Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198831.roa
File: AS198831.roa (raw, json)
Hash identifier: TBfeeyoAhQhszpLr6QR/4b9la0bWoGTJQWnyhDFeNo8=
Subject key identifier: 42:92:E4:EA:45:5A:E6:91:E1:6D:BC:67:AF:16:02:BF:3E:41:AD:13
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5C22779B798510C9B4637D63836590F72AEDA9F2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198831.roa
Signing time: Wed 12 Aug 2026 12:16:12 +0000
ROA not before: Wed 12 Aug 2026 12:11:12 +0000
ROA not after: Wed 11 Aug 2027 12:16:12 +0000
asID: 198831
IP address blocks: 141.11.113.0/24 maxlen: 24
141.11.120.0/24 maxlen: 24
141.11.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:22:77:9b:79:85:10:c9:b4:63:7d:63:83:65:90:f7:2a:ed:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 12 12:11:12 2026 GMT
Not After : Aug 11 12:16:12 2027 GMT
Subject: CN=4292E4EA455AE691E16DBC67AF1602BF3E41AD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:5f:4a:47:5a:68:f3:07:5a:ea:08:a3:8e:
56:38:ab:32:9e:9c:e6:97:36:a5:7b:ac:3e:db:0e:
67:87:4d:01:df:2f:98:8c:39:5d:f5:06:6f:a7:c3:
b9:b8:6a:60:37:c8:4b:56:06:87:e9:ce:66:28:af:
f6:e9:69:3a:44:ff:08:d1:60:c1:74:e2:9e:b7:27:
cd:2d:fa:29:04:79:58:c1:c4:e5:02:86:c4:e4:4b:
cc:61:74:d6:a8:da:c7:e6:93:20:20:b1:95:6e:f7:
f1:c2:ff:14:a8:66:0e:ce:f4:1f:82:ea:56:7b:5b:
ed:49:11:3b:28:0b:0d:36:84:a4:a7:80:4e:a0:62:
78:de:fb:ae:40:f3:cd:fa:fa:3f:86:1f:46:b6:95:
a0:dc:eb:90:de:a3:d7:41:6c:6d:59:d2:e4:7e:6d:
5f:67:42:83:63:1c:3f:ec:9f:ef:65:dc:79:0c:e4:
07:64:8b:5a:70:2b:f1:6a:f5:f1:7b:5b:b2:f2:70:
ef:8c:1b:a8:d1:22:4a:ad:8c:18:ba:84:2c:bc:36:
c5:88:61:6a:bc:1b:d6:1d:c1:0d:ce:69:f7:cc:e6:
72:1e:f4:58:bf:67:16:42:0d:fb:c3:a2:50:4b:65:
fe:d4:73:f7:4c:3c:e8:ce:fb:1c:cd:f8:5b:de:95:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:E4:EA:45:5A:E6:91:E1:6D:BC:67:AF:16:02:BF:3E:41:AD:13
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.113.0/24
141.11.120.0/24
141.11.237.0/24
Signature Algorithm: sha256WithRSAEncryption
08:56:a6:a9:12:db:40:3e:f6:9b:6d:33:b1:bf:60:df:80:da:
4c:a2:e3:a9:12:72:d7:54:72:79:df:9d:0e:54:c5:39:6b:cb:
15:23:96:61:9a:1b:49:d0:33:11:4c:62:83:49:79:3e:35:15:
88:e8:65:29:99:69:67:b0:00:8f:57:18:08:ad:65:e9:d2:0c:
1d:ca:c2:22:50:7d:7d:4b:ac:81:dc:11:ce:f3:cd:aa:2b:0b:
6c:fc:2e:af:31:e8:9d:10:dc:51:95:fd:b3:d0:e8:32:c1:2d:
ba:b3:b4:ac:f3:51:e9:21:31:67:9f:ef:76:12:d6:a6:ce:55:
94:2f:cc:32:84:62:17:37:95:1d:4b:42:88:27:a6:93:ce:fd:
46:19:08:51:9c:33:25:ad:9b:f9:61:91:c8:c6:ee:1c:75:2b:
0a:a0:a8:78:34:52:64:00:4d:b5:0e:1d:13:69:22:3d:3b:a7:
d4:bc:51:3a:0d:6b:20:e1:9e:18:86:73:a1:8c:5a:61:87:04:
2d:c5:48:a7:4e:b4:02:4f:df:b1:70:8a:bb:44:d3:24:f7:b4:
47:7a:95:37:36:40:11:71:25:c0:8d:02:b4:69:c8:2a:ae:c5:
0c:97:d3:c8:a0:e3:41:3b:d4:d2:15:c9:31:6e:fe:18:dc:3f:
26:cb:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:03:23 2026 by rpki-client