Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: ytP/mF4DbKTOswMpqIUeaG3i00irCrRaqfPDh9QMgyI=
Subject key identifier: 7F:21:AB:C8:F3:F6:4A:EB:E5:4E:43:B2:C7:72:D5:E6:29:A0:9E:26
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 14AA24901306BB5B5AD3EE5C25BC34D96D7D94EF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198566.roa
Signing time: Sat 17 Oct 2026 00:00:23 +0000
ROA not before: Fri 16 Oct 2026 23:55:23 +0000
ROA not after: Sat 16 Oct 2027 00:00:23 +0000
asID: 198566
IP address blocks: 46.202.212.0/24 maxlen: 24
46.202.213.0/24 maxlen: 24
91.124.58.0/24 maxlen: 24
178.92.149.0/24 maxlen: 24
178.92.154.0/24 maxlen: 24
178.92.156.0/24 maxlen: 24
178.92.161.0/24 maxlen: 24
178.92.169.0/24 maxlen: 24
178.92.177.0/24 maxlen: 24
178.94.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 21:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:aa:24:90:13:06:bb:5b:5a:d3:ee:5c:25:bc:34:d9:6d:7d:94:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 16 23:55:23 2026 GMT
Not After : Oct 16 00:00:23 2027 GMT
Subject: CN=7F21ABC8F3F64AEBE54E43B2C772D5E629A09E26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:4e:6c:c2:6f:a3:9c:c8:1d:78:da:d7:ea:
5a:68:75:cb:50:3b:e0:cd:6f:b3:74:44:2c:a5:aa:
35:4f:3f:56:2f:c2:a2:81:a0:83:31:87:2d:4e:94:
b3:ad:09:ca:bc:c1:e6:88:bf:e8:d6:dd:ac:92:4d:
67:ed:87:e2:da:6e:b2:82:e3:ba:8c:b1:ac:2f:2a:
61:76:1d:88:e3:7f:b5:4b:30:7e:ed:44:55:61:4d:
2e:f5:0d:06:23:0c:2c:12:71:48:d5:db:e6:88:27:
ca:a1:a0:be:0c:ca:d1:ea:24:65:bf:6e:df:4e:d7:
9a:c4:b4:c3:d4:b8:84:c8:fa:7b:0b:6a:32:bf:95:
92:8a:4f:05:87:f0:f7:88:47:6c:67:1e:b0:97:1f:
e1:04:44:fc:45:40:5a:a8:06:46:6e:6d:2d:0a:48:
ea:f1:0f:57:f7:aa:8d:10:c4:82:df:19:84:25:48:
be:3a:9d:d6:83:fb:92:17:9a:58:53:ec:9e:67:9c:
ab:66:90:77:95:5f:23:ab:dc:2d:7e:12:5d:81:85:
64:11:8b:5d:ed:1b:ba:a7:f4:d7:4e:60:bb:ca:ca:
37:ed:8f:71:2d:16:78:13:1c:00:5b:52:61:1f:26:
94:50:2a:f3:d8:17:6c:e2:fe:f8:e0:24:2e:de:51:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:21:AB:C8:F3:F6:4A:EB:E5:4E:43:B2:C7:72:D5:E6:29:A0:9E:26
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.212.0/23
91.124.58.0/24
178.92.149.0/24
178.92.154.0/24
178.92.156.0/24
178.92.161.0/24
178.92.169.0/24
178.92.177.0/24
178.94.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:55:b1:42:e1:0e:21:aa:63:4b:e8:3f:4a:dc:6a:00:55:3d:
73:1a:2b:bb:57:fd:e3:4a:67:32:8e:71:1a:54:9a:5c:f9:3c:
74:a9:e9:7a:65:e4:a6:20:94:09:5c:f2:b9:22:a8:70:1b:f4:
f4:73:03:62:e5:04:2d:7d:69:2e:06:62:db:9f:97:1f:f6:8c:
9b:5d:c7:85:8a:36:08:76:f3:29:11:3e:3b:ea:9f:73:45:b3:
de:25:cd:29:86:3a:3d:58:24:10:8a:f5:0c:78:39:8f:12:b5:
e8:b0:1a:c6:63:72:84:87:8c:11:fc:34:34:59:9d:51:3e:a7:
dc:cc:81:a4:57:17:41:00:05:80:ed:c2:2d:47:df:25:e8:5f:
8b:15:b4:89:69:f5:a5:e7:45:08:b4:c7:78:e3:76:95:89:62:
56:c0:d4:1e:27:39:41:13:bd:39:6d:a7:d5:12:de:2e:98:e0:
fa:5a:22:1f:9b:38:51:8c:db:e0:d4:94:71:c0:49:b8:a8:b7:
84:a5:69:11:79:a2:b3:76:6a:ac:75:bd:36:5c:f4:4f:26:8c:
bc:34:cc:82:1e:a3:f2:86:9f:1b:f7:0b:94:4c:f7:72:62:98:
a0:9d:72:90:a8:44:a0:28:9d:93:ad:dc:f8:24:dd:2b:db:83:
df:21:f3:5c
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUFKokkBMGu1ta0+5cJbw02W19lO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMTYyMzU1MjNaFw0yNzEwMTYwMDAwMjNaMDMxMTAvBgNV
BAMTKDdGMjFBQkM4RjNGNjRBRUJFNTRFNDNCMkM3NzJENUU2MjlBMDlFMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgk5swm+jnMgdeNrX6lpodctQ
O+DNb7N0RCylqjVPP1YvwqKBoIMxhy1OlLOtCcq8weaIv+jW3aySTWfth+LabrKC
47qMsawvKmF2HYjjf7VLMH7tRFVhTS71DQYjDCwScUjV2+aIJ8qhoL4MytHqJGW/
bt9O15rEtMPUuITI+nsLajK/lZKKTwWH8PeIR2xnHrCXH+EERPxFQFqoBkZubS0K
SOrxD1f3qo0QxILfGYQlSL46ndaD+5IXmlhT7J5nnKtmkHeVXyOr3C1+El2BhWQR
i13tG7qn9NdOYLvKyjftj3EtFngTHABbUmEfJpRQKvPYF2zi/vjgJC7eUVqRAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUfyGryPP2SuvlTkOyx3LV5imgniYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk4NTY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLsrU
AwQAW3w6AwQAslyVAwQAslyaAwQAslycAwQAslyhAwQAslypAwQAslyxAwQAsl7O
MA0GCSqGSIb3DQEBCwUAA4IBAQA8VbFC4Q4hqmNL6D9K3GoAVT1zGiu7V/3jSmcy
jnEaVJpc+Tx0qel6ZeSmIJQJXPK5IqhwG/T0cwNi5QQtfWkuBmLbn5cf9oybXceF
ijYIdvMpET476p9zRbPeJc0phjo9WCQQivUMeDmPErXosBrGY3KEh4wR/DQ0WZ1R
PqfczIGkVxdBAAWA7cItR98l6F+LFbSJafWl50UItMd443aViWJWwNQeJzlBE705
bafVEt4umOD6WiIfmzhRjNvg1JRxwEm4qLeEpWkReaKzdmqsdb02XPRPJoy8NMyC
HqPyhp8b9wuUTPdyYpignXKQqESgKJ2Trdz4JN0r24PfIfNc
-----END CERTIFICATE-----
Generated at Mon Nov 9 07:05:50 2026 by rpki-client