Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: 4boVHaLlCy7AeN2MW7kaoecmRvvRQ0JrzqUnks5pUGs=
Subject key identifier: 87:0B:13:CD:DB:FD:90:1B:A2:38:69:66:F4:99:CC:45:D9:63:A4:30
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 350B7242116C3D90B8D0A6496350A24DB3E88894
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS198566.roa
Signing time: Thu 03 Sep 2026 19:02:37 +0000
ROA not before: Thu 03 Sep 2026 18:57:37 +0000
ROA not after: Thu 02 Sep 2027 19:02:37 +0000
asID: 198566
IP address blocks: 212.60.145.0/24 maxlen: 24
212.60.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0b:72:42:11:6c:3d:90:b8:d0:a6:49:63:50:a2:4d:b3:e8:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 3 18:57:37 2026 GMT
Not After : Sep 2 19:02:37 2027 GMT
Subject: CN=870B13CDDBFD901BA2386966F499CC45D963A430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:2d:d0:20:39:c1:8a:34:a5:23:84:c7:74:
06:a9:68:6c:66:4b:ad:4f:24:2c:ab:63:e4:7e:9e:
8c:eb:65:eb:47:56:42:7d:71:64:57:ed:f9:ac:d3:
b7:14:6f:90:9c:6e:15:d8:2c:4e:2c:a8:0d:89:1a:
f5:12:9a:ef:d0:26:e9:e0:0a:7a:4a:cd:2e:ff:58:
6d:4c:6a:38:b2:49:11:1b:a6:4e:d3:f8:5d:e7:ea:
4f:bb:14:ae:a6:5a:72:c0:54:b0:f5:a2:5d:11:be:
38:dc:2f:7b:2d:67:ef:f7:12:58:fc:82:64:38:78:
f4:6a:13:4e:ef:79:ff:11:d6:b1:94:e2:37:a6:35:
45:03:e3:24:81:65:1c:46:9b:8b:e7:bb:30:06:0b:
4e:39:77:e1:1c:02:7c:26:0c:81:a6:af:e1:45:d9:
05:09:fb:ac:bf:57:39:dc:6c:e4:9c:8c:0d:bb:b3:
5b:e1:f4:56:52:a0:c7:b1:23:a8:5e:8f:fb:16:32:
5e:7f:31:fe:82:dd:6b:97:aa:5c:ec:d6:7a:07:7d:
f2:52:6e:98:e4:ce:e3:a5:f3:c2:11:7d:ec:db:42:
f2:a7:5b:44:bd:68:a6:f5:e4:5b:18:37:46:f8:40:
e8:77:56:ba:d4:87:b3:7a:b3:b8:e3:10:f4:06:4b:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0B:13:CD:DB:FD:90:1B:A2:38:69:66:F4:99:CC:45:D9:63:A4:30
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.145.0/24
212.60.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ea:34:c6:08:2c:c6:bf:9d:93:64:6b:50:9f:1a:85:69:36:
80:85:fe:b5:11:7d:82:ce:17:e2:ba:4f:7a:38:e0:bf:d1:dd:
1a:ec:4b:b4:24:c0:c5:5f:da:4f:51:8e:dd:ed:ea:aa:81:1e:
10:d1:ac:3e:59:60:fc:63:c4:ca:2a:33:37:b6:66:17:13:fe:
76:3b:a4:65:42:76:21:96:f2:44:ab:0f:ef:0d:90:a2:89:aa:
07:27:08:61:ba:ff:f8:19:8b:6a:8f:0d:ec:1a:40:50:e0:ae:
c2:3e:6b:d7:f7:63:2f:68:5b:39:10:68:e0:2e:11:e6:e4:64:
de:3e:64:a1:4e:13:c5:6d:88:93:93:c4:70:eb:d7:7b:8f:e5:
e8:ad:8f:0a:89:59:69:7e:0e:14:8f:42:cd:0d:db:f7:9a:a2:
97:be:a1:a2:23:68:68:e2:8f:89:12:7a:1c:93:1f:99:fb:f7:
5d:e1:6f:5a:f5:cd:98:61:22:18:5e:98:ae:ac:ed:87:2a:d6:
3f:53:c5:34:9a:5e:7f:a8:67:f8:d7:ae:67:9d:c4:bb:0e:53:
a8:b6:d8:4b:0b:b6:2a:b3:29:41:18:ef:15:99:48:93:13:97:
32:92:aa:ec:6c:8e:32:83:4a:b3:1e:78:ec:f9:73:dc:d8:04:
62:20:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:04 2026 by rpki-client