Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
File: AS198420.roa (raw, json)
Hash identifier: CS+lEIViOtvA09kjb5LB9htU3CRlZHet67SalhX5Oy4=
Subject key identifier: DB:D6:5F:4F:95:7D:B7:5C:BC:CE:74:9C:6E:7E:AB:38:82:76:FE:B8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5CCB20D995603247BEECFDBAD6B8E3F9D707C02E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
Signing time: Fri 28 Aug 2026 00:02:41 +0000
ROA not before: Thu 27 Aug 2026 23:57:41 +0000
ROA not after: Fri 27 Aug 2027 00:02:41 +0000
asID: 198420
IP address blocks: 82.29.43.0/24 maxlen: 24
82.41.120.0/24 maxlen: 24
82.47.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:cb:20:d9:95:60:32:47:be:ec:fd:ba:d6:b8:e3:f9:d7:07:c0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 27 23:57:41 2026 GMT
Not After : Aug 27 00:02:41 2027 GMT
Subject: CN=DBD65F4F957DB75CBCCE749C6E7EAB388276FEB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:c0:c8:ec:08:8b:2e:f2:10:b2:29:f1:a2:
19:5f:2d:e9:72:9c:95:a5:79:40:c9:f2:7e:99:db:
e6:dd:92:e9:a8:ba:2f:43:df:d0:a2:9f:dd:8f:00:
1e:e9:7f:6b:42:10:e9:bc:d6:77:42:8e:dd:96:90:
d3:01:3a:ee:79:fe:17:1a:2b:16:83:56:82:e7:bd:
c5:27:3f:82:fb:5a:24:78:15:d7:2d:b8:0c:d2:e6:
aa:7e:61:b1:15:61:fc:d1:fe:b2:9c:a9:86:be:cc:
78:15:14:0e:54:0c:9b:39:6e:f9:62:f5:f0:7d:f0:
2e:1b:73:1d:dc:97:30:51:0c:6a:fb:8f:5b:14:8a:
d3:45:4c:f5:14:9e:fb:0c:2c:fc:eb:9f:10:09:b2:
41:39:46:7b:01:54:6f:fe:4d:20:82:8a:ca:d4:41:
73:52:bc:75:34:96:eb:54:75:d9:01:e5:d4:71:c7:
9d:bb:e7:a2:73:df:55:99:5d:87:8d:36:aa:89:c6:
e3:3e:3e:0a:e8:8b:61:b0:b3:33:97:e0:0c:e3:14:
6d:c9:0c:a0:27:31:5f:12:87:c1:e8:c4:9d:4e:0b:
b3:20:ab:24:25:6f:e9:8d:81:25:24:9f:de:29:fd:
99:f1:a2:3c:38:9d:b8:a2:87:ca:13:d5:61:1e:89:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:5F:4F:95:7D:B7:5C:BC:CE:74:9C:6E:7E:AB:38:82:76:FE:B8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.43.0/24
82.41.120.0/24
82.47.181.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0e:a0:80:28:07:f8:16:96:6a:fd:41:b7:ed:e0:26:44:fc:
ff:6b:64:19:31:e7:61:f0:9f:17:49:bc:bb:68:04:7a:60:f7:
26:f9:85:e9:53:86:ec:d5:7a:4a:7c:00:37:95:93:ab:23:09:
e6:bd:c1:1f:29:d0:53:8c:9f:68:41:c7:04:1e:20:18:a0:c0:
d7:ee:6f:b8:c9:63:ab:dc:90:30:f5:96:d7:0b:00:04:d9:d0:
fc:6c:04:61:9a:7d:9d:2c:2d:12:29:ff:21:cb:0a:54:29:a1:
e3:2c:76:4b:52:d5:27:13:87:8e:bd:f7:49:54:6b:d2:55:fe:
08:3c:8e:21:0c:67:e5:7c:79:f1:d2:cc:e9:cc:ef:f1:d1:6a:
0f:3c:a5:cd:1e:4b:62:8d:73:c9:5a:cd:4a:05:c5:ea:bf:15:
f3:a8:0d:90:12:34:43:10:ee:ff:52:29:76:c5:40:7b:0b:22:
30:d8:37:dc:5d:95:c9:74:7f:32:6a:d5:c2:6d:2e:24:98:aa:
6b:4e:be:70:ff:4f:ac:7e:d0:67:d2:19:b8:6d:ab:12:e0:59:
20:e6:b6:22:ea:88:e2:95:ca:af:bd:15:22:28:47:53:9d:dc:
b5:7a:a1:83:99:a1:4c:02:93:fb:34:bb:96:38:86:0b:5c:4d:
2a:8a:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:19:03 2026 by rpki-client