Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198427.roa
File: AS198427.roa (raw, json)
Hash identifier: OsInbTZlMmfoGzDmlcwmrZOepgauGeYue/3bWvUjdgs=
Subject key identifier: 6C:A0:7C:3F:EB:CC:82:54:32:A8:1A:C9:08:53:4E:22:3C:5B:7D:93
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7F89DE36130677CDA85614AE90EBB0C9ABE0585C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198427.roa
Signing time: Wed 27 May 2026 06:13:51 +0000
ROA not before: Wed 27 May 2026 06:08:51 +0000
ROA not after: Wed 26 May 2027 06:13:51 +0000
asID: 198427
IP address blocks: 84.75.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:89:de:36:13:06:77:cd:a8:56:14:ae:90:eb:b0:c9:ab:e0:58:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 06:08:51 2026 GMT
Not After : May 26 06:13:51 2027 GMT
Subject: CN=6CA07C3FEBCC825432A81AC908534E223C5B7D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:96:ce:9d:11:3a:14:1c:9a:b3:db:06:93:
a2:9f:a0:1a:6a:ac:d1:8a:af:ea:18:2b:c1:0a:73:
52:9a:b6:9a:fb:7a:9f:cb:24:ed:41:ec:5b:36:e8:
8a:b1:7c:e3:bd:c3:74:fd:71:64:3d:93:15:a8:ea:
bb:76:12:45:1c:2c:da:ae:db:46:f7:5a:f3:f8:4b:
10:07:b0:65:5f:ac:38:5c:d4:7c:e5:71:30:c0:6b:
98:ad:f1:58:1b:10:72:5c:93:52:61:ef:1d:06:69:
11:3c:be:ff:87:12:51:2c:c0:72:a5:94:97:39:f9:
48:bf:8d:24:46:8c:a8:b2:09:76:9b:1e:47:fa:4a:
91:43:f7:f0:f4:a3:0e:88:26:a2:25:c2:da:8d:a7:
21:3f:81:39:e5:5e:0d:31:09:3c:83:b0:d8:b7:34:
53:8d:a5:33:dc:ca:b9:56:28:db:87:be:cb:cb:c4:
b2:c9:28:32:2b:e5:1e:76:bd:d5:39:4c:63:00:b5:
5f:15:43:6a:a2:39:88:37:cb:23:4b:55:b6:8d:11:
d0:27:7f:97:e4:9b:8c:6c:c7:a7:d2:31:65:ce:d5:
06:66:f6:b7:bc:1e:8d:1d:0b:2a:2c:64:82:02:d6:
64:ff:84:cf:c7:a9:48:7f:58:ce:65:fc:6f:6b:71:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:7C:3F:EB:CC:82:54:32:A8:1A:C9:08:53:4E:22:3C:5B:7D:93
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.131.0/24
Signature Algorithm: sha256WithRSAEncryption
94:52:8b:5a:1e:65:d9:07:c5:d2:3d:a9:9c:2e:60:5b:8a:70:
89:a0:ba:4a:d7:04:c8:c0:93:f6:b4:20:6f:04:99:07:e1:21:
1c:69:51:73:a2:1b:ee:4a:ad:86:82:35:0e:31:44:e2:27:34:
45:e6:d6:c5:52:56:21:29:8c:2f:6d:a0:a7:a0:75:c8:56:54:
07:e6:9a:fc:0c:eb:b5:1d:f5:0b:37:10:bd:f4:26:98:30:83:
33:03:29:f3:06:64:8e:a0:25:29:0e:d3:d4:c0:36:b5:d9:57:
a4:61:1d:f4:66:b9:53:8d:8d:e2:31:5f:96:2d:b8:5a:e2:4f:
45:04:94:81:dd:ad:c3:35:39:ee:0e:99:96:ed:29:34:ab:d3:
99:97:99:c8:c7:33:f4:ac:f0:a3:ae:04:c1:cd:cf:bf:62:9c:
b3:5d:15:77:74:0b:98:88:6e:de:56:be:05:d2:c0:25:52:d4:
9a:0e:8c:80:f0:68:44:14:d7:05:3c:8d:69:2f:99:2f:1c:2c:
c4:f5:ae:a6:59:19:4b:f1:30:83:d4:97:21:a7:f3:04:02:c0:
11:4a:7b:c3:fe:42:82:95:37:5d:98:56:69:a8:30:e4:db:3b:
f7:3f:6b:77:23:17:31:d0:bd:4d:bb:44:df:18:2f:19:77:d9:
a8:54:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client