Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198510.roa
File:                     AS198510.roa (raw, json)
Hash identifier:          sFPljj0T0jTe+yGQ+jDdnrOOntsiktUODla7J+42e1g=
Subject key identifier:   A4:92:27:78:4F:CE:3F:CD:FB:71:26:28:6F:99:43:51:7C:D6:4F:C3
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       0F245A1DC0245BF66E0669E9D0007D457D7B52DB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198510.roa
Signing time:             Mon 29 Jun 2026 11:22:44 +0000
ROA not before:           Mon 29 Jun 2026 11:17:44 +0000
ROA not after:            Mon 28 Jun 2027 11:22:44 +0000
asID:                     198510
IP address blocks:        78.105.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 09:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:24:5a:1d:c0:24:5b:f6:6e:06:69:e9:d0:00:7d:45:7d:7b:52:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jun 29 11:17:44 2026 GMT
            Not After : Jun 28 11:22:44 2027 GMT
        Subject: CN=A49227784FCE3FCDFB7126286F9943517CD64FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:29:2c:41:08:53:e7:d3:03:c3:f4:81:dc:
                    13:24:94:44:de:dc:0a:78:20:a8:a5:4c:45:b3:b9:
                    e5:69:19:55:92:92:bf:c4:2f:a6:ed:b0:2c:9c:98:
                    83:95:9b:d7:29:ef:14:de:ad:05:cc:39:3a:8e:3a:
                    5f:e7:a4:a7:c1:94:4d:58:3c:9d:fe:99:6e:32:0e:
                    e6:1c:98:97:df:41:35:dd:63:c5:27:e5:2c:3f:88:
                    c0:94:52:66:2a:d3:82:10:46:1d:b9:aa:68:70:b7:
                    d5:6d:82:7a:25:77:35:95:8f:3e:97:75:86:04:ac:
                    f6:c3:d4:82:36:a0:a2:ba:11:d3:7a:22:87:1c:8c:
                    ad:c1:e0:71:58:63:0c:33:79:0a:4c:15:ef:d5:e5:
                    ba:e4:68:44:20:4a:9e:09:5d:f6:01:5b:99:6c:67:
                    31:e6:52:02:9d:04:77:f1:f3:fb:25:74:43:dc:9b:
                    36:56:58:5e:83:1c:95:ca:0b:4b:78:40:f3:6b:3d:
                    f5:e8:c9:24:ee:df:56:8d:eb:ed:1a:31:e4:e0:9d:
                    81:db:2e:29:ce:a3:30:57:fb:b9:ef:c9:dd:73:0c:
                    f4:8e:4d:6c:a7:8d:58:9b:49:0b:e7:d1:e8:79:72:
                    a2:74:41:e9:6d:10:ec:37:6c:9e:96:ed:8e:79:95:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:92:27:78:4F:CE:3F:CD:FB:71:26:28:6F:99:43:51:7C:D6:4F:C3
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.105.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:5b:19:c8:fe:0c:a4:2e:97:ba:ea:72:c3:4a:26:69:ab:
         2d:86:69:1b:aa:3d:17:e3:d3:9f:59:45:d3:cb:76:90:fb:91:
         61:c2:e3:be:f5:47:a8:23:54:ba:43:15:8f:d8:38:3a:c8:f0:
         67:d2:bd:64:ec:53:0b:8e:25:80:24:08:84:e3:b6:18:03:bc:
         d9:7a:29:30:49:54:cd:bf:a9:ee:24:54:67:e3:44:03:a6:03:
         6d:af:4d:cb:58:37:c6:5d:85:4d:07:4b:0f:14:06:31:9c:f6:
         6c:c5:b7:4e:ec:a7:cb:37:8a:0c:89:b2:aa:a2:78:99:2e:f9:
         61:89:88:aa:98:6d:8f:2f:e1:a4:6a:72:c2:76:1d:e7:0a:03:
         48:e0:60:87:fa:72:09:a1:f1:ab:95:17:c6:92:31:0a:a8:9a:
         4e:7c:33:d4:eb:7b:dc:56:63:15:8f:94:e6:61:59:3b:44:90:
         16:90:6c:a3:37:7a:ed:c8:ce:e0:5b:64:ce:10:ab:1c:d1:84:
         5e:e5:e6:a6:ea:68:be:3e:2e:d1:2a:40:01:06:2e:4c:39:59:
         af:81:50:89:0e:b7:07:46:60:e9:6b:e2:18:be:a6:50:9a:f6:
         a9:56:80:1f:93:49:52:58:aa:ca:4f:f1:46:d6:9b:f0:f1:f7:
         9f:9a:8c:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDyRaHcAkW/ZuBmnp0AB9RX17UtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MjkxMTE3NDRaFw0yNzA2MjgxMTIyNDRaMDMxMTAvBgNV
BAMTKEE0OTIyNzc4NEZDRTNGQ0RGQjcxMjYyODZGOTk0MzUxN0NENjRGQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+yksQQhT59MDw/SB3BMklETe
3Ap4IKilTEWzueVpGVWSkr/EL6btsCycmIOVm9cp7xTerQXMOTqOOl/npKfBlE1Y
PJ3+mW4yDuYcmJffQTXdY8Un5Sw/iMCUUmYq04IQRh25qmhwt9VtgnoldzWVjz6X
dYYErPbD1II2oKK6EdN6IoccjK3B4HFYYwwzeQpMFe/V5brkaEQgSp4JXfYBW5ls
ZzHmUgKdBHfx8/sldEPcmzZWWF6DHJXKC0t4QPNrPfXoySTu31aN6+0aMeTgnYHb
LinOozBX+7nvyd1zDPSOTWynjVibSQvn0eh5cqJ0QeltEOw3bJ6W7Y55lTDLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUpJIneE/OP837cSYob5lDUXzWT8MwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk4NTEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmmx
MA0GCSqGSIb3DQEBCwUAA4IBAQAIT1sZyP4MpC6Xuupyw0omaasthmkbqj0X49Of
WUXTy3aQ+5FhwuO+9UeoI1S6QxWP2Dg6yPBn0r1k7FMLjiWAJAiE47YYA7zZeikw
SVTNv6nuJFRn40QDpgNtr03LWDfGXYVNB0sPFAYxnPZsxbdO7KfLN4oMibKqoniZ
LvlhiYiqmG2PL+GkanLCdh3nCgNI4GCH+nIJofGrlRfGkjEKqJpOfDPU63vcVmMV
j5TmYVk7RJAWkGyjN3rtyM7gW2TOEKsc0YRe5eam6mi+Pi7RKkABBi5MOVmvgVCJ
DrcHRmDpa+IYvqZQmvapVoAfk0lSWKrKT/FG1pvw8fefmoxX
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:38 2026 by rpki-client