Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198100.roa
File: AS198100.roa (raw, json)
Hash identifier: FP5OEHPBKr6R4+Fz7aAmH+Pp1COysF4QUp6YntwyXtQ=
Subject key identifier: 28:B0:88:95:EF:FE:83:FC:3C:BB:3E:69:42:18:2E:30:F1:06:BA:79
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6CE118051F6C307CB30C1A6BC73042E26DC006C6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198100.roa
Signing time: Sat 22 Aug 2026 09:49:30 +0000
ROA not before: Sat 22 Aug 2026 09:44:30 +0000
ROA not after: Sat 21 Aug 2027 09:49:30 +0000
asID: 198100
IP address blocks: 82.27.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e1:18:05:1f:6c:30:7c:b3:0c:1a:6b:c7:30:42:e2:6d:c0:06:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 22 09:44:30 2026 GMT
Not After : Aug 21 09:49:30 2027 GMT
Subject: CN=28B08895EFFE83FC3CBB3E6942182E30F106BA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:73:f2:51:51:91:29:d6:3a:e0:db:ce:83:
ff:52:fa:c1:b9:9d:0a:e0:d4:5f:0e:76:51:b3:ec:
44:43:d4:c5:34:06:bf:0e:ef:ca:ae:97:fc:75:52:
36:66:40:cc:27:fd:ed:c6:84:ba:9b:9f:5d:fe:eb:
d2:89:8c:70:2a:fd:32:94:99:59:a5:fc:bc:3a:a6:
ea:81:d4:64:64:43:b0:1c:5a:99:d0:fe:a9:35:f6:
3b:61:98:a9:cb:23:bb:e3:63:f5:8a:ea:dd:f0:88:
9b:d2:8a:a6:c5:76:66:4f:8f:91:23:3c:9e:0a:c5:
54:8c:98:d7:b6:49:50:ed:33:f6:ee:ae:5a:7b:6b:
d7:64:f0:a3:22:8e:95:6c:c0:2e:49:b5:d7:22:32:
35:d6:75:91:5b:bb:16:94:a7:fc:62:a1:8c:1d:02:
73:3a:69:1f:f6:46:c3:4b:73:a0:22:1a:63:ee:14:
71:45:52:8a:4e:84:e6:f6:09:e7:7f:ca:f7:e4:72:
be:ac:ef:b1:51:d3:e0:7b:00:ef:59:a4:c0:d2:9a:
18:3d:3f:c1:ea:0d:c6:e2:23:a7:9b:85:fe:eb:d6:
1e:ce:ea:f1:55:0d:39:6b:a6:30:91:45:7c:92:02:
a4:77:ee:74:52:4b:e0:b7:04:2c:91:06:bb:64:6f:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:88:95:EF:FE:83:FC:3C:BB:3E:69:42:18:2E:30:F1:06:BA:79
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.11.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1a:34:85:3b:f8:90:42:7e:e0:1b:cc:86:8c:8c:f4:36:ff:
80:3a:39:eb:da:e7:ae:a3:8b:99:4b:50:61:52:3f:23:13:45:
10:92:1c:fb:67:c1:fe:9f:c8:78:d4:76:c6:a4:b2:9d:ae:a7:
66:c6:ae:29:c1:ce:e7:6a:d5:86:09:ea:2b:8d:c8:3c:35:48:
8c:52:aa:71:f7:2f:7e:5b:b3:2f:1d:cd:28:1d:64:54:26:7e:
0c:06:c8:aa:2d:f1:91:8c:76:05:7f:ed:d4:0e:d6:e1:0a:b2:
89:02:ab:fb:a0:05:3f:d2:64:87:da:cb:e5:6b:5f:64:fb:b0:
44:81:fc:3d:19:b6:43:c9:2c:41:2c:b2:23:b3:36:dc:c1:99:
69:5e:12:97:f7:dc:0a:89:a6:9b:78:0f:13:b4:a3:97:9e:5a:
4d:a6:07:bb:85:eb:b7:a7:ec:f2:4c:6a:58:86:e4:40:ff:36:
cd:4b:a4:4e:29:1e:23:7a:40:65:3c:9a:14:12:df:03:2f:4a:
27:47:1d:f9:68:68:d9:69:79:00:36:45:74:6f:6b:08:99:ec:
48:29:b0:c1:be:57:cf:b3:44:04:cf:97:c4:3b:ad:73:a4:ce:
0a:a4:87:ac:68:1d:52:86:e3:cb:bb:bc:47:be:2e:79:90:fd:
d2:22:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:00 2026 by rpki-client