8:eb:9d:d2:5e:a2:ce:06:cf:3e:99:
02:15:91:58:57:06:ce:ea:7c:be:db:7f:28:fb:61:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:7C:9B:96:A6:A9:26:B7:FB:41:DA:97:49:AE:83:0A:1C:3A:1B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.212.0/23
51.194.228.0/24
94.116.64.0/21
Signature Algorithm: sha256WithRSAEncryption
11:42:f1:ce:fe:ed:d4:8f:dc:4e:8f:cd:47:b3:5f:e1:2c:ab:
98:dd:5d:b0:18:c1:74:ec:2f:20:5a:a2:2e:0d:62:f8:78:5d:
91:3b:12:f6:35:83:0b:19:63:58:71:96:dd:98:c7:7c:0d:dd:
c6:e9:81:16:a8:77:32:67:84:2f:c8:bf:aa:71:f5:a2:26:3a:
47:e2:2b:11:3e:3f:49:49:1e:e1:f9:74:f9:14:9e:d9:a2:cc:
17:19:b7:86:e4:7d:f2:e4:ab:7e:8e:55:2e:f4:44:ed:60:24:
01:e2:66:67:66:d3:eb:e3:b9:67:7f:1e:f1:19:c9:d0:08:3c:
f3:cd:66:e2:ef:85:07:d8:76:50:eb:66:a5:63:5e:34:2d:eb:
cf:e8:60:b6:e9:47:e2:fd:f8:1a:32:9f:75:7c:f4:b5:fe:fe:
67:2b:ff:7b:d7:65:ef:3b:14:64:7a:a0:24:cd:36:ab:2b:42:
ee:d3:2e:39:32:66:09:f6:7f:bc:15:ae:5a:8d:b5:df:a3:bd:
1e:c6:70:dc:1d:7d:98:0b:db:b7:50:fb:6f:aa:7f:44:51:19:
6f:60:c0:1d:89:c2:db:24:00:2d:e5:f2:d4:a3:3d:89:f1:5e:
c8:60:0b:2d:bf:ad:5c:b3:04:fa:fb:d9:5c:2b:75:a5:40:e5:
e4:97:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:41:06 2026 by rpki-client