Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198475.roa
File: AS198475.roa (raw, json)
Hash identifier: FCtWshqtJ0zyor/By/Gcvx9sb3nDJFv/JXidl8PCpO8=
Subject key identifier: 21:D2:DD:DD:2A:AB:20:FB:93:E8:C1:A0:49:2D:D8:64:B1:9E:8E:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0E6071C38758A832745A500B5479CF44EA4C499F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198475.roa
Signing time: Wed 27 May 2026 06:13:51 +0000
ROA not before: Wed 27 May 2026 06:08:51 +0000
ROA not after: Wed 26 May 2027 06:13:51 +0000
asID: 198475
IP address blocks: 84.75.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:60:71:c3:87:58:a8:32:74:5a:50:0b:54:79:cf:44:ea:4c:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 06:08:51 2026 GMT
Not After : May 26 06:13:51 2027 GMT
Subject: CN=21D2DDDD2AAB20FB93E8C1A0492DD864B19E8E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:c6:cc:b6:06:5c:88:2f:ed:f5:ff:b9:63:
ca:68:84:b3:f8:8e:70:e0:d6:74:c5:60:7b:52:8c:
b6:c2:c5:6e:23:71:54:31:e4:f3:e4:3f:fd:30:18:
5d:88:b6:cf:7f:57:b4:96:1b:73:01:b8:4d:c0:62:
c6:4e:77:3b:c6:1d:41:4c:45:aa:bf:59:f1:97:57:
c6:9b:67:de:1b:9c:71:cc:d5:11:73:c2:74:e3:ac:
6a:1f:35:58:fe:b2:c6:1f:26:c4:27:69:a4:77:95:
3d:48:5e:eb:be:86:89:7d:c7:8a:8c:56:6c:a2:88:
a3:f0:31:57:3f:c9:47:38:09:ff:5a:35:b4:33:66:
97:a3:3a:dd:d7:86:38:11:dd:64:21:cf:f2:f5:cd:
63:50:d6:9c:c7:e4:7f:09:6c:3f:f2:f5:3d:fb:e1:
70:29:9e:80:0d:1b:e8:05:7c:e5:54:d9:44:2b:46:
4e:05:be:76:b3:6b:7b:d0:82:7c:6f:d2:2a:51:49:
51:46:78:6e:01:c3:4a:02:0a:08:a7:dd:18:59:38:
29:65:c2:f2:5b:bf:24:19:f1:8e:f6:c7:26:37:e3:
d8:79:3e:44:e2:66:53:76:c0:74:83:fd:ab:22:aa:
e0:05:36:8d:3b:bb:b1:54:46:cd:7b:f9:d2:1d:86:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:DD:DD:2A:AB:20:FB:93:E8:C1:A0:49:2D:D8:64:B1:9E:8E:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.131.0/24
Signature Algorithm: sha256WithRSAEncryption
89:aa:9a:7b:f5:20:2d:0e:88:db:4c:e2:fd:ec:12:41:d4:d8:
62:43:e0:de:07:70:e4:e7:78:ea:4b:53:2b:da:6a:bc:ae:f4:
f4:72:25:b2:0d:e4:4f:ec:d7:fb:5c:ad:b4:f3:9b:f1:18:b0:
7f:29:96:f1:55:9f:5b:51:b8:b3:d5:43:48:d8:9b:80:ba:5a:
15:44:ce:85:e4:8d:04:6d:20:cd:fc:30:fb:74:e2:cb:80:0f:
2c:08:3b:48:c7:30:c6:34:25:11:81:01:27:43:db:56:a0:e4:
b6:e4:12:27:5b:b8:59:55:0b:84:89:53:c5:4f:9b:09:a6:98:
3b:cf:43:e3:10:c0:ee:ad:ed:1f:ff:8d:d9:d4:52:b8:7c:80:
ae:85:75:d9:8a:57:bc:cc:72:6b:8c:aa:41:b0:38:6e:1d:57:
b8:dd:d1:bf:f3:d3:39:a8:d8:12:08:46:f3:53:15:f9:d6:e7:
75:8e:d0:82:1b:6e:66:24:08:19:9e:63:67:5d:73:60:3b:14:
35:97:5b:df:c5:59:45:ee:90:40:3e:56:8f:80:b2:c1:59:cf:
c3:f4:44:f6:6f:64:13:3d:08:5b:de:7e:e7:04:85:db:87:1a:
32:9c:ee:f3:8c:e1:95:40:9c:63:0f:32:97:2c:8e:28:62:d9:
3a:00:ab:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:31 2026 by rpki-client