Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198087.roa
File: AS198087.roa (raw, json)
Hash identifier: 7HiN/gZgaG6OzTNxjYClVpIlcPbHPl3SICe0Y9qzouw=
Subject key identifier: AC:3D:1D:F0:14:E3:CB:AA:35:B3:E3:F3:7D:20:81:4A:96:85:C0:C3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 318260FD213C08BB10415C4D24A25A60AA068CB3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198087.roa
Signing time: Sun 24 May 2026 06:22:46 +0000
ROA not before: Sun 24 May 2026 06:17:46 +0000
ROA not after: Sun 23 May 2027 06:22:46 +0000
asID: 198087
IP address blocks: 96.62.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:82:60:fd:21:3c:08:bb:10:41:5c:4d:24:a2:5a:60:aa:06:8c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 24 06:17:46 2026 GMT
Not After : May 23 06:22:46 2027 GMT
Subject: CN=AC3D1DF014E3CBAA35B3E3F37D20814A9685C0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:c9:8a:23:27:06:55:cf:67:39:4b:d9:1d:
25:3e:f3:56:cd:9c:06:1d:64:f9:32:27:34:05:46:
45:f1:39:08:3e:e4:12:bb:22:48:cb:ca:70:91:da:
a3:b6:57:29:0b:fd:97:1d:33:08:84:34:c6:14:55:
e2:07:6e:15:ba:6a:cb:fc:83:0c:78:e0:5b:a9:12:
04:96:ca:6d:0f:98:81:b7:40:53:75:24:46:ca:83:
d9:6d:38:85:60:3b:78:c2:2d:22:8d:cc:e4:bd:5c:
dd:80:65:cb:c6:60:08:1a:e7:6f:43:1c:aa:f2:8a:
30:64:ff:ab:4a:b4:51:7a:71:03:24:bb:1c:4e:2a:
c9:ee:c9:8c:f1:90:96:92:17:3c:1a:20:49:55:66:
30:85:96:3f:b0:57:b1:f5:15:1b:d8:70:26:af:20:
9f:9e:75:a2:af:97:a4:c6:b7:bc:0f:5c:f6:f4:96:
41:71:6b:fb:2a:fa:6b:82:eb:29:ef:47:31:cc:60:
ca:30:d4:cc:f1:52:0c:c4:58:9c:db:0f:dd:06:6f:
7d:89:4e:12:b3:f7:66:f7:9d:d2:b2:a7:d1:9c:96:
d6:7c:87:ca:8f:7a:a2:85:26:74:9f:f7:d9:7c:0e:
07:ff:97:cb:97:9d:9a:e8:ed:55:ad:71:6e:c3:ce:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:1D:F0:14:E3:CB:AA:35:B3:E3:F3:7D:20:81:4A:96:85:C0:C3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:9a:aa:c3:d6:79:5f:c6:2d:15:95:f4:82:7f:48:d4:2a:30:
ae:27:5a:9a:d7:cc:84:40:ab:51:f5:2a:2c:d1:5d:b2:64:25:
f0:a4:62:bf:77:57:ea:21:9d:34:c6:ee:7a:ed:26:ee:19:53:
3a:f2:92:8b:97:eb:c4:2b:55:ce:2d:95:9f:1d:a0:cb:00:c9:
7e:0a:b2:61:72:9b:8d:e5:6d:e3:25:53:62:6c:46:ac:27:8c:
92:d6:f3:25:01:83:7d:8b:dc:b8:4b:25:01:90:3b:bb:f6:e0:
f5:5b:5f:97:f4:7d:4f:c7:1a:b7:c6:1d:57:ea:6a:91:5d:c9:
82:8c:dd:c0:2a:56:e6:8e:aa:45:b7:50:75:92:5b:d1:7c:02:
97:db:f0:58:e1:b0:f3:22:fa:b5:34:aa:25:3e:e4:6b:90:77:
ed:c4:ad:60:92:b5:2d:63:15:69:7b:5e:1c:d3:3c:86:9a:43:
db:58:c6:62:6d:38:c7:50:27:81:37:62:a1:8f:74:75:34:3e:
f9:c9:81:94:2a:4a:98:7e:67:c9:d7:97:2b:1c:f7:a0:0b:1e:
86:4a:1e:57:a2:f7:d2:b7:77:e2:1c:3a:dc:ab:ee:84:f5:3d:
64:a9:0a:56:72:0a:02:49:aa:ff:4d:8d:89:09:d5:ee:35:0b:
0a:ee:a4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:18:32 2026 by rpki-client