Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: ZljFSUb2YxrLsFyVQ3qYtvZWhk06qG4DwI38V+6Rab0=
Subject key identifier: 28:BB:78:0E:ED:48:15:2D:32:31:D9:BB:9C:C8:56:22:DA:80:B7:EE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3E16615EEC840F0762AA40EA6AC1A1FF9E5719B6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198566.roa
Signing time: Sun 23 Aug 2026 20:26:23 +0000
ROA not before: Sun 23 Aug 2026 20:21:23 +0000
ROA not after: Sun 22 Aug 2027 20:26:23 +0000
asID: 198566
IP address blocks: 82.27.133.0/24 maxlen: 24
82.39.166.0/24 maxlen: 24
82.41.202.0/24 maxlen: 24
82.47.136.0/24 maxlen: 24
82.47.193.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:16:61:5e:ec:84:0f:07:62:aa:40:ea:6a:c1:a1:ff:9e:57:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 20:21:23 2026 GMT
Not After : Aug 22 20:26:23 2027 GMT
Subject: CN=28BB780EED48152D3231D9BB9CC85622DA80B7EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:a1:52:b4:21:44:b5:5b:84:7b:5f:63:80:
03:ea:1b:a4:c8:f8:fe:37:c7:a5:3c:ef:bb:c4:8c:
61:f6:52:96:1b:8e:41:b6:90:f4:d0:1e:1f:96:b4:
41:78:45:42:d8:df:c3:b9:06:64:5e:81:2d:29:d2:
29:c9:6a:cb:3f:34:17:10:d0:40:09:87:4b:3a:4a:
90:61:40:6b:5b:1c:97:44:65:a8:9f:6d:aa:e8:f8:
f5:fa:18:e6:1a:d4:2e:b9:b9:45:d1:69:85:17:29:
68:40:81:9a:dd:77:2c:67:18:93:cc:bf:1c:b4:70:
e3:3e:23:dd:f4:31:d8:52:f4:96:b2:ea:92:4b:a8:
8e:20:a8:87:99:5c:91:cb:6f:54:a2:56:c7:6e:18:
be:f4:0a:a3:93:f8:5a:ae:9a:40:59:00:20:92:2e:
75:80:89:c7:be:9c:7e:37:da:2c:13:50:2e:b0:83:
e4:5c:cd:14:40:f7:b3:a4:71:6d:9a:97:65:63:98:
84:44:99:01:32:af:bd:d1:93:22:52:56:9c:2f:c1:
d6:d7:5f:05:e8:50:1b:c2:02:10:00:f4:e8:a1:77:
2f:a0:86:2c:82:12:b5:a3:b4:f8:b2:df:fb:44:b6:
74:ab:70:0f:c1:48:f1:99:f4:01:fc:28:6b:79:ca:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:78:0E:ED:48:15:2D:32:31:D9:BB:9C:C8:56:22:DA:80:B7:EE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.133.0/24
82.39.166.0/24
82.41.202.0/24
82.47.136.0/24
82.47.193.0/24
178.83.165.0/24
Signature Algorithm: sha256WithRSAEncryption
66:01:7d:a5:a3:04:81:a2:dd:fc:ec:30:a1:02:61:3d:34:e0:
03:98:8f:12:e1:8f:7e:a5:5d:36:d5:fd:46:23:10:2b:68:a1:
b2:7f:84:dd:bb:dd:8b:3e:c4:10:5e:9a:fb:d3:5c:0a:e9:59:
99:02:71:12:80:c3:83:2b:8c:e9:57:4e:e7:7f:c4:1b:19:29:
b7:66:2c:07:04:4e:a1:ff:3f:a9:b1:46:de:d3:44:5d:f9:78:
ea:1b:3b:24:49:b2:ab:6e:ae:6c:2c:9c:c3:30:de:77:87:66:
c4:c5:a4:82:ff:c1:d8:8e:ff:93:1e:2a:b9:a7:b2:92:e0:79:
0d:50:ea:d9:66:8a:98:2a:ca:c4:38:b1:05:50:15:7c:ab:9c:
32:4b:20:b0:8e:de:1c:e6:bd:07:5e:ab:58:ef:d2:1e:ba:d4:
59:7e:a5:49:9f:77:ea:30:5d:fb:ee:22:c5:97:80:4f:17:0a:
80:7a:31:15:64:99:0e:8e:0e:7d:17:f3:db:34:f9:3d:82:9e:
87:2c:3e:c3:28:33:9d:a0:d3:f3:04:59:c1:1f:57:21:cd:04:
1b:92:6c:88:b5:6b:9f:0f:41:c6:54:71:7d:25:5d:34:bf:5a:
73:a7:f9:b1:c7:6d:d7:42:7f:b2:87:c4:34:e0:77:c7:53:2a:
14:4d:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:13 2026 by rpki-client