Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
File: AS198825.roa (raw, json)
Hash identifier: qlgBidktqCk+NZlIr1tiVOkS+wzoH7f8nJZ+Bz1j+Ns=
Subject key identifier: 99:CB:DB:D3:A6:F6:D9:DA:F3:3E:79:A6:1C:7F:EB:E1:91:B3:58:69
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2F947F1AC9F53C702412F75166E766947A464289
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
Signing time: Thu 09 Jul 2026 12:34:01 +0000
ROA not before: Thu 09 Jul 2026 12:29:01 +0000
ROA not after: Thu 08 Jul 2027 12:34:01 +0000
asID: 198825
IP address blocks: 82.22.2.0/24 maxlen: 24
82.22.7.0/24 maxlen: 24
82.22.77.0/24 maxlen: 24
82.26.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:94:7f:1a:c9:f5:3c:70:24:12:f7:51:66:e7:66:94:7a:46:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 9 12:29:01 2026 GMT
Not After : Jul 8 12:34:01 2027 GMT
Subject: CN=99CBDBD3A6F6D9DAF33E79A61C7FEBE191B35869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:bf:6e:b7:78:cf:6a:74:3b:25:85:53:ea:
b2:c5:98:aa:e0:43:a2:18:d8:11:0e:b3:a1:a6:34:
a4:05:5e:c5:96:41:80:c5:11:2d:99:58:c2:c6:61:
48:6c:eb:2e:c9:74:71:6f:b8:9d:dd:c9:a8:88:07:
cd:9a:fb:e9:92:76:72:43:bb:74:b1:86:bc:92:e5:
51:45:4f:20:d4:dd:38:de:91:f5:39:2d:6b:72:1c:
04:1b:55:28:18:7e:cf:49:3b:f9:3c:b5:b0:58:94:
3b:4d:d0:94:ae:b6:6f:73:47:75:23:53:f5:cd:70:
10:56:58:8d:dc:42:80:7e:71:d2:31:d6:22:86:46:
5c:a1:2d:a4:76:c9:37:ed:d5:b0:16:c0:00:42:6e:
57:bb:e1:8d:24:47:0f:fa:87:84:4b:26:55:a1:97:
f4:e8:93:89:67:e2:40:76:67:83:18:2a:9a:81:61:
54:9e:cd:93:f5:27:41:6b:a5:a4:a9:03:8f:60:23:
c4:d5:b7:93:3d:52:3a:29:87:08:3f:d4:b9:d3:c4:
a0:ca:90:d8:6a:1c:2f:fc:55:8a:6e:54:7e:40:21:
89:ce:0a:11:3c:da:aa:1c:68:db:df:3f:f0:e7:a8:
b8:7d:12:ae:8a:28:c0:f8:ca:25:f8:e5:23:d9:17:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:DB:D3:A6:F6:D9:DA:F3:3E:79:A6:1C:7F:EB:E1:91:B3:58:69
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.2.0/24
82.22.7.0/24
82.22.77.0/24
82.26.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:63:82:f6:74:88:1b:c8:bb:a4:46:38:22:16:b6:87:73:f8:
dd:fe:e9:5e:fd:2f:06:06:8c:82:7e:14:10:58:cf:97:d1:d2:
45:74:8c:3e:7d:ac:5c:97:d6:33:ba:9d:0d:e3:dd:0e:e8:b5:
64:c8:d8:90:22:20:dd:24:fc:e0:4f:f5:61:54:e9:26:98:00:
e1:27:1c:53:01:35:93:64:78:86:e7:c6:55:a2:26:8f:f9:51:
f8:da:28:d9:b8:55:6b:3b:58:5d:ab:1f:03:1a:0d:98:fa:a2:
c9:d1:4d:18:26:d5:3d:73:d5:b5:b2:3c:60:2b:25:bd:23:08:
2c:8e:0e:18:61:81:2c:26:a9:5e:fb:e5:b4:e0:1a:0c:16:f7:
36:10:55:66:6e:fa:6d:ad:bd:1c:fa:09:bc:32:32:d4:d9:75:
b3:b4:2d:e4:ed:f1:30:a5:32:1d:f7:06:82:8a:3d:bb:2a:d0:
91:ff:e8:3c:a0:cb:aa:4d:97:2f:dc:5b:31:bf:f7:c2:2b:4c:
7b:6b:87:e9:ca:69:de:19:af:01:ce:12:8f:9d:61:7c:c5:99:
1d:03:6d:eb:51:72:9e:58:81:eb:df:58:de:8e:67:1b:bd:a3:
02:c2:4a:00:03:e7:83:9e:8f:b7:d8:ff:24:43:3b:94:af:46:
df:41:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:39 2026 by rpki-client