Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: Ft9v2QbYk6odLQR2VuGPUXrIoEJBZ293XbGAVAqEvaA=
Subject key identifier: B1:E5:3A:77:16:57:26:41:56:19:6A:CD:0F:31:52:E4:AD:3F:DB:35
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04A4CDCB5228DEAD633F93DD2E1448F5B1797D7A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
Signing time: Mon 17 Aug 2026 21:12:36 +0000
ROA not before: Mon 17 Aug 2026 21:07:36 +0000
ROA not after: Mon 16 Aug 2027 21:12:36 +0000
asID: 198566
IP address blocks: 96.62.249.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.83.0/24 maxlen: 24
143.14.209.0/24 maxlen: 24
145.223.5.0/24 maxlen: 24
146.103.29.0/24 maxlen: 24
147.79.26.0/24 maxlen: 24
147.79.63.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
150.241.240.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
167.148.2.0/24 maxlen: 24
168.222.4.0/24 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.72.0/24 maxlen: 24
168.222.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a4:cd:cb:52:28:de:ad:63:3f:93:dd:2e:14:48:f5:b1:79:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 17 21:07:36 2026 GMT
Not After : Aug 16 21:12:36 2027 GMT
Subject: CN=B1E53A771657264156196ACD0F3152E4AD3FDB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:b7:47:81:c9:b8:3f:cc:e4:53:2e:8a:b7:
c7:1f:95:77:1e:b5:23:6d:2e:c6:b8:01:cf:20:e7:
0a:51:f3:30:c1:7b:f2:fb:18:cc:b0:46:07:14:e8:
f9:6c:78:f3:e4:28:b7:bb:81:f1:a0:85:54:74:d3:
c5:8e:5b:a1:c8:34:68:c0:94:23:8e:1e:0c:a1:fa:
94:39:96:ef:c8:2e:52:8a:d3:b9:5a:f5:06:93:40:
b0:a5:fc:b4:00:c9:a6:12:8c:be:2d:e2:b7:97:82:
4a:60:54:b2:19:2f:e5:2b:10:64:d2:f4:58:65:7e:
93:93:ee:8d:3f:48:8f:ae:19:4c:4e:8d:b9:c7:35:
82:af:ab:b3:5e:a9:03:c9:18:40:6e:a2:57:18:66:
e1:b7:db:b6:be:4f:b0:e5:0a:ec:01:5c:c2:5f:fa:
94:a8:b8:d1:af:d5:80:61:cc:e5:99:d6:83:8c:f4:
e6:43:05:79:c4:12:be:2e:a9:53:86:7a:f7:37:18:
f0:b0:5e:5b:76:de:ca:96:18:79:a0:91:aa:a8:f5:
ce:08:4f:82:34:9d:c2:b2:94:4a:34:21:6e:b5:90:
fb:1c:30:8e:36:1d:ee:ce:47:7c:72:49:2b:1d:50:
02:e4:6b:e6:ca:d1:75:83:c8:a3:f6:dd:83:f4:ff:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E5:3A:77:16:57:26:41:56:19:6A:CD:0F:31:52:E4:AD:3F:DB:35
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.249.0/24
143.14.16.0/24
143.14.83.0/24
143.14.209.0/24
145.223.5.0/24
146.103.29.0/24
147.79.26.0/24
147.79.63.0/24
148.135.181.0/24
150.241.136.0/24
150.241.240.0/24
155.117.136.0/24
167.148.2.0/24
168.222.4.0/24
168.222.12.0/24
168.222.72.0/24
168.222.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:47:d6:94:82:d4:44:31:ef:69:f6:6f:db:97:86:d6:15:de:
d5:ee:34:71:af:05:58:b9:b9:ea:a7:7b:d1:8b:1b:44:51:0a:
cb:fc:3e:15:7b:eb:68:49:f6:10:4d:29:5b:47:01:3a:56:c8:
68:09:4b:82:cb:b4:12:5b:ab:1f:81:07:ed:0e:6d:e8:6e:0f:
0a:eb:79:67:d3:f7:31:d5:44:24:ea:cb:7a:c4:a6:f3:cc:56:
84:b1:3d:69:9b:96:34:a8:f9:71:4e:ef:71:88:3c:e3:31:cc:
d8:80:39:18:e3:f8:0d:04:2e:d7:1e:b0:75:9f:92:14:06:4d:
99:90:1c:fc:32:08:2a:1a:f5:b7:b1:a5:0e:f9:54:fc:c7:7f:
3c:13:8f:38:5e:a6:36:30:e7:e2:36:0e:c3:2c:32:d0:4d:2d:
5a:ec:8d:4b:8e:21:a2:e7:cc:89:bf:ec:60:68:39:c1:29:27:
85:c9:d9:22:04:b6:3f:69:0c:47:33:84:3e:88:20:db:39:00:
c5:90:35:99:91:79:1d:2d:8e:51:53:f7:0b:f0:36:06:f7:13:
8d:a7:c4:03:8d:63:8d:be:ae:1a:73:1f:c4:e1:8c:73:5c:4d:
f4:bf:91:ae:cd:c8:d0:b2:ed:51:26:26:af:5f:5d:64:9b:81:
86:4a:66:68
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBKTNy1Io3q1jP5PdLhRI9bF5fXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MTcyMTA3MzZaFw0yNzA4MTYyMTEyMzZaMDMxMTAvBgNV
BAMTKEIxRTUzQTc3MTY1NzI2NDE1NjE5NkFDRDBGMzE1MkU0QUQzRkRCMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkYrdHgcm4P8zkUy6Kt8cflXce
tSNtLsa4Ac8g5wpR8zDBe/L7GMywRgcU6PlsePPkKLe7gfGghVR008WOW6HINGjA
lCOOHgyh+pQ5lu/ILlKK07la9QaTQLCl/LQAyaYSjL4t4reXgkpgVLIZL+UrEGTS
9FhlfpOT7o0/SI+uGUxOjbnHNYKvq7NeqQPJGEBuolcYZuG327a+T7DlCuwBXMJf
+pSouNGv1YBhzOWZ1oOM9OZDBXnEEr4uqVOGevc3GPCwXlt23sqWGHmgkaqo9c4I
T4I0ncKylEo0IW61kPscMI42He7OR3xySSsdUALka+bK0XWDyKP23YP0/8l9AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUseU6dxZXJkFWGWrNDzFS5K0/2zUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk4NTY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAYD75
AwQAjw4QAwQAjw5TAwQAjw7RAwQAkd8FAwQAkmcdAwQAk08aAwQAk08/AwQAlIe1
AwQAlvGIAwQAlvHwAwQAm3WIAwQAp5QCAwQAqN4EAwQAqN4MAwQAqN5IAwQAqN52
MA0GCSqGSIb3DQEBCwUAA4IBAQBLR9aUgtREMe9p9m/bl4bWFd7V7jRxrwVYubnq
p3vRixtEUQrL/D4Ve+toSfYQTSlbRwE6VshoCUuCy7QSW6sfgQftDm3obg8K63ln
0/cx1UQk6st6xKbzzFaEsT1pm5Y0qPlxTu9xiDzjMczYgDkY4/gNBC7XHrB1n5IU
Bk2ZkBz8MggqGvW3saUO+VT8x388E484XqY2MOfiNg7DLDLQTS1a7I1LjiGi58yJ
v+xgaDnBKSeFydkiBLY/aQxHM4Q+iCDbOQDFkDWZkXkdLY5RU/cL8DYG9xONp8QD
jWONvq4acx/E4YxzXE30v5GuzcjQsu1RJiavX11km4GGSmZo
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:38 2026 by rpki-client