Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: DaR5G591wiphkr+oSWV9lpcesbTCfBnxpQyUYnILPAU=
Subject key identifier: 81:31:A4:E3:9B:DA:28:12:C9:77:E7:70:1A:FF:BC:D8:9B:23:06:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4864CF73CA00A94FEE45AEECEB0FE1434167A2C1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198566.roa
Signing time: Mon 17 Aug 2026 21:12:02 +0000
ROA not before: Mon 17 Aug 2026 21:07:02 +0000
ROA not after: Mon 16 Aug 2027 21:12:02 +0000
asID: 198566
IP address blocks: 51.194.224.0/24 maxlen: 24
51.241.164.0/24 maxlen: 24
188.220.21.0/24 maxlen: 24
188.220.27.0/24 maxlen: 24
188.221.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:64:cf:73:ca:00:a9:4f:ee:45:ae:ec:eb:0f:e1:43:41:67:a2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 17 21:07:02 2026 GMT
Not After : Aug 16 21:12:02 2027 GMT
Subject: CN=8131A4E39BDA2812C977E7701AFFBCD89B230695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:f0:10:67:03:91:d4:82:b1:88:8d:0c:5f:
ef:74:80:ac:45:56:f9:1b:05:20:67:a7:52:93:30:
e1:e9:17:e4:38:22:25:f2:43:82:64:e9:be:ae:2e:
84:a5:55:0d:1d:d4:8f:34:32:29:6e:2c:a4:dc:44:
ac:5f:e0:a7:98:7b:ea:1c:85:4b:2d:d4:0f:3e:69:
48:39:fb:0c:6f:14:90:8f:13:2c:83:0b:92:4f:de:
75:f8:6e:a4:f7:6d:69:e7:8e:ae:8a:04:87:41:6e:
5f:ac:03:df:b2:67:93:fb:3a:f7:db:5c:9e:ca:ee:
cc:5d:fb:5a:ae:d4:78:53:31:15:90:ce:3c:69:0b:
13:53:1a:ee:06:a3:43:2d:aa:aa:d7:9f:81:9c:b3:
1f:8d:eb:13:0e:4d:f1:26:1a:42:7d:d5:d9:f1:8f:
3c:4e:25:e3:22:fc:9c:62:4f:4b:03:49:f1:ab:1e:
34:96:a7:7c:0a:6b:34:72:3f:ce:82:e8:cb:6f:5b:
12:ef:df:06:00:c4:5a:cd:52:3c:63:4c:7a:d9:f6:
3e:bc:25:81:b2:79:7b:be:40:42:25:c1:f6:b3:b7:
c7:99:fa:83:5c:59:6e:ee:e4:d0:aa:d9:b9:9c:de:
48:d4:01:50:1c:59:cf:51:d2:d6:2c:ce:03:9f:5d:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:A4:E3:9B:DA:28:12:C9:77:E7:70:1A:FF:BC:D8:9B:23:06:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.224.0/24
51.241.164.0/24
188.220.21.0/24
188.220.27.0/24
188.221.44.0/24
Signature Algorithm: sha256WithRSAEncryption
16:95:04:9f:d0:2d:e2:3e:49:69:d2:1a:26:47:ab:18:71:54:
75:7a:41:74:5a:f7:41:6e:97:c3:f7:b0:33:02:02:e0:70:ac:
28:55:70:58:f4:e5:cf:02:a1:1d:ac:9c:1c:66:fb:8a:24:55:
9a:d2:6a:3c:a8:49:af:89:27:c2:72:88:65:96:d8:6c:30:17:
1e:eb:5b:3e:6c:3e:4c:1d:32:58:d1:e2:ef:99:19:bd:2f:10:
87:0f:92:0e:a3:d0:54:d0:b9:4b:82:56:ef:5d:3d:b1:a1:df:
35:b4:b8:ff:e9:34:77:18:ba:6c:3b:de:af:45:ad:56:b3:fe:
ea:e7:4b:bf:b3:e9:2a:96:f7:cd:19:13:a8:f1:40:b3:9b:75:
35:86:cd:b9:80:a5:9b:b7:9f:3b:96:df:fa:cf:6b:50:dd:90:
d1:62:73:62:d4:85:03:5f:e8:86:ee:2f:c7:cb:f6:35:0c:2b:
0b:f2:07:6e:b3:c9:76:25:49:6f:3a:89:a9:33:d1:05:e9:4d:
a7:d8:d5:86:4e:67:c3:31:fd:f6:6a:d1:94:25:ab:86:74:9c:
2d:c5:91:3a:8c:dd:76:c1:a1:e3:01:f7:fd:9e:3f:2a:88:fa:
7d:a1:b5:78:73:ba:36:73:1b:0c:aa:c9:81:eb:fa:5b:f7:55:
ce:b5:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:43 2026 by rpki-client