Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
File: AS198590.roa (raw, json)
Hash identifier: IgGkGbBLqTKRyxmkLiJj78WRMrhDGZq4QcEatUrSg6s=
Subject key identifier: DC:6E:56:AE:95:B3:76:8F:F2:78:F4:85:7A:DE:F9:D3:A9:AA:97:1C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3E7A16E161EABBD6137E08553133442B238B1E0F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
Signing time: Wed 08 Jul 2026 15:48:29 +0000
ROA not before: Wed 08 Jul 2026 15:43:29 +0000
ROA not after: Wed 07 Jul 2027 15:48:29 +0000
asID: 198590
IP address blocks: 2a14:7580:5100::/40 maxlen: 40
2a14:7580:5200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7a:16:e1:61:ea:bb:d6:13:7e:08:55:31:33:44:2b:23:8b:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 8 15:43:29 2026 GMT
Not After : Jul 7 15:48:29 2027 GMT
Subject: CN=DC6E56AE95B3768FF278F4857ADEF9D3A9AA971C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:76:29:2b:3b:19:a0:e5:ed:e2:e9:69:27:
5b:b5:d9:5e:f4:43:d7:3a:1f:68:5b:1c:9a:87:bf:
fa:be:3f:51:c3:a7:f2:a8:af:6c:01:1f:ba:74:d6:
fd:11:d3:39:27:d9:f2:f9:f2:f1:c6:53:23:01:36:
8d:e0:09:f4:26:08:26:b8:3b:a2:ab:31:7d:a1:4e:
57:d3:19:97:11:10:f4:1b:da:3a:d3:a1:a9:93:b7:
8d:03:03:5f:12:32:91:bf:a5:d1:13:a7:d6:2d:61:
32:b6:31:59:10:18:2e:af:1f:30:08:eb:94:c9:1f:
c9:b6:16:e1:32:07:87:3d:48:77:65:de:58:29:ad:
c2:09:05:b6:7b:6c:9b:15:8e:03:32:03:de:d3:1c:
dd:56:14:cd:bc:42:fd:ec:80:6d:da:00:05:2a:25:
a0:24:a4:bd:b4:ac:35:a4:68:ce:d8:da:aa:3d:e9:
c4:cf:98:69:ad:1a:47:86:4c:a2:73:82:e3:1d:f8:
54:80:fe:85:4f:d6:0d:74:a4:5a:2d:13:04:87:0a:
64:fc:7a:89:80:63:c9:55:7f:1b:f3:ba:12:a7:c6:
06:c8:95:40:48:9d:be:3f:e6:47:9c:af:f0:89:58:
fb:78:6e:6d:2b:f3:e6:ad:52:d3:f2:4b:2d:1c:65:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:56:AE:95:B3:76:8F:F2:78:F4:85:7A:DE:F9:D3:A9:AA:97:1C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5100::-2a14:7580:52ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:4d:d2:61:13:22:22:cf:07:7a:a2:53:03:e9:e7:17:a5:2e:
e1:8e:34:f2:b7:6a:13:16:3e:a9:bd:99:43:7c:c9:ab:57:66:
7c:86:14:9a:8a:5e:75:81:c8:2d:8c:48:f6:ae:d1:c5:1a:ad:
31:9c:18:7b:c1:e6:cb:76:73:3a:7c:71:7c:a9:0a:38:43:9f:
2d:93:36:8c:61:99:b8:70:51:bb:7b:df:f0:d4:6c:64:b9:78:
57:30:34:ea:53:b1:0e:36:8f:60:8e:24:2c:b7:e1:4f:53:d3:
ec:56:e5:f2:63:c1:d4:27:28:0f:a9:d6:c1:c6:c9:a2:a8:0f:
59:41:48:85:2d:03:92:57:cc:14:b2:77:af:d3:c1:b8:6b:3c:
c6:4e:4a:a7:02:27:9d:2e:d4:4c:db:24:9a:50:02:b2:3c:6f:
13:c9:f0:9e:da:91:b4:ec:fe:82:10:b7:51:c1:c5:ae:fc:61:
93:8e:53:72:95:85:2b:eb:37:e8:bb:94:95:9f:58:6a:40:5f:
cf:82:b6:88:d1:83:b9:a2:82:c3:c0:72:46:4a:7b:98:25:3e:
5f:97:d7:5e:58:92:06:33:37:a1:85:72:91:c0:75:3d:8b:d5:
c4:39:8f:31:7e:7b:44:eb:c6:89:98:92:c0:d8:8b:1f:85:2a:
ed:a3:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:11:03 2026 by rpki-client