Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
File: AS198487.roa (raw, json)
Hash identifier: Zz0hMIOkloM/dR6PIPaUl1KgoqFJPUUq2fS9AJR/AJM=
Subject key identifier: C1:A3:27:12:FB:BD:49:BB:C5:17:AC:40:B2:FA:68:42:F3:1A:7B:76
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2CB2F30572616CEC2D23412CCDA96115797EADCE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
Signing time: Thu 18 Jun 2026 03:47:33 +0000
ROA not before: Thu 18 Jun 2026 03:42:33 +0000
ROA not after: Thu 17 Jun 2027 03:47:33 +0000
asID: 198487
IP address blocks: 143.14.209.0/24 maxlen: 24
155.117.222.0/24 maxlen: 24
168.222.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b2:f3:05:72:61:6c:ec:2d:23:41:2c:cd:a9:61:15:79:7e:ad:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 18 03:42:33 2026 GMT
Not After : Jun 17 03:47:33 2027 GMT
Subject: CN=C1A32712FBBD49BBC517AC40B2FA6842F31A7B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:57:fc:73:98:e1:47:3f:68:45:00:03:4d:f4:
40:5f:5c:69:27:f3:d5:16:06:60:e4:97:6e:37:81:
5d:7d:9e:31:f0:05:25:dd:48:d7:7e:f1:7c:57:c5:
9c:25:cc:66:66:26:91:3f:78:a0:bc:2c:d4:40:4a:
d1:c8:7c:6f:25:1f:b7:24:40:71:2e:8f:c7:a7:12:
e8:a1:66:55:e8:61:27:58:b5:d1:1f:3b:d4:0f:95:
88:26:67:f8:15:6e:de:1f:84:82:f0:e2:63:c7:a0:
c4:4c:49:fd:d1:72:25:48:ea:2e:f1:5b:79:a8:31:
95:2e:7d:8d:9b:66:92:04:f8:8e:6e:43:5b:58:a6:
2b:ce:e6:0b:ac:a9:0e:ed:34:1d:94:60:5e:15:7a:
e5:16:99:88:7c:3c:03:44:67:42:6b:0c:db:62:1f:
5e:1f:e0:4e:10:da:2d:e4:c5:2e:17:1a:88:31:a5:
bf:b1:46:48:28:7e:c8:c2:12:e2:11:4a:41:9b:f5:
bb:75:cb:1f:74:cb:65:f7:f7:48:98:87:b0:43:f1:
1c:dc:d6:5c:19:b9:2d:75:fd:41:cb:1f:6e:c0:1a:
29:e6:ee:7a:8b:bf:d7:b2:ee:e6:4f:53:fe:b7:8b:
73:9a:6c:a7:9e:7e:ac:20:9c:e8:3a:4a:08:72:4b:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:27:12:FB:BD:49:BB:C5:17:AC:40:B2:FA:68:42:F3:1A:7B:76
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.209.0/24
155.117.222.0/24
168.222.71.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0e:51:ab:f0:31:e3:10:5f:01:1f:66:72:73:6d:7b:0f:cb:
4b:8d:ad:3f:7b:6d:15:7c:90:d3:79:56:c9:48:1c:a7:69:e4:
55:bd:37:36:54:a2:3c:75:09:0b:ee:04:f4:70:86:14:6e:ba:
9e:1a:4a:4c:4e:6c:92:3a:4c:cd:97:8f:8e:3e:52:98:28:68:
43:5f:23:86:33:bc:42:b8:37:f0:48:68:cb:3d:67:d1:4b:1d:
dd:b2:c5:85:50:a3:b4:3a:dd:a7:63:1c:0e:cb:a0:56:81:f8:
ca:28:3c:b3:11:ce:58:1f:e6:be:3d:55:6a:6c:14:75:a1:5f:
24:a3:61:96:d8:0e:05:0d:52:70:a8:fb:27:5e:79:8b:3c:a9:
e7:9e:f3:dc:0e:ae:01:e7:02:a1:8c:c0:c5:24:c7:48:0c:b7:
0e:d2:de:54:ce:96:18:20:f7:1b:9e:74:b0:64:83:e1:99:d6:
cf:9a:d6:e8:88:8b:75:e6:c6:08:4c:5b:df:7b:03:b5:c8:13:
89:d9:0f:45:99:0c:96:28:b9:de:94:43:c2:cc:f2:c9:21:e2:
5d:13:3b:4a:09:4e:78:79:68:a6:d6:e4:71:b9:e3:50:cd:df:
de:d0:1d:40:cb:7a:a3:a3:c4:9e:e1:b3:98:15:b9:89:af:f9:
1c:88:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 14:13:18 2026 by rpki-client