Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198375.roa
File: AS198375.roa (raw, json)
Hash identifier: +mzH7IfnLfTek9hHIdGqwvOMYb/67ftGQ9xYx625jG8=
Subject key identifier: B5:CB:43:42:D4:D8:38:D8:48:2B:F5:AF:84:4E:D1:5D:11:24:E9:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5187DC6CB0252116303CFCC9C8C1F6760E345629
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198375.roa
Signing time: Sun 26 Apr 2026 14:52:03 +0000
ROA not before: Sun 26 Apr 2026 14:47:03 +0000
ROA not after: Sun 25 Apr 2027 14:52:03 +0000
asID: 198375
IP address blocks: 82.29.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:87:dc:6c:b0:25:21:16:30:3c:fc:c9:c8:c1:f6:76:0e:34:56:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 26 14:47:03 2026 GMT
Not After : Apr 25 14:52:03 2027 GMT
Subject: CN=B5CB4342D4D838D8482BF5AF844ED15D1124E942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:bf:21:6a:35:ff:fd:28:8b:01:cb:7b:76:
56:93:9b:3e:1b:88:7c:96:88:8e:ca:11:d3:56:c9:
56:b5:66:bd:37:31:4f:ba:68:63:74:6b:9e:a2:f4:
63:a2:98:b8:63:58:df:8a:a3:a3:55:e2:a9:2b:9b:
77:59:30:bc:a3:8a:26:bb:2a:50:e8:ef:d3:98:a6:
e9:b9:b3:b7:15:21:e0:f2:62:49:8b:e1:6b:0a:0b:
ae:69:f6:eb:4e:fe:b7:7e:b5:62:a1:58:6a:74:2f:
ad:07:e5:bf:87:37:61:b7:43:68:98:36:1a:ac:5c:
3a:f0:da:ab:12:05:c3:67:da:3b:53:88:ce:af:6e:
22:bd:b8:e9:3c:fd:e6:f3:cd:c5:f9:d5:10:59:e8:
da:02:0f:e2:ac:1f:c9:6c:92:ab:48:55:d0:a7:fd:
f2:66:f7:15:33:84:44:14:3f:f7:a5:9b:c5:b5:b8:
33:b9:16:4e:8b:4b:8d:27:34:3d:3a:83:76:ee:27:
f5:75:3e:bf:80:8c:54:48:f5:13:b2:7b:48:c9:cf:
ca:a9:44:57:65:fd:71:ce:fa:3f:91:c6:5f:13:e0:
c9:e5:6b:1b:75:62:d0:96:ef:cf:65:a6:61:44:a8:
93:eb:b1:2d:42:5b:3f:31:98:33:e6:07:cf:f2:4f:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:43:42:D4:D8:38:D8:48:2B:F5:AF:84:4E:D1:5D:11:24:E9:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198375.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2b:b6:f9:78:65:b1:29:20:cf:28:3f:34:93:8b:02:de:af:
8f:ea:29:04:7a:e4:f8:63:4a:04:a2:a3:a5:09:26:f3:84:03:
ba:86:5c:8b:10:f0:0c:e5:d4:99:2b:c8:8d:19:6d:27:b7:c9:
fc:6d:11:61:bc:e5:9a:87:2a:60:93:22:81:eb:9c:e1:9e:e9:
49:34:3f:1a:6e:5e:c0:23:12:50:51:b5:98:18:9f:e0:1c:8c:
ea:5e:f3:ff:12:10:b0:f7:be:d8:54:ba:8d:fb:8a:de:6f:c4:
3c:ad:c1:2f:d1:c3:a6:ef:5c:d0:cd:4c:f9:2d:dd:d2:d5:32:
d2:19:f5:5a:d2:13:bc:88:21:ae:6a:69:d6:9b:d9:64:af:19:
e7:90:fd:b6:20:35:6e:d0:e4:81:62:12:8a:cc:7b:71:aa:2f:
38:12:43:5f:68:d7:26:e8:02:2b:bb:ab:b5:a4:cb:44:43:68:
d0:08:e7:9a:6e:3d:3a:bc:c1:5c:e4:07:99:9e:5c:2b:ea:ca:
57:7e:d1:70:21:8f:35:ab:bd:aa:cb:46:0f:04:2e:6b:d7:da:
67:3b:bc:e3:7b:48:d6:18:14:c2:fb:db:11:3e:97:4e:18:7a:
09:e8:53:b7:3a:a2:89:c6:7d:70:68:ed:2d:cb:1f:77:a6:8b:
10:7d:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:13:27 2026 by rpki-client