Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
File: AS198487.roa (raw, json)
Hash identifier: HScFZ+NAPq3PRmJPR6bj5X32+L0DwfapKCoKHrqlopc=
Subject key identifier: 7B:FD:61:F5:94:1C:63:D5:2F:D0:FB:D2:2E:57:0F:E8:A3:C0:57:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2E8E4404961D26DF699032BF5C761E67EF212577
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
Signing time: Sun 05 Jul 2026 12:38:36 +0000
ROA not before: Sun 05 Jul 2026 12:33:36 +0000
ROA not after: Sun 04 Jul 2027 12:38:36 +0000
asID: 198487
IP address blocks: 155.117.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8e:44:04:96:1d:26:df:69:90:32:bf:5c:76:1e:67:ef:21:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 5 12:33:36 2026 GMT
Not After : Jul 4 12:38:36 2027 GMT
Subject: CN=7BFD61F5941C63D52FD0FBD22E570FE8A3C05777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:f1:30:d6:e4:eb:a3:12:f1:97:a0:10:33:
ad:7d:f8:5a:4e:2b:7f:99:9c:ef:a3:f2:fd:2e:f7:
83:d4:96:76:b4:a7:91:ac:bc:8e:56:27:5f:d4:94:
1b:e6:db:2c:e3:f3:4c:7e:fb:54:32:5b:dc:fa:1a:
16:30:4b:51:e2:b0:9a:eb:b9:00:52:b6:97:c0:dc:
b6:c1:ea:e5:03:5d:b2:cf:3a:95:2f:b7:64:4e:4f:
18:8f:3d:49:f2:ed:6e:f2:ed:fa:b3:6a:ba:e9:78:
f1:b4:5c:10:cc:32:80:7c:01:87:a6:da:03:45:cb:
7d:9d:ec:c6:d1:a1:f5:6c:0e:14:cd:d6:da:92:9c:
84:b9:51:ef:6b:69:c8:89:bc:6e:16:c3:d0:6d:83:
7c:33:92:91:a9:62:21:dc:4f:a4:35:45:a4:a5:96:
d6:f2:b9:61:3c:14:49:72:cf:22:88:d1:0b:07:07:
65:30:d8:b3:be:23:cf:2a:71:46:29:6d:89:56:4a:
f2:08:8a:d0:fc:f9:cb:79:be:28:82:41:78:4b:a3:
4f:e3:a1:5b:58:22:55:d5:95:a2:15:23:c9:e2:d6:
de:e6:79:c0:18:74:1a:ac:3e:6c:25:ca:3d:5c:d4:
93:78:1f:83:6c:7c:a4:70:44:ad:64:07:71:5e:4f:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:61:F5:94:1C:63:D5:2F:D0:FB:D2:2E:57:0F:E8:A3:C0:57:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c3:8a:10:7e:fd:82:cb:a0:99:3e:bd:b0:4b:db:87:c4:a5:
86:94:fd:42:59:61:0e:11:28:bd:6e:1a:e9:76:fd:1d:74:8a:
13:e0:4c:06:8c:97:f4:b4:70:33:d9:b0:d2:be:b4:56:9e:69:
f2:e2:05:6e:78:9c:44:ee:7b:fc:28:0b:e0:35:ff:4a:2d:e5:
83:1f:a2:91:b4:91:6e:7a:ee:f2:7d:a3:39:f1:23:c9:35:05:
12:67:d6:25:64:c3:26:ff:e7:93:eb:ca:76:88:8b:e3:a3:d8:
39:e2:5a:b5:25:34:42:06:89:02:95:68:12:65:d5:64:d6:d2:
51:17:21:7f:88:7d:76:3c:18:45:05:29:8f:78:2e:1c:92:c7:
92:e1:42:73:6a:03:8f:46:80:c6:f2:09:24:71:f3:ea:13:cc:
15:f4:f1:72:3b:9d:28:dd:7f:9b:97:b3:af:42:e1:f0:ff:77:
a6:4c:96:2c:09:e7:3d:de:4d:55:b0:b2:78:b1:07:52:cc:b1:
88:4a:91:7d:33:e1:94:2b:7b:d7:aa:61:1d:05:3a:a0:87:e1:
3c:ea:7a:61:93:8a:cb:7f:60:07:fa:60:3b:2e:86:26:7b:90:
8a:9a:27:09:07:72:a1:11:d1:95:7a:57:4c:a9:2d:4b:3e:bb:
c5:43:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:31 2026 by rpki-client