Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
File: AS198624.roa (raw, json)
Hash identifier: jZgmpvFlcBFtwArZJ+tktvwQ/I2JYVNb3dhNohngStc=
Subject key identifier: B9:28:D6:22:C9:B3:0F:39:37:6A:53:20:0C:39:16:2E:D0:62:0D:47
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1441C54C6C729B1986725D11A4222C48599F7868
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
Signing time: Fri 21 Aug 2026 19:17:40 +0000
ROA not before: Fri 21 Aug 2026 19:12:40 +0000
ROA not after: Fri 20 Aug 2027 19:17:40 +0000
asID: 198624
IP address blocks: 2a14:7583:ea00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:41:c5:4c:6c:72:9b:19:86:72:5d:11:a4:22:2c:48:59:9f:78:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 21 19:12:40 2026 GMT
Not After : Aug 20 19:17:40 2027 GMT
Subject: CN=B928D622C9B30F39376A53200C39162ED0620D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8c:16:92:d7:97:9f:69:ba:43:48:44:f7:07:
96:f8:94:e5:01:02:1f:65:4b:8c:a5:6c:85:26:74:
1e:c3:b1:f7:fb:71:fe:b7:bd:b0:1f:15:bb:0c:2f:
ae:d5:2e:e6:2c:0c:4c:59:63:12:89:69:5f:49:cc:
1a:a5:03:11:81:78:3c:3b:fc:a8:a1:29:7e:aa:14:
2d:e2:c8:53:b2:97:e5:65:f7:6b:3e:86:d7:59:04:
0b:45:6d:4f:11:ec:4d:46:92:97:61:1d:90:20:99:
70:d8:38:cf:d7:28:42:f2:92:9f:91:06:fd:c2:c1:
5a:10:f0:2e:af:02:e7:b1:c7:09:3b:42:a4:24:3d:
81:5a:97:50:05:5d:38:68:ac:af:75:6f:41:73:8f:
0d:58:9c:a6:94:9a:b6:96:11:0d:02:da:7c:ee:cf:
12:a6:7e:f0:8f:c9:b8:1a:2d:c2:07:2a:75:85:94:
9c:91:f4:d0:d6:96:03:21:96:5f:47:1e:c3:0e:bc:
3d:d2:2a:84:19:84:c8:36:14:f4:e1:db:c4:c9:4f:
d6:c1:b3:97:02:7a:c1:39:b6:b3:f4:59:f4:47:35:
85:20:6d:af:b6:be:0a:c8:30:75:48:6a:f9:4a:ce:
71:92:62:34:da:3b:6b:75:32:e5:39:17:70:53:27:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:D6:22:C9:B3:0F:39:37:6A:53:20:0C:39:16:2E:D0:62:0D:47
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
6f:a2:4e:be:a6:df:18:92:36:4c:08:c9:4d:50:23:38:c5:00:
ae:fd:9c:f7:51:df:70:46:e0:43:05:9f:51:b5:69:a7:d6:ed:
e5:b1:a1:e1:a8:4f:e5:26:c3:d2:8f:65:04:1b:0d:82:9e:0b:
98:28:a9:9e:18:a5:d3:98:3c:63:ff:27:29:f9:f7:ed:7d:6d:
78:b8:e6:84:93:d2:3e:7d:45:f6:96:10:00:ce:c7:7d:af:22:
11:37:b5:13:69:40:e9:87:ee:4f:ce:d1:ad:8d:02:23:27:dd:
4e:42:cf:65:66:a4:3e:46:bc:75:76:3d:ae:53:bb:ae:0a:aa:
b1:61:d1:ae:74:75:4a:b7:b3:ac:61:d3:3d:d9:80:09:b3:3a:
90:ac:f2:bd:3d:a6:f7:6e:99:63:94:44:33:49:b5:54:8a:65:
c0:5c:f5:bf:40:51:7d:09:f3:85:1b:59:21:61:84:53:05:d1:
c1:63:29:4c:71:03:66:23:47:bb:d9:01:7f:cf:3c:5a:b6:66:
29:bb:61:32:b8:b3:f1:1e:e6:bb:ac:af:43:6c:ef:a2:f5:0f:
14:b1:f3:7a:f5:e7:33:d7:81:37:db:69:01:94:b0:d9:af:dd:
8b:88:aa:fd:fd:49:4d:ae:fe:4b:01:ed:2b:5f:e2:c8:11:52:
96:38:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:31 2026 by rpki-client