Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198949.roa
File: AS198949.roa (raw, json)
Hash identifier: eS5hYoqgDB/crmPOZxDkunOiX2DvCCogeW7Fw5ZjBMk=
Subject key identifier: 54:6B:7C:BB:05:1B:0C:B4:CF:87:97:5B:6C:89:77:C2:AE:FF:C0:27
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5F9DDF1D840490DC965F318033177CBC4F89F3D0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198949.roa
Signing time: Fri 21 Aug 2026 18:37:25 +0000
ROA not before: Fri 21 Aug 2026 18:32:25 +0000
ROA not after: Fri 20 Aug 2027 18:37:25 +0000
asID: 198949
IP address blocks: 143.14.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9d:df:1d:84:04:90:dc:96:5f:31:80:33:17:7c:bc:4f:89:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 18:32:25 2026 GMT
Not After : Aug 20 18:37:25 2027 GMT
Subject: CN=546B7CBB051B0CB4CF87975B6C8977C2AEFFC027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:44:6b:3d:b0:f8:c6:8e:c2:cf:0f:dc:ed:
d2:00:e3:88:ab:37:cc:a6:20:a2:a5:0f:f0:74:a5:
4d:9a:f7:0c:37:3e:08:96:7e:13:9e:d7:4b:66:e1:
78:4f:4b:b9:0d:38:2c:7e:20:81:cd:ea:5f:4b:09:
38:78:54:35:29:61:4f:44:cb:48:56:52:d0:57:45:
f6:39:38:bf:15:8c:65:3e:ab:c5:22:35:30:af:3c:
62:30:47:d0:bc:9f:25:a5:3e:1d:fc:ce:18:15:08:
ba:85:f3:13:3e:ae:ab:f7:a5:a1:3a:3d:d3:02:4f:
00:9d:13:7d:ef:7b:67:f1:05:99:a1:79:5f:3b:36:
c0:72:f3:45:3c:67:0d:a1:c5:cb:32:9b:64:23:b4:
93:cb:31:e8:84:01:ba:c3:95:94:e6:00:fe:ef:7b:
0a:f9:0b:d7:a1:61:cc:f5:14:c4:31:ba:5f:08:7c:
e7:00:ff:b7:16:8e:c1:8d:cd:16:f4:6c:7e:0c:61:
e0:7c:ad:01:f5:4e:03:89:1f:b0:a9:4c:7d:2c:e9:
34:71:66:6a:5c:04:10:91:c0:d3:8d:fa:5c:87:f4:
4b:07:23:f1:c6:c6:d7:59:58:66:ce:32:d0:d7:36:
bc:c8:28:1c:ab:c2:6d:31:21:c8:ff:f5:19:be:c4:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:7C:BB:05:1B:0C:B4:CF:87:97:5B:6C:89:77:C2:AE:FF:C0:27
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f5:f4:87:a7:33:c5:b5:05:94:79:3f:52:0d:7f:08:cb:aa:
80:36:44:08:18:9b:ef:ed:fb:95:ef:04:48:33:3a:d9:45:bf:
49:46:e1:5a:24:1f:92:1b:9b:07:d3:51:f2:80:df:da:70:ca:
9c:76:a0:ae:30:bc:2e:17:0c:7b:04:85:e2:8c:c6:46:b6:56:
3e:13:a5:db:5d:a3:6f:34:18:b5:b1:9b:e2:4d:c5:e8:8d:1f:
83:30:a7:13:e1:ed:a7:21:5f:cf:3c:71:ad:d5:df:04:60:96:
11:20:db:76:8b:f7:2e:21:06:f8:94:00:7c:49:26:1d:a7:de:
57:98:c8:bb:4a:6b:70:42:dd:34:99:1a:b6:6a:3e:5e:3b:a5:
ce:e6:9e:2d:50:42:17:82:19:21:7c:52:ae:af:23:ed:8b:bb:
b0:70:39:3d:7b:b5:15:43:68:3c:4f:4b:ae:24:3f:41:e4:b1:
7b:3d:3d:62:79:73:bb:d3:07:3b:b5:63:44:f0:9c:2c:3b:fd:
49:83:d3:ff:1f:3e:92:af:b7:72:a9:b1:00:d9:28:75:40:57:
22:6d:1d:ae:85:67:0b:b7:cd:13:8c:f5:d1:03:48:3a:26:36:
bc:0f:3b:70:2c:59:da:e0:df:b9:de:8d:f3:b3:5d:83:af:ec:
dc:42:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:44 2026 by rpki-client