Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS198486.roa
File: AS198486.roa (raw, json)
Hash identifier: 8CSghV6aGswpf52pnmOCkhedIV202C+VQCudnouOEfw=
Subject key identifier: 10:95:1A:00:FC:8E:2F:34:C5:73:44:C2:12:10:54:15:4F:1C:16:90
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 469FD7F3862BC373E0696B301BE89EDA34B05623
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS198486.roa
Signing time: Thu 30 Jul 2026 18:29:20 +0000
ROA not before: Thu 30 Jul 2026 18:24:20 +0000
ROA not after: Thu 29 Jul 2027 18:29:20 +0000
asID: 198486
IP address blocks: 176.53.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 07:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9f:d7:f3:86:2b:c3:73:e0:69:6b:30:1b:e8:9e:da:34:b0:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 30 18:24:20 2026 GMT
Not After : Jul 29 18:29:20 2027 GMT
Subject: CN=10951A00FC8E2F34C57344C2121054154F1C1690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:59:98:be:6c:96:6b:06:35:c9:ee:07:48:
d9:a6:eb:b2:9e:7a:8a:25:ef:be:f1:38:27:bd:a8:
ea:76:f7:fe:dd:a8:19:d8:4c:3e:3e:8d:69:f2:98:
6b:49:73:0c:c0:dc:dc:d0:62:5e:99:d7:01:31:fe:
f7:30:f5:56:52:7c:73:69:75:b1:64:60:60:a8:13:
a1:bb:d8:81:5b:ef:da:ab:3b:7d:6f:58:5f:22:f3:
86:f7:33:71:f3:6d:01:b8:6f:50:f7:98:14:10:79:
e4:f5:7e:5c:fa:91:f2:ff:76:da:0c:13:14:08:b2:
92:73:f9:ef:7a:ae:52:50:5a:b3:bc:c5:00:23:b8:
05:bf:84:4b:4b:fb:1c:2f:1b:e9:9b:2b:f7:d9:44:
4a:1d:e6:2f:f1:9c:cc:f5:86:6b:99:1e:fd:16:46:
24:f9:73:47:17:f8:bc:92:6a:17:f6:d6:f3:ef:96:
34:84:a9:dd:ac:c9:96:5f:15:b4:a6:bd:22:f8:42:
a8:62:4f:69:a5:f5:13:0d:31:4f:54:58:48:a4:b9:
3a:74:7f:df:8c:09:1a:c5:d3:a8:d8:eb:66:1e:10:
07:8a:e6:05:1d:5b:77:c7:24:b8:20:a0:fc:3f:07:
b4:b6:8b:4f:38:b8:ef:2e:ea:56:d2:b2:d2:4d:fc:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:95:1A:00:FC:8E:2F:34:C5:73:44:C2:12:10:54:15:4F:1C:16:90
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS198486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.158.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:09:ea:aa:fd:1f:48:bc:f0:d5:69:ea:90:be:18:96:20:37:
57:5a:1a:e5:11:1e:2e:75:ed:f2:0b:49:a8:13:b6:f7:cc:ea:
31:a7:91:0b:77:35:05:87:1c:4f:b5:ec:69:33:fe:03:0a:59:
bd:8f:e5:85:d5:ed:8a:4a:ff:ef:d6:2b:b6:f6:e4:7b:4b:33:
4b:eb:25:05:bf:9f:df:8a:67:1e:70:5c:f6:e4:75:94:b7:6c:
cd:f7:db:16:c8:9d:d6:e4:6a:32:37:39:1e:3a:f3:e3:c8:c1:
7a:f0:68:51:9d:7b:60:bd:61:d1:84:e1:6b:7c:b9:76:e0:b8:
ba:af:86:4b:33:4c:4b:47:09:05:6f:c9:1a:6b:03:8b:93:be:
87:ab:7f:d4:85:3c:20:72:0c:61:d3:3d:4d:d9:d5:4b:fa:be:
06:e6:f8:5c:30:b3:c5:15:c9:8f:73:d5:8b:1a:86:19:6f:0d:
c2:fa:19:e0:20:a8:ed:89:15:80:2a:60:f9:c6:09:d5:b8:42:
5c:c5:0c:49:e1:fc:dc:a5:a6:1e:2e:2f:de:12:e6:2e:ee:d7:
cc:f2:ff:a1:33:dc:24:fa:4a:3f:dd:1d:3e:dd:1d:dc:a9:52:
4f:e2:94:fd:60:2b:cf:dc:73:60:94:f7:12:46:8c:f1:01:84:
61:ee:28:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURp/X84Yrw3PgaWswG+ie2jSwViMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA3MzAxODI0MjBaFw0yNzA3MjkxODI5MjBaMDMxMTAvBgNV
BAMTKDEwOTUxQTAwRkM4RTJGMzRDNTczNDRDMjEyMTA1NDE1NEYxQzE2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkVmYvmyWawY1ye4HSNmm67Ke
eool777xOCe9qOp29/7dqBnYTD4+jWnymGtJcwzA3NzQYl6Z1wEx/vcw9VZSfHNp
dbFkYGCoE6G72IFb79qrO31vWF8i84b3M3HzbQG4b1D3mBQQeeT1flz6kfL/dtoM
ExQIspJz+e96rlJQWrO8xQAjuAW/hEtL+xwvG+mbK/fZREod5i/xnMz1hmuZHv0W
RiT5c0cX+LySahf21vPvljSEqd2syZZfFbSmvSL4QqhiT2ml9RMNMU9UWEikuTp0
f9+MCRrF06jY62YeEAeK5gUdW3fHJLggoPw/B7S2i084uO8u6lbSstJN/O0XAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUEJUaAPyOLzTFc0TCEhBUFU8cFpAwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTk4NDg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWe
MA0GCSqGSIb3DQEBCwUAA4IBAQDSCeqq/R9IvPDVaeqQvhiWIDdXWhrlER4ude3y
C0moE7b3zOoxp5ELdzUFhxxPtexpM/4DClm9j+WF1e2KSv/v1iu29uR7SzNL6yUF
v5/fimcecFz25HWUt2zN99sWyJ3W5GoyNzkeOvPjyMF68GhRnXtgvWHRhOFrfLl2
4Li6r4ZLM0xLRwkFb8kaawOLk76Hq3/UhTwgcgxh0z1N2dVL+r4G5vhcMLPFFcmP
c9WLGoYZbw3C+hngIKjtiRWAKmD5xgnVuEJcxQxJ4fzcpaYeLi/eEuYu7tfM8v+h
M9wk+ko/3R0+3R3cqVJP4pT9YCvP3HNglPcSRozxAYRh7igO
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:31 2026 by rpki-client