Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198486.roa
File:                     AS198486.roa (raw, json)
Hash identifier:          bKoYjYhxL6bC7aofBcQonYFqAlqCLTDknImtjpEfCy4=
Subject key identifier:   C0:AA:23:D3:CB:0C:A4:27:1F:CC:49:01:92:9E:77:0C:3E:A9:52:1C
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       179D6D462C0586674A93B3B6EDE42E697395A626
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198486.roa
Signing time:             Wed 13 May 2026 08:59:22 +0000
ROA not before:           Wed 13 May 2026 08:54:22 +0000
ROA not after:            Wed 12 May 2027 08:59:22 +0000
asID:                     198486
IP address blocks:        78.105.180.0/24 maxlen: 24
                          78.105.193.0/24 maxlen: 24
                          78.105.197.0/24 maxlen: 24
                          78.105.208.0/24 maxlen: 24
                          78.105.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:6d:46:2c:05:86:67:4a:93:b3:b6:ed:e4:2e:69:73:95:a6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: May 13 08:54:22 2026 GMT
            Not After : May 12 08:59:22 2027 GMT
        Subject: CN=C0AA23D3CB0CA4271FCC4901929E770C3EA9521C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:57:6a:65:f1:c0:49:b8:50:3d:f9:23:23:
                    22:d8:c7:84:e2:96:6e:4e:77:cb:76:9d:f8:d9:04:
                    07:07:0d:cd:e2:3d:5b:64:95:24:01:5b:56:a0:66:
                    9d:c3:9b:91:23:0a:6f:d2:25:f5:09:a4:7a:b2:cc:
                    43:99:2b:e7:70:4d:23:6f:b2:92:16:1c:53:77:a5:
                    6f:8a:d1:a6:a1:b0:04:c2:06:88:2e:4e:ad:ee:8b:
                    9d:ac:4b:c8:18:15:05:96:02:5a:00:f7:32:1e:5d:
                    6a:ef:d6:cf:54:72:04:5b:4e:b5:95:ce:1c:da:32:
                    58:88:67:7f:0d:72:06:f0:f1:72:7b:1a:7a:4b:6a:
                    9f:47:f4:8e:4b:da:c6:67:c8:fc:e5:df:87:d8:52:
                    7f:66:05:d6:e7:4a:e0:34:22:50:44:66:07:27:74:
                    52:d0:b7:ba:64:9e:dc:d9:f9:3a:47:db:56:08:bc:
                    b6:34:bd:ae:72:0d:13:bb:56:6f:97:f3:ee:a5:16:
                    24:c9:b0:5c:7b:fd:51:bb:bd:e2:d1:42:d4:b9:d1:
                    c7:fc:d7:1b:74:1c:76:38:5a:d1:e8:ff:7b:1c:b4:
                    ac:5e:69:40:2f:cb:a1:14:d4:d8:2b:57:4d:65:3c:
                    8d:86:38:c8:95:42:50:3f:07:9d:ce:9d:ed:f8:d5:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:23:D3:CB:0C:A4:27:1F:CC:49:01:92:9E:77:0C:3E:A9:52:1C
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.105.180.0/24
                  78.105.193.0/24
                  78.105.197.0/24
                  78.105.208.0/24
                  78.105.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:8d:a2:1c:d7:c5:a0:56:d2:46:f5:7b:a5:ab:06:37:f1:
         63:fe:7b:7a:29:d3:c8:04:bd:b7:86:80:a7:43:24:cb:c2:62:
         03:ab:0d:64:6b:a4:c5:b5:ff:b0:aa:c2:3f:68:14:56:e9:dc:
         ab:4f:46:de:2b:07:2e:4b:a7:18:ec:7f:bb:ff:98:43:6c:01:
         13:d3:19:51:ce:99:ca:6b:09:68:aa:01:2f:0f:1c:d1:80:f0:
         a5:24:23:bb:20:a3:0d:80:b5:79:f4:0b:44:24:63:1e:cf:c9:
         0e:67:17:55:ab:66:a4:16:d9:22:2f:b8:ad:6a:bd:e7:1d:b4:
         58:f1:44:32:13:3f:95:06:fb:83:d3:ce:be:c4:c8:34:b8:4c:
         6e:2f:bd:a8:4b:8c:b9:c3:c0:03:25:46:2d:66:cd:d1:3a:31:
         5c:10:33:2f:91:cf:0c:c1:83:b0:a6:0f:07:68:ff:68:00:01:
         59:76:f2:ba:29:9f:01:e1:cd:98:ac:73:d5:30:02:ea:ac:12:
         02:fc:d5:4d:c1:89:86:35:22:09:cc:85:81:80:0c:f9:b4:d3:
         ea:0a:7c:16:ab:43:7a:56:17:c2:96:4f:5c:9b:16:0c:8e:11:
         06:29:93:49:3b:b6:52:c4:3b:e9:13:2a:16:dd:90:e6:b0:67:
         bb:34:d5:d1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUF51tRiwFhmdKk7O27eQuaXOVpiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MTMwODU0MjJaFw0yNzA1MTIwODU5MjJaMDMxMTAvBgNV
BAMTKEMwQUEyM0QzQ0IwQ0E0MjcxRkNDNDkwMTkyOUU3NzBDM0VBOTUyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHFdqZfHASbhQPfkjIyLYx4Ti
lm5Od8t2nfjZBAcHDc3iPVtklSQBW1agZp3Dm5EjCm/SJfUJpHqyzEOZK+dwTSNv
spIWHFN3pW+K0aahsATCBoguTq3ui52sS8gYFQWWAloA9zIeXWrv1s9UcgRbTrWV
zhzaMliIZ38Ncgbw8XJ7GnpLap9H9I5L2sZnyPzl34fYUn9mBdbnSuA0IlBEZgcn
dFLQt7pkntzZ+TpH21YIvLY0va5yDRO7Vm+X8+6lFiTJsFx7/VG7veLRQtS50cf8
1xt0HHY4WtHo/3sctKxeaUAvy6EU1NgrV01lPI2GOMiVQlA/B53One341Rs3AgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUwKoj08sMpCcfzEkBkp53DD6pUhwwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk4NDg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATmm0
AwQATmnBAwQATmnFAwQATmnQAwQATmnSMA0GCSqGSIb3DQEBCwUAA4IBAQBBXI2i
HNfFoFbSRvV7pasGN/Fj/nt6KdPIBL23hoCnQyTLwmIDqw1ka6TFtf+wqsI/aBRW
6dyrT0beKwcuS6cY7H+7/5hDbAET0xlRzpnKawloqgEvDxzRgPClJCO7IKMNgLV5
9AtEJGMez8kOZxdVq2akFtkiL7itar3nHbRY8UQyEz+VBvuD086+xMg0uExuL72o
S4y5w8ADJUYtZs3ROjFcEDMvkc8MwYOwpg8HaP9oAAFZdvK6KZ8B4c2YrHPVMALq
rBIC/NVNwYmGNSIJzIWBgAz5tNPqCnwWq0N6VhfClk9cmxYMjhEGKZNJO7ZSxDvp
EyoW3ZDmsGe7NNXR
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:13 2026 by rpki-client