Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198584.roa
File: AS198584.roa (raw, json)
Hash identifier: PKEVQif1/AOOTiUy15226FF77FVj6pFJWgbtJdXOdRo=
Subject key identifier: 0A:5A:F9:FE:17:F3:E8:93:54:AE:8B:35:57:88:A3:40:10:85:56:54
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4F942AFAE792876E9A750485A3DA6BBAEEA72215
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198584.roa
Signing time: Sun 11 Oct 2026 20:37:57 +0000
ROA not before: Sun 11 Oct 2026 20:32:57 +0000
ROA not after: Sun 10 Oct 2027 20:37:57 +0000
asID: 198584
IP address blocks: 181.214.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 09:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:94:2a:fa:e7:92:87:6e:9a:75:04:85:a3:da:6b:ba:ee:a7:22:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 11 20:32:57 2026 GMT
Not After : Oct 10 20:37:57 2027 GMT
Subject: CN=0A5AF9FE17F3E89354AE8B355788A34010855654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:32:d2:49:75:83:b5:67:26:f5:9e:b3:42:
0d:1d:3d:6e:03:da:3c:6c:34:e5:8a:d2:51:45:86:
a5:72:7d:c0:f2:d7:5d:d1:2e:a4:ff:d8:6a:bb:a9:
5e:30:e2:3d:0f:21:65:40:de:b5:ff:d0:90:b8:d3:
61:a4:23:87:b3:01:0c:d2:5b:6f:b7:90:fe:8e:a1:
46:8d:3f:bb:78:60:f5:3b:54:7a:50:ec:d2:9e:b0:
33:82:1a:b1:d0:66:3c:f0:51:09:ba:ce:6f:d0:35:
24:45:f0:7b:d3:52:6c:bb:3f:23:f0:8f:54:24:ec:
53:fe:9e:37:62:b5:5b:54:b3:d7:24:d3:c2:1f:b7:
1d:24:18:4f:ca:2e:0e:fb:cd:76:d7:d3:42:30:e8:
c8:b3:b8:2e:78:93:ac:28:73:fd:f5:9f:b2:94:aa:
d3:bd:3d:26:52:ce:a8:f0:f4:96:62:45:80:70:64:
2b:6d:ad:ce:04:14:b7:e8:c1:ed:f9:77:e3:ba:37:
47:96:49:e0:3d:bd:89:52:72:ab:80:aa:fd:89:24:
75:54:8f:68:e2:8f:ce:f3:ff:ee:a7:9e:bb:0a:79:
86:e4:b7:fd:f4:20:fd:a1:82:f7:21:b9:83:03:c8:
10:30:60:63:5e:1d:a3:0c:00:05:69:8d:82:93:12:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:F9:FE:17:F3:E8:93:54:AE:8B:35:57:88:A3:40:10:85:56:54
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.121.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0c:87:56:a1:44:91:15:cd:cf:43:59:d3:09:e3:24:82:b3:
fb:66:4c:de:12:54:cc:a4:7e:21:aa:94:c4:a8:50:9e:0b:cc:
ce:92:59:fb:4a:30:77:00:8d:98:f4:ae:ac:dc:e9:5c:3d:8c:
64:71:09:b6:03:65:95:c5:82:e9:ec:4f:29:6b:54:2b:e7:fa:
b5:49:80:a3:f0:e4:46:a8:a8:f3:f1:87:23:c8:9d:d2:f0:62:
ef:90:c1:69:31:6b:e2:22:33:3e:82:55:68:c6:c3:10:6e:6f:
1c:3c:d3:3f:07:de:50:f7:c5:e3:06:d1:4d:31:3c:b1:1c:0c:
ad:b1:9b:92:18:d6:71:0e:f9:72:a6:15:e7:45:da:07:c5:88:
3e:5c:de:15:d6:68:b9:78:74:da:c5:c4:0f:29:6d:74:f8:f5:
25:56:0b:a1:31:fd:d1:7e:ab:1c:2e:3d:65:9e:ad:6d:73:62:
ce:6c:02:84:0f:52:4a:29:05:27:36:16:f5:13:5a:cd:c3:82:
f3:bc:d2:85:1c:35:a7:5d:a9:33:8f:23:8c:de:10:57:e6:56:
c6:53:6b:57:11:4f:57:c1:0f:d5:f0:78:f7:20:e9:0b:9a:2a:
a4:17:3e:3d:b6:21:79:38:d2:d2:e1:fa:01:2c:3a:6a:4e:1b:
fc:fb:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:09 2026 by rpki-client