Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198805.roa
File: AS198805.roa (raw, json)
Hash identifier: JIdXxI0xZhOAZhHkTg1YnDC7IthLAa2IJ/JJ2Z/XGe8=
Subject key identifier: 68:ED:6D:21:DA:50:AC:54:67:6F:6E:78:96:4B:35:04:3A:B2:E7:61
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 13829D008ED85C69248DD87057667B2EF7DEBF6C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198805.roa
Signing time: Wed 20 May 2026 09:01:01 +0000
ROA not before: Wed 20 May 2026 08:56:01 +0000
ROA not after: Wed 19 May 2027 09:01:01 +0000
asID: 198805
IP address blocks: 193.111.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:82:9d:00:8e:d8:5c:69:24:8d:d8:70:57:66:7b:2e:f7:de:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 20 08:56:01 2026 GMT
Not After : May 19 09:01:01 2027 GMT
Subject: CN=68ED6D21DA50AC54676F6E78964B35043AB2E761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:7b:51:66:31:c5:ac:08:d2:ee:43:50:8f:
c5:81:90:7f:c2:46:b0:2b:f2:9c:7a:d4:c0:65:8b:
04:b9:a3:a7:d1:94:bc:79:f6:be:fb:3d:fd:ea:d2:
7c:13:40:19:a3:3c:0e:0d:f0:a1:27:06:0d:dd:a4:
c0:3d:6b:81:09:84:5e:b9:91:43:c0:b3:e7:56:80:
19:76:c2:9c:99:c4:e5:91:48:d4:e8:6e:db:2c:24:
01:bc:f7:ce:f6:af:ba:bc:c7:80:b4:80:10:c8:34:
42:6f:32:26:1b:0f:50:23:22:bb:96:d5:23:2f:55:
b6:fa:3e:2e:73:85:ba:04:68:6f:c1:d9:15:4a:d6:
6a:4b:88:d1:37:55:6e:b9:21:c1:5e:c1:fd:5f:56:
b7:23:b2:3b:20:05:45:ef:1d:dd:20:67:82:17:72:
92:aa:d7:74:07:df:e9:da:ea:6e:97:c5:0e:3a:10:
47:5a:2c:a8:ca:39:12:fc:31:98:1f:b9:e4:22:48:
09:e3:9c:43:17:ce:90:5d:6f:3e:d0:8f:cb:60:6d:
62:87:2c:1e:7c:77:06:ff:3d:f6:27:97:fa:3b:25:
3b:ae:5e:fa:3b:30:8f:87:ff:6f:60:54:25:77:60:
e5:8d:94:51:04:18:7c:a3:e7:4a:04:94:8e:b8:96:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:6D:21:DA:50:AC:54:67:6F:6E:78:96:4B:35:04:3A:B2:E7:61
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:18:a2:4d:6f:7c:2a:42:94:ef:b8:c2:75:41:c5:46:19:78:
39:93:d7:ed:f9:f2:dc:5c:0e:6b:ad:95:cf:e7:9c:cd:22:cc:
42:0c:54:d8:4f:ab:78:17:c4:f8:c7:06:c9:52:01:ab:b8:ab:
2f:9e:23:6e:97:f6:8c:fc:be:b3:47:6d:c5:8f:70:19:91:31:
2b:d4:c1:0d:49:34:bf:d9:af:83:21:e8:3b:9d:fd:ad:dd:26:
7b:5c:d9:bc:7f:85:20:56:8c:ac:ed:d3:09:1c:f0:4b:0e:1b:
18:22:82:8b:47:4f:43:a5:7c:15:e3:fd:88:13:4c:d0:ef:3a:
2d:55:19:96:75:89:f3:94:8f:51:5d:c3:41:58:cb:5a:41:30:
0d:98:14:28:ab:a1:c1:1e:33:d7:2c:99:07:f8:10:4a:5b:f1:
82:89:29:56:c4:55:7f:94:b9:5c:ab:03:94:85:e9:96:4b:6f:
e2:69:b3:09:6d:98:3f:f4:48:ba:fc:a9:bb:f9:e3:a3:8c:9a:
75:fc:0a:6e:c0:d8:c0:e4:84:ca:8f:d6:29:f6:dd:a9:35:1c:
de:9f:f9:3e:04:7f:bb:fa:b1:a0:52:d3:f2:87:6d:1b:92:37:
53:45:0c:7a:20:ba:1a:38:5f:eb:59:b0:27:8b:07:ad:29:75:
83:6d:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client