Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
File: AS198825.roa (raw, json)
Hash identifier: vahCiaCvUGOXY13SS2YNj33q9GYyAZCoF+UVvUCRlp0=
Subject key identifier: 32:BD:6E:FE:73:2E:4E:FF:37:33:07:A4:49:FC:34:D6:FF:8A:2F:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D6065AF2276D33361F94F90BB53F575C9012B48
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
Signing time: Tue 02 Jun 2026 16:43:22 +0000
ROA not before: Tue 02 Jun 2026 16:38:22 +0000
ROA not after: Tue 01 Jun 2027 16:43:22 +0000
asID: 198825
IP address blocks: 82.22.2.0/24 maxlen: 24
82.22.7.0/24 maxlen: 24
82.22.77.0/24 maxlen: 24
82.26.157.0/24 maxlen: 24
82.47.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:60:65:af:22:76:d3:33:61:f9:4f:90:bb:53:f5:75:c9:01:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 16:38:22 2026 GMT
Not After : Jun 1 16:43:22 2027 GMT
Subject: CN=32BD6EFE732E4EFF373307A449FC34D6FF8A2F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:af:02:3e:39:f9:2c:08:74:29:5f:45:d0:
4b:98:8e:f0:f6:0a:08:aa:25:37:b5:6c:70:c7:f7:
17:ec:f6:61:e8:77:93:c7:d2:a4:5f:97:c2:b4:ec:
d8:75:20:23:bc:ab:5c:b8:c6:bd:89:c0:a5:45:2d:
7a:56:ee:50:8f:8e:17:7a:71:99:1d:99:2f:d6:d8:
4b:99:0d:87:a9:72:ad:96:92:dd:e8:34:85:c7:b8:
02:56:5e:61:02:53:ca:c2:81:1f:4d:c2:2e:8c:f1:
96:47:e9:93:6a:ca:c6:5d:1d:c3:1c:f4:66:ea:d9:
3a:0e:a6:df:37:37:9a:7a:0b:af:71:34:50:e8:ef:
74:59:c5:8b:32:4a:e2:03:75:a0:43:2c:ad:d1:c0:
20:e6:6e:f9:5a:b4:5b:c5:ba:b1:8f:02:c5:c7:2d:
9e:33:b7:00:79:9f:8c:77:07:9b:b0:c9:35:f9:5a:
9a:ba:ae:3d:94:ad:4c:ae:fa:d3:54:81:e1:d6:c9:
c8:a0:fe:75:a2:d9:94:e9:7b:cf:c5:01:e7:80:89:
3c:36:54:6a:80:71:c4:f0:bd:f9:6e:3e:da:99:f5:
06:61:98:d9:64:f5:32:ec:51:82:f0:26:29:19:27:
ad:9e:2e:06:ec:fe:0a:5e:7d:e4:03:fb:75:37:02:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:6E:FE:73:2E:4E:FF:37:33:07:A4:49:FC:34:D6:FF:8A:2F:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.2.0/24
82.22.7.0/24
82.22.77.0/24
82.26.157.0/24
82.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8a:e4:9d:de:20:79:13:4f:b1:d1:92:2d:9a:b4:70:0f:56:
60:72:9a:b7:c1:64:f6:3e:2d:ca:d5:15:3f:91:3a:f6:bb:61:
a9:bb:ef:a8:8a:c2:9a:ef:75:c7:9b:12:08:9d:73:7c:03:85:
e4:a1:60:2c:c2:4d:77:a5:57:17:ef:92:40:b2:af:ab:6b:c0:
fa:bf:65:56:cb:a8:26:8d:ce:dd:39:e6:13:60:25:b1:93:74:
d4:5c:8c:0e:c2:98:22:29:f9:a7:e5:88:ad:64:17:2d:38:ec:
ea:74:ed:95:f0:a3:10:4c:8c:06:fc:0e:d5:ef:03:50:cb:ff:
8c:88:7e:c4:86:d0:fd:9a:a1:f2:44:cb:e1:36:dc:59:2e:d4:
5c:91:d8:27:0d:93:b4:8c:bb:99:87:31:cd:26:60:be:2c:c5:
c5:94:19:3b:50:43:b2:d6:6c:fa:98:7d:29:9e:22:13:d3:4a:
e2:b1:d8:1d:00:70:07:28:fd:22:f3:31:fc:56:82:28:7d:33:
1c:39:41:01:02:15:9c:da:b0:00:92:ec:42:14:e0:00:46:00:
0d:d4:5b:1e:98:32:05:5d:f2:12:04:e9:1a:90:90:f4:ce:71:
34:56:66:0d:49:08:84:25:70:9f:e8:0a:ba:f7:02:e1:a3:99:
95:6a:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:11:25 2026 by rpki-client