Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: RQg0XV7EDglbwQ0GetizzES+tnuID8HTM/WeAMUVp+I=
Subject key identifier: D2:05:97:FF:0C:87:5B:8E:05:F3:A2:FD:B2:87:66:D5:E5:0E:63:E5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 520827EEBB84DAA59540119D762325E1E6F00709
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
Signing time: Sat 17 Oct 2026 00:00:17 +0000
ROA not before: Fri 16 Oct 2026 23:55:17 +0000
ROA not after: Sat 16 Oct 2027 00:00:17 +0000
asID: 198566
IP address blocks: 96.62.249.0/24 maxlen: 24
140.233.161.0/24 maxlen: 24
140.233.167.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
146.103.28.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
162.141.39.0/24 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.90.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
167.148.159.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.72.0/24 maxlen: 24
168.222.116.0/24 maxlen: 24
168.222.117.0/24 maxlen: 24
168.222.118.0/24 maxlen: 24
168.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:08:27:ee:bb:84:da:a5:95:40:11:9d:76:23:25:e1:e6:f0:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 16 23:55:17 2026 GMT
Not After : Oct 16 00:00:17 2027 GMT
Subject: CN=D20597FF0C875B8E05F3A2FDB28766D5E50E63E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:7e:50:6d:e9:ad:aa:6f:48:62:98:27:a9:
5d:c3:c3:65:9f:53:15:20:11:35:9d:80:94:51:4a:
99:ab:b3:70:23:ed:a0:59:ec:1a:15:1d:e9:00:02:
ad:71:57:d6:8f:26:1d:e4:41:f2:9c:75:8d:23:aa:
17:b7:c7:cf:e9:b8:43:76:f2:d4:c8:d0:13:ab:73:
f2:d9:39:cf:4a:e1:42:b7:22:06:06:5b:5d:03:81:
0c:be:53:48:9e:8f:81:11:bc:96:35:f2:7a:57:45:
a1:40:01:7e:45:2e:9e:c3:f2:6e:c3:85:91:32:f7:
09:24:cf:06:24:2a:dc:fd:27:ea:48:fe:6a:49:33:
89:89:9d:80:49:ea:10:09:10:1e:a2:c4:25:b3:80:
7d:26:e6:8a:25:9e:9f:52:c4:19:a3:62:2b:ea:f8:
61:85:c8:53:d4:f0:7c:3a:1b:dd:07:1e:66:e7:0d:
d5:1d:bf:7f:48:aa:a5:86:76:1c:de:6c:1b:76:11:
fe:cd:8c:f8:48:6b:6e:05:bb:a1:a8:53:c5:26:40:
1b:1f:e1:50:40:e0:fe:84:c6:62:15:f5:1f:66:c4:
fa:b0:78:4e:d4:fa:bd:c8:d2:26:93:41:4f:e9:50:
23:e5:5e:d8:0a:f9:2e:fe:64:d1:d2:26:47:69:09:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:97:FF:0C:87:5B:8E:05:F3:A2:FD:B2:87:66:D5:E5:0E:63:E5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.249.0/24
140.233.161.0/24
140.233.167.0/24
140.233.184.0/24
146.103.28.0/24
148.135.173.0/24
150.241.242.0/24
150.241.254.0/24
162.141.39.0/24
162.141.70.0/24
162.141.90.0/24
162.141.126.0/24
167.148.159.0/24
167.148.215.0/24
168.222.12.0/24
168.222.23.0/24
168.222.72.0/24
168.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:71:ec:3f:73:31:8a:3f:e2:a8:8b:ff:a3:f7:2e:7d:78:b6:
bb:70:31:2c:e9:92:db:e8:2a:15:e2:c5:e0:3d:fe:69:e1:53:
d0:c4:5d:f3:fa:dc:10:e3:26:47:7d:8f:5e:91:69:4e:b1:1c:
cb:5a:4d:55:65:f2:c4:96:f5:18:01:40:06:d4:77:b6:c1:e8:
6a:e8:4c:35:0e:cb:3c:cb:53:52:07:34:e5:ba:34:09:dc:4e:
31:8a:a6:29:52:44:4f:3a:92:e0:da:3b:08:c9:f3:a1:ca:97:
b1:e1:97:83:db:ba:e1:7b:6b:7b:57:e5:f5:bc:7d:9e:b8:c4:
6a:a3:29:c7:ce:36:28:29:56:10:ba:db:95:b4:fd:d7:ba:11:
60:a6:20:b1:7f:27:ef:77:b0:a5:99:0f:ac:6b:fc:a8:65:7e:
84:7c:b3:76:09:89:11:a6:f8:ee:ce:64:bc:b4:13:e5:64:dd:
95:1b:6a:79:c2:7c:4d:ab:c5:2c:f2:41:e6:d6:4b:a3:25:24:
c9:24:11:6a:0d:d0:6d:48:82:d8:2c:ef:db:80:c0:58:da:69:
1b:ac:db:68:1c:8a:97:33:ef:43:ff:bd:37:cd:90:e9:2d:99:
e7:91:d9:b0:1d:6c:86:ae:c5:86:88:4f:29:3f:1e:04:5a:98:
58:fb:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:38 2026 by rpki-client