Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198487.roa
File: AS198487.roa (raw, json)
Hash identifier: 9gmxxafZN4kkLv7ER7fksSqSM71XruE1h2NttPJMqDo=
Subject key identifier: 4C:CA:9C:71:E4:34:E6:2B:42:2F:3C:A6:5F:17:02:87:0F:7D:EC:9D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 196680ED299002550B46DF79C20183E1D25F1F33
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198487.roa
Signing time: Tue 21 Apr 2026 07:00:14 +0000
ROA not before: Tue 21 Apr 2026 06:55:14 +0000
ROA not after: Tue 20 Apr 2027 07:00:14 +0000
asID: 198487
IP address blocks: 82.22.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:66:80:ed:29:90:02:55:0b:46:df:79:c2:01:83:e1:d2:5f:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 06:55:14 2026 GMT
Not After : Apr 20 07:00:14 2027 GMT
Subject: CN=4CCA9C71E434E62B422F3CA65F1702870F7DEC9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:4c:d0:ba:23:5e:d9:9d:dd:3b:28:d4:69:
3b:e3:09:f8:cb:3e:4a:f2:af:f3:ff:a6:60:0a:91:
9f:01:4e:db:47:13:9b:dd:96:ef:f8:30:b5:0f:ca:
74:92:ec:ed:33:b7:bb:6e:20:9c:e2:a6:d9:61:d7:
61:93:26:05:30:91:9e:1e:99:f3:db:3d:3e:fd:ca:
7a:61:20:3e:3c:02:e3:4c:fc:3a:20:0f:ee:f9:fe:
e4:60:77:9d:25:c9:41:ac:f4:16:59:a1:74:11:52:
42:3a:64:f8:86:11:8f:90:ee:80:9d:1b:0e:ff:39:
68:14:e5:30:70:71:78:0a:f8:b4:f8:61:37:4d:b0:
cf:ff:ec:6e:50:7e:74:91:15:a0:3b:4b:78:fc:bb:
de:b6:d2:35:63:37:23:06:e4:56:6d:f4:38:a9:28:
22:4f:da:aa:4c:f3:97:77:f7:5f:b9:22:76:9e:3b:
b1:f7:83:e2:0e:0f:4f:ea:1c:59:d1:35:b3:a7:bd:
3f:bb:4e:37:b0:88:45:35:8c:56:d6:69:70:59:6b:
33:a2:43:81:bf:f4:95:ad:10:f8:3d:0b:f1:84:1e:
44:bd:45:78:95:39:7d:50:a8:2f:d0:2d:7e:b5:a8:
b5:a4:66:28:a3:22:0c:df:bc:28:ba:76:ab:77:66:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:9C:71:E4:34:E6:2B:42:2F:3C:A6:5F:17:02:87:0F:7D:EC:9D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b7:b0:8b:ec:7d:41:5c:4e:73:b0:04:14:cf:5c:d6:3e:ac:
44:1c:cb:c7:05:4d:ae:be:3b:95:ee:8c:22:44:93:a7:42:0f:
72:75:a0:3f:d0:e3:3a:ee:f5:24:68:60:78:11:99:79:97:53:
d3:8f:13:2c:b1:89:d4:61:0b:4a:61:ab:2a:7f:d6:87:b9:e9:
e7:d2:29:36:c9:c9:d5:99:0b:8a:69:b1:0f:2f:f6:1a:57:2b:
51:40:ee:94:6b:d1:d6:54:70:8a:a8:e2:42:14:ae:b8:de:ae:
9e:2a:a0:84:8d:1d:03:97:57:81:87:3d:c9:e7:77:d2:82:09:
32:96:b3:10:d2:8a:61:22:54:d7:47:92:1f:3e:88:23:0a:e8:
ba:12:9e:09:9a:37:5d:12:ba:6a:73:d7:9a:88:62:0f:2d:eb:
9b:ac:ee:1d:9d:83:9c:08:97:88:aa:b1:d2:28:ac:09:83:89:
da:93:f6:2b:1e:84:bd:38:f2:ce:79:cb:5c:f5:2f:06:de:f1:
aa:29:71:8b:af:6d:f0:b5:3c:02:2f:17:01:ac:b6:ae:a8:8c:
d5:f8:10:19:1a:af:51:16:fb:af:95:5b:e8:c4:a7:40:09:2d:
34:3d:b4:61:8c:12:f6:01:b7:7e:66:ac:c9:3f:71:87:11:47:
2f:71:27:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGWaA7SmQAlULRt95wgGD4dJfHzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjEwNjU1MTRaFw0yNzA0MjAwNzAwMTRaMDMxMTAvBgNV
BAMTKDRDQ0E5QzcxRTQzNEU2MkI0MjJGM0NBNjVGMTcwMjg3MEY3REVDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAEzQuiNe2Z3dOyjUaTvjCfjL
Pkryr/P/pmAKkZ8BTttHE5vdlu/4MLUPynSS7O0zt7tuIJziptlh12GTJgUwkZ4e
mfPbPT79ynphID48AuNM/DogD+75/uRgd50lyUGs9BZZoXQRUkI6ZPiGEY+Q7oCd
Gw7/OWgU5TBwcXgK+LT4YTdNsM//7G5QfnSRFaA7S3j8u9620jVjNyMG5FZt9Dip
KCJP2qpM85d391+5InaeO7H3g+IOD0/qHFnRNbOnvT+7TjewiEU1jFbWaXBZazOi
Q4G/9JWtEPg9C/GEHkS9RXiVOX1QqC/QLX61qLWkZiijIgzfvCi6dqt3ZkTPAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTMqcceQ05itCLzymXxcChw997J0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk4NDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhZ+
MA0GCSqGSIb3DQEBCwUAA4IBAQAct7CL7H1BXE5zsAQUz1zWPqxEHMvHBU2uvjuV
7owiRJOnQg9ydaA/0OM67vUkaGB4EZl5l1PTjxMssYnUYQtKYasqf9aHuenn0ik2
ycnVmQuKabEPL/YaVytRQO6Ua9HWVHCKqOJCFK643q6eKqCEjR0Dl1eBhz3J53fS
ggkylrMQ0ophIlTXR5IfPogjCui6Ep4JmjddErpqc9eaiGIPLeubrO4dnYOcCJeI
qrHSKKwJg4nak/YrHoS9OPLOectc9S8G3vGqKXGLr23wtTwCLxcBrLauqIzV+BAZ
Gq9RFvuvlVvoxKdACS00PbRhjBL2Abd+ZqzJP3GHEUcvcSf3
-----END CERTIFICATE-----
Generated at Thu May 7 05:37:39 2026 by rpki-client