Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198969.roa
File: AS198969.roa (raw, json)
Hash identifier: EXBc4mZCJuW+3EdAqWmC6URJkS5Hq6yyiMERNeyTEbs=
Subject key identifier: B6:65:B8:23:3E:56:8B:EB:E7:54:6A:01:6E:A6:68:3E:1A:31:6A:39
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 12B8497AB698C9FAAB89652252FC23805ACC0B8B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198969.roa
Signing time: Wed 24 Jun 2026 15:43:16 +0000
ROA not before: Wed 24 Jun 2026 15:38:16 +0000
ROA not after: Wed 23 Jun 2027 15:43:16 +0000
asID: 198969
IP address blocks: 94.192.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b8:49:7a:b6:98:c9:fa:ab:89:65:22:52:fc:23:80:5a:cc:0b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 24 15:38:16 2026 GMT
Not After : Jun 23 15:43:16 2027 GMT
Subject: CN=B665B8233E568BEBE7546A016EA6683E1A316A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:ec:c2:67:82:1f:b8:06:1d:c3:77:ce:30:
0c:37:04:c6:01:23:df:64:16:1d:22:4b:fc:32:2a:
4e:eb:62:81:9e:37:15:07:b6:d8:c4:46:0f:c4:85:
5d:53:23:0e:bf:dd:5c:2f:af:d9:c7:fa:24:94:a3:
a3:af:44:c4:6c:19:2e:a8:1a:1f:a0:31:98:01:68:
97:d0:0f:bd:8e:be:86:bb:8b:6e:44:5f:61:cf:89:
81:05:ce:f7:3a:f9:77:a4:0c:f9:25:45:0d:e5:0f:
41:60:60:a6:4d:c8:5b:3d:62:43:5d:e1:17:af:b0:
e1:00:44:72:f6:0f:f6:93:e1:60:4c:52:60:6b:28:
71:cf:ee:7a:55:55:07:4d:48:1e:7a:5b:eb:28:0b:
67:2d:6e:60:bb:f3:44:04:12:2a:62:a3:d3:2d:e9:
a0:67:63:22:f4:d9:40:c2:26:db:0e:55:05:ff:07:
8c:40:ae:af:67:92:a9:c3:c9:64:ea:65:19:44:51:
9c:0b:f2:e0:a8:be:56:3a:58:4a:45:eb:9d:f5:1e:
e4:98:fe:6c:06:e5:2f:cd:63:bb:bf:25:f0:ed:b1:
0d:13:69:0a:87:fb:3b:a7:d6:84:a9:46:a6:8a:da:
ac:18:e8:cd:4a:1f:14:40:72:53:d0:56:25:b7:af:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:B8:23:3E:56:8B:EB:E7:54:6A:01:6E:A6:68:3E:1A:31:6A:39
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.192.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:59:31:74:c8:d6:6e:e7:23:6e:91:27:2a:8a:88:18:a8:b0:
3e:b0:2e:00:b4:08:f7:26:0e:28:58:be:2c:db:b2:ae:bc:15:
8b:ff:a0:34:2e:8c:e9:cd:15:0d:94:b0:4d:64:71:9b:37:ba:
57:81:bc:f0:78:19:8c:a4:14:68:83:26:72:9f:ab:87:8c:e7:
17:cf:01:a8:54:f6:15:86:f8:ce:8f:94:ac:ec:eb:6f:d3:fe:
5c:a3:80:07:b3:1c:f7:15:bd:6d:0d:fa:fe:cc:85:52:d1:79:
5d:be:64:55:89:e9:53:ac:a5:59:b8:2e:88:2b:24:ff:62:f6:
4b:d1:a9:27:6a:bd:a0:56:7a:69:de:19:aa:bc:b2:28:0d:4b:
29:84:45:24:de:d5:fa:eb:cc:03:ba:64:80:e9:50:ed:73:f4:
34:5f:e9:60:56:af:94:d2:dc:6d:1a:fc:16:0c:8a:77:3f:b6:
4c:33:b4:41:3b:a5:c0:2c:6b:d1:02:a6:3a:7f:dc:0d:86:68:
38:77:db:e0:d0:e3:71:3a:ad:04:89:c4:9c:43:e2:c9:dc:06:
a5:1e:ae:e6:9e:b2:96:49:f0:77:6f:79:f8:76:5b:a2:58:62:
ed:25:13:59:7a:a2:06:cd:d4:3d:40:67:b0:d9:06:8f:d2:a8:
d0:61:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:37 2026 by rpki-client