Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198420.roa
File: AS198420.roa (raw, json)
Hash identifier: EbRSZp00dPHe6jGJFIHT/v3+m0ollXpZjplOToC4OKM=
Subject key identifier: A8:2A:7F:65:7B:72:C7:62:E5:1A:76:13:62:FA:99:54:6D:1B:2E:CF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 12A9FA377497E70B1DE824ED066D8A0D3883BDF5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198420.roa
Signing time: Mon 22 Jun 2026 15:42:34 +0000
ROA not before: Mon 22 Jun 2026 15:37:34 +0000
ROA not after: Mon 21 Jun 2027 15:42:34 +0000
asID: 198420
IP address blocks: 140.233.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 14:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a9:fa:37:74:97:e7:0b:1d:e8:24:ed:06:6d:8a:0d:38:83:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 15:37:34 2026 GMT
Not After : Jun 21 15:42:34 2027 GMT
Subject: CN=A82A7F657B72C762E51A761362FA99546D1B2ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:1e:99:38:d7:7b:51:77:ee:45:d8:50:ee:
71:93:66:02:44:dc:a0:a9:0c:57:24:68:ca:30:46:
00:02:f5:1c:78:fc:49:bd:a6:d8:bb:50:4c:21:ec:
3a:7e:4a:e2:fc:18:fe:cc:3e:f6:ef:ed:4c:78:eb:
d0:a3:01:0d:10:fa:df:54:18:28:05:eb:42:bf:9b:
61:07:6e:18:4e:f2:81:b2:f4:d2:de:76:04:d6:8b:
a7:b4:bb:19:9e:4c:36:e5:68:04:20:46:35:89:8a:
bb:90:fa:c8:6c:cb:14:21:5f:a8:97:30:a6:87:1b:
31:da:b4:c2:ef:c0:4d:5c:25:7e:cb:ac:ed:d8:dd:
50:f9:0f:e2:b0:37:46:04:3e:e4:58:3f:8b:0b:37:
17:5e:8c:cd:39:92:f4:86:3e:51:95:c2:87:39:ff:
42:39:af:61:e4:22:22:e1:e4:3c:af:e7:76:ca:d5:
2a:15:57:3c:47:a4:bf:96:00:d6:a8:c5:d4:cb:a0:
ef:ec:8a:7a:b3:97:0a:9f:a3:53:0a:37:5c:db:91:
da:4f:28:46:c7:f0:2a:c8:43:5c:c1:7d:e9:d5:9c:
a9:5a:32:7c:77:81:e9:2d:97:23:01:98:1c:28:f5:
7f:b9:99:58:7a:2e:40:2e:67:17:2a:32:5f:b8:7e:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:7F:65:7B:72:C7:62:E5:1A:76:13:62:FA:99:54:6D:1B:2E:CF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.160.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ab:e9:ed:10:00:00:04:62:f9:ce:44:78:35:f0:3b:26:c9:
d4:78:11:f6:fd:16:4b:96:fa:94:99:82:5a:83:3e:44:c0:d3:
69:ab:e9:a9:6d:ea:50:e0:2e:06:8c:6c:30:f3:58:3e:79:1a:
e4:5d:16:82:a9:da:94:d4:4c:ac:08:36:55:10:27:47:c6:5d:
68:87:c8:cd:a9:02:50:e4:0e:49:41:92:7b:05:d0:03:67:7b:
28:b4:fc:0d:04:e7:bd:c6:81:9e:01:58:8c:e1:ee:66:2e:2a:
8d:00:55:4c:a9:04:b8:d6:9e:98:c5:f1:78:29:48:fd:b8:7d:
4a:c4:69:1d:18:af:15:c1:ed:9d:16:7e:1c:3c:ca:0d:4c:b4:
14:7f:b8:ba:06:59:c4:2c:62:d6:65:25:25:0b:30:02:5d:53:
7a:ad:33:11:e6:2a:ef:d1:43:20:8e:13:ff:d6:0d:c9:8d:a8:
80:2c:8e:c8:c4:97:8c:a0:c1:b7:c9:f7:1a:23:30:ae:fa:15:
21:d1:36:5d:7c:eb:f6:fb:39:ac:cf:35:17:a1:99:ac:fa:b2:
64:92:40:91:12:0f:a4:fc:15:b4:06:b8:7b:9a:d7:31:91:28:
fb:c6:08:17:23:11:a2:45:21:24:ac:cf:1c:15:04:b4:00:de:
28:0d:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:28 2026 by rpki-client