Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
File: AS198420.roa (raw, json)
Hash identifier: rBHpBfpLKoPzwMMHr9P9WbHiCjTsiuYi75bdtzYR2ZA=
Subject key identifier: 68:08:66:7F:50:CB:23:C9:9B:90:EE:5F:12:86:96:83:C9:AE:AB:06
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C2F1C04152A29C9DEFEBC5D580C57448420155B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
Signing time: Fri 15 May 2026 20:37:08 +0000
ROA not before: Fri 15 May 2026 20:32:08 +0000
ROA not after: Fri 14 May 2027 20:37:08 +0000
asID: 198420
IP address blocks: 82.29.43.0/24 maxlen: 24
82.41.120.0/24 maxlen: 24
84.75.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2f:1c:04:15:2a:29:c9:de:fe:bc:5d:58:0c:57:44:84:20:15:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 15 20:32:08 2026 GMT
Not After : May 14 20:37:08 2027 GMT
Subject: CN=6808667F50CB23C99B90EE5F12869683C9AEAB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:69:3d:a9:f8:b9:20:b4:38:6c:c0:bc:12:
f7:8b:08:7d:69:e5:78:54:84:1e:d5:69:18:f3:ed:
0d:9b:69:83:47:a1:30:a9:e6:3d:48:39:eb:8a:4c:
85:0a:d4:cf:b6:cf:6a:0c:d1:1f:b7:29:e4:c5:97:
72:3b:d6:89:29:91:f0:a3:fe:57:d2:33:49:14:96:
22:5c:f0:5e:2b:89:01:b0:02:26:d4:9e:d4:95:66:
77:79:77:73:89:bc:de:70:c2:3d:85:64:76:f3:0a:
19:ac:a8:10:1d:d4:4e:97:84:40:67:55:44:2f:2e:
e2:83:28:9e:2c:93:45:27:b4:87:41:c6:65:b5:44:
10:9d:8e:a3:f0:08:29:75:b1:4e:9c:94:27:94:0a:
d7:02:f5:b1:b0:97:b5:76:bf:cc:0d:86:8d:fe:71:
de:a4:04:52:a6:2b:43:15:d9:80:d6:91:8b:a7:81:
33:81:27:cc:b7:20:8d:94:1e:c5:6a:7d:d9:32:55:
7d:c7:c0:d5:45:38:51:6e:7a:3f:40:63:38:9c:b3:
f0:96:f0:8a:7e:60:df:3f:12:73:ef:f3:49:53:54:
96:e6:30:44:0b:f5:50:bd:b6:24:3e:82:be:ee:94:
f8:48:43:94:45:3f:79:44:a9:87:bb:84:13:2d:e1:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:66:7F:50:CB:23:C9:9B:90:EE:5F:12:86:96:83:C9:AE:AB:06
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.43.0/24
82.41.120.0/24
84.75.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:84:83:2d:a0:03:43:e2:14:b2:f3:32:7b:4b:5b:5d:9c:e9:
13:c7:33:cd:47:8c:fa:f2:7e:68:84:81:57:42:97:04:36:d6:
1b:26:33:e5:52:3a:e9:d2:7c:e3:60:f5:a3:f5:e6:99:9f:23:
a3:83:ee:7b:01:f1:86:9b:0f:6d:e1:69:b4:f9:a0:9f:6e:34:
20:fd:24:f9:7f:3b:9e:06:16:2c:cf:c7:b0:c8:8d:23:36:cd:
07:a9:5e:8f:3d:71:a3:f6:22:f6:cc:c7:12:35:b5:ec:1c:a8:
c1:b5:fe:6d:45:1a:c1:eb:ef:61:a8:32:aa:be:56:f5:7b:16:
4f:b4:83:10:28:23:74:ae:10:31:ca:95:9a:59:d4:4f:85:41:
7f:cc:18:1d:15:0e:a0:63:a1:53:e2:d0:05:08:61:ad:18:f4:
d2:a1:30:49:d2:ee:cb:e0:63:28:91:40:3d:ba:a8:31:30:ff:
68:84:07:fe:43:0a:10:ff:43:fb:d0:dd:9e:54:6a:06:bd:e7:
0d:19:b2:34:71:db:57:e9:fb:eb:46:bb:7e:09:05:63:69:45:
3c:99:31:09:f2:15:4e:56:df:76:bf:dd:4a:17:a2:04:63:17:
f9:af:64:20:85:de:bf:ef:a7:63:bb:20:78:fc:87:f9:91:58:
ac:64:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client