Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198588.roa
File: AS198588.roa (raw, json)
Hash identifier: X4eCbSxi0JK04m81Q6E1cfdxr51ji5ru+bn54UZWB/A=
Subject key identifier: 05:5C:9C:18:A5:4F:9D:E2:06:15:2D:76:DC:11:D6:A6:C8:C0:3D:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 465161BAE21F56860B4F926E0B03BE489001A597
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198588.roa
Signing time: Tue 23 Jun 2026 08:56:19 +0000
ROA not before: Tue 23 Jun 2026 08:51:19 +0000
ROA not after: Tue 22 Jun 2027 08:56:19 +0000
asID: 198588
IP address blocks: 84.75.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:51:61:ba:e2:1f:56:86:0b:4f:92:6e:0b:03:be:48:90:01:a5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 23 08:51:19 2026 GMT
Not After : Jun 22 08:56:19 2027 GMT
Subject: CN=055C9C18A54F9DE206152D76DC11D6A6C8C03DAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:67:1f:82:b6:f7:0c:16:06:c8:86:d5:a1:
2a:25:8b:83:37:29:c0:25:1b:3d:5b:8a:5a:f8:c1:
a0:8a:54:a7:9e:58:02:26:da:90:f2:f8:14:4f:63:
3f:9c:8e:54:dd:2c:66:8b:2d:b3:d6:c4:2d:83:fa:
73:b6:b0:c9:4c:69:8a:c7:8f:cd:32:31:33:ae:ec:
c6:b4:ce:3e:e5:c4:a0:14:01:6a:18:09:5a:17:7c:
fb:84:ce:94:97:54:26:c8:cf:5d:6e:79:8d:f9:95:
a4:78:e8:f8:dc:e3:fe:16:fd:fc:27:4b:84:d7:36:
f7:f1:4d:c2:3a:43:49:6b:e9:e5:1f:b0:f8:52:7b:
a2:3f:13:a6:c4:2c:b9:e3:6a:8f:de:ca:c5:17:ec:
98:fe:c6:6f:63:0e:aa:e6:26:e0:83:63:8c:0a:f2:
71:9b:bb:90:75:4d:f6:8d:fc:d4:7d:46:46:db:54:
d5:b0:8f:ee:99:6b:85:69:69:7d:fb:2e:9a:00:cc:
e2:13:c4:6d:1c:0d:ab:b7:76:5c:ac:d4:18:de:50:
81:13:c7:2d:0e:8d:f7:b3:a7:9b:86:6e:ed:b6:3f:
04:38:71:5c:98:3c:36:c5:18:df:fc:4d:66:ad:80:
5c:0e:45:b5:11:9a:7c:32:03:04:98:b1:62:64:18:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:9C:18:A5:4F:9D:E2:06:15:2D:76:DC:11:D6:A6:C8:C0:3D:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.156.0/24
Signature Algorithm: sha256WithRSAEncryption
95:fd:b1:1b:4a:e2:e2:7b:82:03:5b:30:26:d7:14:59:31:90:
18:4c:ba:45:79:cf:dc:fe:10:ad:46:59:36:a7:86:69:f5:94:
ac:8b:e0:cb:a8:94:ff:1a:f3:96:c1:28:74:87:30:a1:1e:70:
2a:7d:f9:3a:d9:68:a1:17:77:1d:c9:58:c6:d3:d6:86:25:99:
7b:bd:4c:88:76:6e:24:1e:89:85:a0:5b:82:e6:5f:91:db:67:
a0:34:d6:52:39:10:22:6a:44:d1:62:e1:28:b2:f6:b1:24:c3:
c1:47:c5:bf:bf:bf:d3:0a:cb:b6:b8:db:c7:20:71:a5:fc:08:
36:29:b2:60:56:33:23:88:54:c1:b2:43:26:24:55:ca:1d:21:
56:35:ba:4f:35:ed:20:c0:ad:d5:a4:b8:d2:5b:ee:7d:73:90:
ea:7e:d7:d5:c1:ae:f5:6e:8c:a2:fa:99:2a:0c:2f:55:af:88:
6d:e2:f3:e7:fc:e5:88:19:8b:5a:53:2c:55:7a:54:22:5f:6d:
5a:f6:66:37:6c:b4:33:ce:be:88:ec:7b:5f:92:a3:c8:d4:a5:
d9:72:77:bd:8d:d8:d6:15:82:9f:b5:c3:f8:d0:a3:67:60:b7:
17:42:d1:23:72:b8:a5:c0:92:b0:21:15:3f:02:76:a5:b7:e1:
5c:5e:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:15 2026 by rpki-client