Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: W/xxSB2fbI4cKCh4iOrQB1pUDzJ298LI4Ny9jM/hk/Y=
Subject key identifier: 4F:9F:00:31:62:C5:52:CD:FA:6D:08:55:4B:F1:D3:CF:4F:01:70:E3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 31BC2A303864E4C82A87A041535396822A6DFB6D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198566.roa
Signing time: Thu 08 Oct 2026 14:21:32 +0000
ROA not before: Thu 08 Oct 2026 14:16:32 +0000
ROA not after: Thu 07 Oct 2027 14:21:32 +0000
asID: 198566
IP address blocks: 5.181.135.0/24 maxlen: 24
5.182.109.0/24 maxlen: 24
130.185.124.0/24 maxlen: 24
141.98.89.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
185.158.105.0/24 maxlen: 24
185.158.135.0/24 maxlen: 24
185.158.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bc:2a:30:38:64:e4:c8:2a:87:a0:41:53:53:96:82:2a:6d:fb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 8 14:16:32 2026 GMT
Not After : Oct 7 14:21:32 2027 GMT
Subject: CN=4F9F003162C552CDFA6D08554BF1D3CF4F0170E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:c0:46:8a:02:94:4e:a6:79:e9:8e:94:2f:
2b:1d:a6:16:e7:cf:24:2e:f9:1a:e0:4b:00:ec:80:
77:84:82:7d:01:13:ad:b1:e4:f4:6b:f8:85:5c:f2:
58:55:30:ab:a5:3d:be:c2:c0:46:83:b4:1d:85:20:
3e:5a:04:e8:3d:c0:c8:01:5a:5a:9a:c9:f2:46:21:
2a:0e:20:0b:ad:7b:88:d6:0c:8a:cf:eb:37:79:58:
54:5d:e7:7d:d8:aa:c3:65:39:93:24:41:ce:a6:ca:
f2:6c:75:5d:8b:94:17:85:26:d7:3d:2d:4e:50:0b:
52:09:be:69:df:2e:87:7b:99:2f:1b:83:99:33:c1:
e6:78:e9:58:0e:9d:55:29:ec:d4:a5:56:30:0f:5c:
32:e4:ed:c4:97:a7:f6:6a:ed:a8:f5:88:89:ec:54:
9b:df:d1:0d:3b:a8:ae:31:77:40:1c:e5:56:89:84:
01:d3:92:03:45:6d:a4:78:ed:bf:2b:ec:ed:64:7d:
eb:f1:79:da:b1:93:1a:ba:74:a8:87:f2:2a:5d:49:
2b:a1:c7:59:cb:c9:e5:f4:8d:d6:84:05:8d:d4:e0:
31:3f:d4:1a:89:ca:f4:74:1a:22:6c:da:b5:47:d1:
83:09:4a:7d:91:5f:56:f8:e3:64:91:34:a9:8d:73:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:00:31:62:C5:52:CD:FA:6D:08:55:4B:F1:D3:CF:4F:01:70:E3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.135.0/24
5.182.109.0/24
130.185.124.0/24
141.98.89.0/24
185.151.58.0/24
185.158.105.0/24
185.158.135.0/24
185.158.149.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fc:3d:4c:44:67:7e:79:f2:64:05:3e:1e:8c:de:eb:cb:d3:
e7:29:ee:f6:3b:68:8b:5f:6b:32:e7:fd:99:dc:9c:19:45:8c:
14:10:c2:a3:46:ee:30:5a:6e:7f:13:45:95:26:89:32:64:ec:
9c:dc:98:73:b0:e5:fe:cf:bb:67:9f:03:35:c3:b0:91:36:91:
e0:30:8a:0a:7c:39:d0:81:db:c3:cf:43:36:1b:1f:18:8a:0c:
6e:bc:78:18:31:bd:00:fd:f4:28:8c:f8:db:ff:dc:3d:f2:97:
22:f2:1c:16:53:3b:28:2d:74:40:65:f1:11:a0:08:7b:45:95:
3c:4d:d6:3f:76:05:8b:dd:a6:e8:69:71:02:a9:95:9a:39:f4:
40:99:a3:55:62:7a:fe:10:c7:96:52:d8:c9:5b:ab:7c:e5:7e:
a2:55:e2:9e:93:fb:ce:cf:9d:27:65:b2:e3:34:e6:9d:4c:ed:
ba:d3:f4:58:30:9b:e6:06:ea:32:29:0e:b2:1c:c5:f2:d1:b3:
c3:22:8e:d1:6f:01:16:12:c9:7f:44:3e:69:f3:68:11:2f:99:
54:50:e9:6b:3d:0f:36:7a:93:a8:1e:1a:f8:c7:b7:66:8d:ef:
7c:b6:68:d9:42:e0:b0:49:f2:ac:17:f3:04:05:c2:86:b5:35:
84:95:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:30:46 2026 by rpki-client