Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198405.roa
File:                     AS198405.roa (raw, json)
Hash identifier:          KbNwgFCn6CYEDPr4sML/TOyUOicktPDk3QpzFZ7EwYY=
Subject key identifier:   1E:F6:AE:0E:BB:E8:0A:9E:0F:4D:80:31:2B:B5:B7:43:38:47:A8:A6
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5CC13B4AEE5FD271A8989B0890112D067089D101
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198405.roa
Signing time:             Thu 21 May 2026 15:22:01 +0000
ROA not before:           Thu 21 May 2026 15:17:01 +0000
ROA not after:            Thu 20 May 2027 15:22:01 +0000
asID:                     198405
IP address blocks:        178.92.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 May 2026 14:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:3b:4a:ee:5f:d2:71:a8:98:9b:08:90:11:2d:06:70:89:d1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 21 15:17:01 2026 GMT
            Not After : May 20 15:22:01 2027 GMT
        Subject: CN=1EF6AE0EBBE80A9E0F4D80312BB5B7433847A8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:97:6e:6b:ca:76:a7:8a:62:21:bf:2c:4c:a0:
                    0a:bb:78:cd:a2:85:05:4e:07:b4:4b:95:7a:0e:4a:
                    ba:c3:7a:c2:f5:b5:a2:c4:72:b2:46:42:a0:ff:10:
                    73:ca:4e:ed:8e:7a:8f:49:77:0b:0f:ad:3c:23:8f:
                    60:ff:d2:2b:f3:bc:a9:79:35:f3:49:66:c4:cc:97:
                    eb:ae:cb:91:10:6b:ee:51:79:0c:d2:18:2c:cd:4d:
                    f6:23:0c:d0:17:ad:e9:2f:63:ab:30:1f:9a:2a:a1:
                    b8:54:f4:7e:5d:21:b5:73:95:c0:37:0e:42:aa:21:
                    95:5d:42:cd:70:a8:fa:31:e9:e9:12:d4:f5:85:ab:
                    13:32:ca:f4:ca:49:25:b7:7f:72:c4:a3:e1:1e:27:
                    3f:37:e8:69:b0:89:00:5e:52:48:b7:26:ca:0e:40:
                    97:9d:ec:b0:91:69:cb:f9:c2:72:95:b2:8c:36:c3:
                    7e:88:24:23:05:42:19:46:3f:c4:2a:84:79:6e:3e:
                    3b:e3:6a:64:a2:87:5d:83:ea:54:5c:a1:39:05:99:
                    68:39:d1:3f:ca:f4:74:54:92:d2:15:88:16:f6:51:
                    5c:42:68:5d:6e:f6:70:58:bc:b2:e1:24:62:7a:f9:
                    93:76:a8:93:5f:74:73:f2:90:56:ff:f5:9c:af:a2:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:AE:0E:BB:E8:0A:9E:0F:4D:80:31:2B:B5:B7:43:38:47:A8:A6
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198405.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:62:ec:6f:22:da:e7:95:eb:2f:88:d2:fc:20:22:62:bf:1a:
         d7:bd:31:87:2f:04:4f:4a:a1:71:5b:7f:38:1f:ae:71:08:b7:
         ba:db:a5:76:0d:57:e1:bc:4a:8a:b2:21:ba:00:4f:b8:2b:81:
         9f:5b:0e:f5:fe:7f:8a:b9:88:75:25:50:2f:74:8a:fb:81:ba:
         80:ba:c5:13:c0:77:a3:84:46:3a:03:21:6a:d6:6f:ad:bd:fd:
         c3:5a:7b:03:01:0b:6b:7a:ee:aa:ad:c7:16:1f:19:31:64:a3:
         2e:da:7f:0b:b8:30:cf:da:35:ec:ac:0e:ac:8c:8b:55:71:38:
         80:c4:ae:dc:12:06:b4:f2:4a:b9:e4:8d:09:14:34:b6:92:db:
         a7:01:03:40:ae:8f:b3:18:62:22:8d:17:7f:6e:a2:8b:6d:37:
         cb:07:e9:57:65:d2:71:65:ba:f8:54:a2:ea:97:dc:75:dc:f5:
         be:a6:4e:de:dc:56:f1:d6:0c:5e:63:95:85:4a:e0:34:a7:2c:
         15:9f:cb:67:88:a9:5a:2b:43:c1:55:65:fd:45:d4:78:47:6e:
         50:d8:05:b7:5a:0b:5c:ca:c5:ca:a4:dc:81:b1:73:46:22:a0:
         60:1e:f3:05:1c:63:60:6b:9a:32:4c:f7:5b:95:34:e7:38:c6:
         cc:e9:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 00:39:51 2026 by rpki-client