Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198475.roa
File: AS198475.roa (raw, json)
Hash identifier: 49dvPX4p/q2mMc6hK58xrXhYn3S9W9x7+Gy41tPzJqY=
Subject key identifier: 24:C9:09:F8:53:D6:C5:95:02:96:4C:A4:5A:8B:EA:76:21:96:FA:DE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1C6A62F6846467581DEC0F29151A90D7247D0CA1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198475.roa
Signing time: Wed 27 May 2026 19:19:22 +0000
ROA not before: Wed 27 May 2026 19:14:22 +0000
ROA not after: Wed 26 May 2027 19:19:22 +0000
asID: 198475
IP address blocks: 181.215.176.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.101.102.0/24 maxlen: 24
191.101.116.0/24 maxlen: 24
191.101.120.0/24 maxlen: 24
191.101.124.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
191.101.236.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6a:62:f6:84:64:67:58:1d:ec:0f:29:15:1a:90:d7:24:7d:0c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 27 19:14:22 2026 GMT
Not After : May 26 19:19:22 2027 GMT
Subject: CN=24C909F853D6C59502964CA45A8BEA762196FADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:a6:01:33:ea:e7:1c:79:75:ff:c6:ef:81:
3f:65:53:21:65:3f:2e:5d:08:fe:50:7a:c7:b0:56:
57:57:00:36:4c:c5:c7:2a:cd:bd:f7:12:38:4e:d2:
ab:32:33:fc:54:9b:64:44:d1:ab:48:1e:fb:ce:e1:
f6:5e:7e:18:6f:f9:2b:77:24:6a:71:4a:a1:5a:b1:
b7:f4:3e:2e:fd:e7:0e:f5:6b:b0:0e:eb:d1:a0:c9:
7a:24:cb:e8:c4:df:75:99:de:64:fc:0b:05:02:2b:
b4:e6:61:be:4a:ba:57:cb:56:a5:54:59:d2:06:3d:
f2:c4:a8:63:b0:9f:43:b0:be:9a:8d:7a:72:41:95:
de:df:b3:19:e7:cb:a1:dd:91:4b:f8:58:78:6f:a4:
33:2d:c5:81:c4:a3:15:1b:7c:f7:c2:40:af:3c:52:
16:01:4f:55:5b:9a:16:f7:e8:d2:7a:d5:f4:e8:8a:
50:55:22:2d:de:a0:47:dd:da:44:02:47:b4:d0:13:
80:5c:fe:fe:4b:e8:6b:a6:92:79:b9:dd:d8:3a:40:
1b:07:66:c0:98:44:a1:de:c8:2c:a6:ab:18:05:e8:
e9:44:8d:d6:7d:78:c3:5c:d2:70:2c:0c:9c:a9:ef:
67:c8:86:0e:ef:4d:26:73:65:6a:c2:de:e9:c0:47:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:09:F8:53:D6:C5:95:02:96:4C:A4:5A:8B:EA:76:21:96:FA:DE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.176.0/24
191.96.103.0/24
191.101.102.0/24
191.101.116.0/24
191.101.120.0/24
191.101.124.0/24
191.101.209.0/24
191.101.236.0/24
191.101.240.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3c:ef:29:e8:18:1a:af:a0:f8:4d:0a:50:e9:72:8c:fc:1f:
7d:d5:45:29:78:4e:77:6f:da:d3:38:4a:b3:48:13:18:b6:36:
1b:52:e0:6a:95:67:1a:08:30:ce:5f:ea:5c:76:2f:0d:d2:7c:
e3:f5:25:fa:44:04:5d:a0:4c:45:a8:1b:c4:a5:d2:d6:8a:16:
73:d2:00:f5:9f:5a:23:60:32:a0:dd:e8:30:ec:5c:58:a7:0b:
81:ef:68:21:41:15:ef:99:9f:f2:e3:a6:19:7f:a4:9e:34:fb:
d8:38:bf:72:7e:e2:1f:95:d2:08:82:6d:41:a7:8d:50:2d:e8:
7a:3d:90:9f:2e:e3:fd:d0:6b:6d:4a:b9:21:8e:ba:c4:43:54:
43:81:fd:34:83:92:ca:7c:c9:2e:83:f8:aa:f1:a0:6e:b6:99:
5f:15:1c:d7:fa:dd:25:41:e7:c6:09:8d:f4:e3:38:a5:6c:74:
98:19:47:aa:20:64:e0:d0:59:aa:a9:d2:2b:99:97:9c:85:1b:
0e:5d:1a:0c:48:c1:e3:b4:d8:ee:8c:60:4a:c4:58:d8:41:84:
00:ce:46:9a:ad:38:ab:12:d5:51:68:4c:10:5b:9d:03:ef:df:
16:b1:57:7c:1d:e0:4f:bd:f3:be:64:d3:fc:49:a6:5d:3d:69:
4a:e8:6e:18
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUHGpi9oRkZ1gd7A8pFRqQ1yR9DKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA1MjcxOTE0MjJaFw0yNzA1MjYxOTE5MjJaMDMxMTAvBgNV
BAMTKDI0QzkwOUY4NTNENkM1OTUwMjk2NENBNDVBOEJFQTc2MjE5NkZBREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyBqYBM+rnHHl1/8bvgT9lUyFl
Py5dCP5QesewVldXADZMxccqzb33EjhO0qsyM/xUm2RE0atIHvvO4fZefhhv+St3
JGpxSqFasbf0Pi795w71a7AO69GgyXoky+jE33WZ3mT8CwUCK7TmYb5KulfLVqVU
WdIGPfLEqGOwn0OwvpqNenJBld7fsxnny6HdkUv4WHhvpDMtxYHEoxUbfPfCQK88
UhYBT1Vbmhb36NJ61fToilBVIi3eoEfd2kQCR7TQE4Bc/v5L6Gumknm53dg6QBsH
ZsCYRKHeyCymqxgF6OlEjdZ9eMNc0nAsDJyp72fIhg7vTSZzZWrC3unARwTFAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUJMkJ+FPWxZUClkykWovqdiGW+t4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk4NDc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAtdew
AwQAv2BnAwQAv2VmAwQAv2V0AwQAv2V4AwQAv2V8AwQAv2XRAwQAv2XsAwQAv2Xw
MA0GCSqGSIb3DQEBCwUAA4IBAQAUPO8p6Bgar6D4TQpQ6XKM/B991UUpeE53b9rT
OEqzSBMYtjYbUuBqlWcaCDDOX+pcdi8N0nzj9SX6RARdoExFqBvEpdLWihZz0gD1
n1ojYDKg3egw7FxYpwuB72ghQRXvmZ/y46YZf6SeNPvYOL9yfuIfldIIgm1Bp41Q
Leh6PZCfLuP90GttSrkhjrrEQ1RDgf00g5LKfMkug/iq8aButplfFRzX+t0lQefG
CY304zilbHSYGUeqIGTg0FmqqdIrmZechRsOXRoMSMHjtNjujGBKxFjYQYQAzkaa
rTirEtVRaEwQW50D798WsVd8HeBPvfO+ZNP8SaZdPWlK6G4Y
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:53 2026 by rpki-client