Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198405.roa
File: AS198405.roa (raw, json)
Hash identifier: EWKCkAzB2z3yFbXw03HdE2yn2SMGBxvoGPmrVUh96ZY=
Subject key identifier: 57:92:E6:BC:2C:BA:75:CE:B5:8F:2B:46:D6:21:A5:C3:E6:84:5F:A4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1AA3C642CC68A3A47547CFACAAF9D6A27BDA0F50
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198405.roa
Signing time: Thu 21 May 2026 13:52:17 +0000
ROA not before: Thu 21 May 2026 13:47:17 +0000
ROA not after: Thu 20 May 2027 13:52:17 +0000
asID: 198405
IP address blocks: 2a13:9500:17e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a3:c6:42:cc:68:a3:a4:75:47:cf:ac:aa:f9:d6:a2:7b:da:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 21 13:47:17 2026 GMT
Not After : May 20 13:52:17 2027 GMT
Subject: CN=5792E6BC2CBA75CEB58F2B46D621A5C3E6845FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:4a:58:f3:3c:04:b7:96:af:e3:ed:04:bc:
c1:d8:d9:1b:68:20:49:27:17:08:39:62:32:47:1f:
97:e1:1e:b2:8b:cb:8e:f0:0a:b1:fc:ea:18:b0:c0:
e3:8f:5f:8f:69:7b:c0:c4:ab:d7:8c:72:be:c3:6e:
ef:a7:c0:ae:2d:32:61:25:a5:1a:a8:5f:ed:a0:57:
97:a5:e4:0a:96:dd:62:33:2b:0a:aa:68:d4:1e:5e:
19:86:9e:01:ff:d1:09:62:e5:c3:e0:24:70:d6:04:
ef:27:12:f8:b7:11:e2:dc:fc:9d:15:fe:75:d0:f2:
87:5b:16:c0:05:6a:25:37:0f:1b:8c:ce:2e:c8:85:
fc:ba:bf:7e:5f:6b:ef:ee:ea:95:58:83:2f:77:76:
a1:d8:d3:65:bb:55:72:d7:c4:d2:11:5b:60:1b:85:
81:8d:1e:f4:2e:9e:8d:77:e6:fd:33:9c:45:51:8b:
bf:13:c3:d4:5e:b3:d6:e8:7e:0f:42:73:a7:d8:29:
03:a0:56:01:45:f8:8a:be:b9:a7:53:d9:6c:c5:14:
76:e1:46:25:77:88:7f:02:4f:62:92:c9:42:62:3a:
9d:c2:55:74:11:30:bd:cd:6b:f8:13:58:d8:2f:79:
9c:62:e3:64:1d:f7:ed:69:cd:12:5a:8e:ff:88:c8:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:E6:BC:2C:BA:75:CE:B5:8F:2B:46:D6:21:A5:C3:E6:84:5F:A4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:17e::/48
Signature Algorithm: sha256WithRSAEncryption
8b:84:98:f1:08:ae:8a:ed:6d:28:1a:15:cd:6d:fc:f0:6d:b3:
33:9e:32:4d:3e:25:72:d7:1f:b9:b2:fe:33:17:0d:3a:93:43:
4c:6d:48:a2:63:88:4d:30:8f:be:17:80:fd:b7:b7:52:66:04:
68:56:8e:d5:68:29:6f:76:9a:08:70:03:3f:be:74:bf:56:df:
19:74:49:6c:27:6f:e5:52:04:e8:09:44:22:c7:fa:c9:53:d6:
db:f8:b6:ac:47:bf:9e:bd:5e:ab:16:08:c6:85:66:4b:0f:90:
fe:43:9f:91:f0:02:ea:3c:8a:ef:f6:af:30:15:97:6b:36:e6:
08:56:e8:cd:87:a6:66:cb:90:f5:71:2a:57:4c:ee:b9:94:1c:
ef:5f:3e:a5:61:1d:5e:84:e3:56:68:80:30:65:7b:5a:9e:ed:
64:c4:69:e5:b1:1e:30:35:17:c2:64:a4:fe:dc:69:3d:83:62:
d1:fc:24:d9:6c:34:1f:03:a5:74:49:0d:2e:c6:12:5b:52:cd:
b0:ea:81:dd:7c:47:3e:76:cc:7f:2f:06:91:a0:28:03:6e:29:
d7:e7:94:3f:9f:54:24:3f:ce:f8:04:ad:f6:df:e4:f3:b3:5e:
35:03:ea:38:e4:69:0b:cb:cb:0f:fe:c0:74:14:3e:ec:71:1b:
00:85:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:30 2026 by rpki-client