Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198805.roa
File: AS198805.roa (raw, json)
Hash identifier: nGZBln0WTR6W/0rcqJsto8e7skBm7+OOrcmu4klkJlk=
Subject key identifier: 4B:35:EE:29:CC:DE:FA:E1:BC:82:B2:2C:DA:D0:A0:76:0D:C2:20:0C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 522876BB337385D09499D46693B9391D97E870A5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198805.roa
Signing time: Sat 24 Oct 2026 08:20:57 +0000
ROA not before: Sat 24 Oct 2026 08:15:57 +0000
ROA not after: Sat 23 Oct 2027 08:20:57 +0000
asID: 198805
IP address blocks: 91.124.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:28:76:bb:33:73:85:d0:94:99:d4:66:93:b9:39:1d:97:e8:70:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 24 08:15:57 2026 GMT
Not After : Oct 23 08:20:57 2027 GMT
Subject: CN=4B35EE29CCDEFAE1BC82B22CDAD0A0760DC2200C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:dc:22:f5:60:10:c0:40:4a:4e:1e:52:8e:
bf:b5:0f:bb:ea:0b:96:55:1e:aa:5c:42:38:8e:92:
64:3d:d7:d1:1d:c2:1c:5b:95:88:d8:40:e2:00:03:
34:54:32:6b:cb:4e:27:de:f4:6e:66:19:0e:ad:0f:
a9:ea:db:30:20:83:52:fe:9b:27:5d:96:74:4a:cb:
21:d2:52:22:36:89:1c:2f:c9:46:5c:3a:58:e7:d5:
73:17:b4:bd:be:02:83:91:aa:71:96:60:a9:d6:b5:
1b:ac:2f:8c:b3:23:c7:00:89:89:e1:42:86:da:04:
72:1d:5c:60:7a:64:ac:7a:c7:a5:8f:0a:91:63:3a:
7e:cc:44:c6:eb:2b:af:24:9b:83:cc:b6:23:3e:c0:
41:38:bb:63:cc:38:60:7a:39:65:c2:17:78:f7:2e:
51:d0:27:75:05:a4:75:39:dc:c0:4e:a0:c0:c8:31:
a5:5a:de:44:fc:73:0e:75:84:a9:86:95:d1:21:9a:
f1:58:56:c4:73:a6:9d:60:9b:4a:f7:c9:95:ed:f7:
21:80:f0:ce:39:30:77:5c:3d:1e:11:e8:eb:38:f6:
87:09:51:27:43:c4:48:cc:c7:32:87:b4:3e:2f:af:
43:2e:49:cb:93:d4:4a:ce:3b:e3:5a:d4:b7:2f:bb:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:EE:29:CC:DE:FA:E1:BC:82:B2:2C:DA:D0:A0:76:0D:C2:20:0C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.22.0/24
Signature Algorithm: sha256WithRSAEncryption
71:18:f0:2f:17:4a:ca:b7:67:f5:56:71:30:62:8b:81:ab:67:
db:41:aa:7e:e3:c7:96:43:17:5f:93:72:64:a1:f1:ec:3b:92:
2c:6e:f2:de:c0:c2:04:3f:1f:2b:d8:7e:70:7c:e1:d1:bd:08:
e5:18:62:f1:3d:8a:c5:d6:83:9c:b8:6d:da:87:07:f6:5b:69:
d5:c1:61:75:66:d7:6c:82:7c:e6:1e:e6:d2:90:ab:f8:92:18:
66:4a:15:84:5f:29:ef:52:e3:d7:2a:0b:38:3c:f1:e1:90:8c:
f5:8e:88:d6:de:53:61:c3:3d:ff:af:73:e4:8e:7a:d4:5b:07:
6b:4e:9c:ba:cd:0e:98:28:1f:8e:ee:51:73:71:c3:c1:60:50:
0e:d3:41:8b:7f:72:5d:1d:05:a8:02:fb:fd:2a:a2:f5:14:f7:
ce:c1:5b:14:33:1c:f4:6f:05:b1:69:54:45:f8:9b:40:f4:4f:
16:e2:94:98:c9:e8:46:08:89:c1:00:87:8b:83:39:30:7f:8b:
51:65:c0:3a:c7:c8:22:1f:de:d0:0a:cf:a2:d6:62:4a:fe:42:
83:43:2b:32:84:ed:35:db:b9:b7:08:1a:a0:79:a7:50:39:53:
0e:d1:d0:a6:51:f1:6d:4c:32:bf:67:74:30:84:05:16:ba:09:
33:8a:04:11
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUih2uzNzhdCUmdRmk7k5HZfocKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMjQwODE1NTdaFw0yNzEwMjMwODIwNTdaMDMxMTAvBgNV
BAMTKDRCMzVFRTI5Q0NERUZBRTFCQzgyQjIyQ0RBRDBBMDc2MERDMjIwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+Nwi9WAQwEBKTh5Sjr+1D7vq
C5ZVHqpcQjiOkmQ919EdwhxblYjYQOIAAzRUMmvLTife9G5mGQ6tD6nq2zAgg1L+
myddlnRKyyHSUiI2iRwvyUZcOljn1XMXtL2+AoORqnGWYKnWtRusL4yzI8cAiYnh
QobaBHIdXGB6ZKx6x6WPCpFjOn7MRMbrK68km4PMtiM+wEE4u2PMOGB6OWXCF3j3
LlHQJ3UFpHU53MBOoMDIMaVa3kT8cw51hKmGldEhmvFYVsRzpp1gm0r3yZXt9yGA
8M45MHdcPR4R6Os49ocJUSdDxEjMxzKHtD4vr0MuScuT1ErOO+Na1Lcvu9D9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUSzXuKcze+uG8grIs2tCgdg3CIAwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk4ODA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3wW
MA0GCSqGSIb3DQEBCwUAA4IBAQBxGPAvF0rKt2f1VnEwYouBq2fbQap+48eWQxdf
k3JkofHsO5IsbvLewMIEPx8r2H5wfOHRvQjlGGLxPYrF1oOcuG3ahwf2W2nVwWF1
ZtdsgnzmHubSkKv4khhmShWEXynvUuPXKgs4PPHhkIz1jojW3lNhwz3/r3PkjnrU
WwdrTpy6zQ6YKB+O7lFzccPBYFAO00GLf3JdHQWoAvv9KqL1FPfOwVsUMxz0bwWx
aVRF+JtA9E8W4pSYyehGCInBAIeLgzkwf4tRZcA6x8giH97QCs+i1mJK/kKDQysy
hO0127m3CBqgeadQOVMO0dCmUfFtTDK/Z3QwhAUWugkzigQR
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:45 2026 by rpki-client