Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198510.roa
File: AS198510.roa (raw, json)
Hash identifier: fp5yPof4npbi1v2X4VBHkpdmH9WNRwpAMiynFiMaU64=
Subject key identifier: 89:96:21:D9:61:98:52:3E:B2:6E:4A:70:5A:89:13:B3:B8:0E:32:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 60C419E7051F061B52FC7E3097BE27D6AD7AFB5C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198510.roa
Signing time: Sun 22 Mar 2026 08:26:53 +0000
ROA not before: Sun 22 Mar 2026 08:21:53 +0000
ROA not after: Sun 21 Mar 2027 08:26:53 +0000
asID: 198510
IP address blocks: 167.148.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c4:19:e7:05:1f:06:1b:52:fc:7e:30:97:be:27:d6:ad:7a:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 22 08:21:53 2026 GMT
Not After : Mar 21 08:26:53 2027 GMT
Subject: CN=899621D96198523EB26E4A705A8913B3B80E3228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:7c:a2:bf:61:da:b0:40:c9:f8:2f:92:89:
c5:59:60:61:91:39:a4:2f:f1:d7:71:af:59:fe:a7:
43:a0:27:18:a7:39:df:b1:a4:8d:f6:0a:8b:ee:95:
07:a5:66:23:01:9c:d5:96:b2:96:47:f6:0e:f4:d8:
72:80:49:78:d0:03:fc:2a:20:90:16:c2:1f:cd:07:
99:cf:b1:e5:c1:60:4e:34:e3:b0:46:0e:7a:70:94:
ab:48:93:f0:ea:15:f5:e4:8c:26:0d:36:21:d3:87:
54:9e:00:11:17:e1:a6:3e:53:df:e5:0b:d5:58:91:
dc:4a:8f:47:c7:da:b1:7e:44:03:04:88:3f:f0:bf:
6b:29:c4:c5:f4:94:c2:4a:c9:ec:4c:66:70:eb:98:
17:a8:89:52:56:f1:03:0c:d6:1c:07:ec:f7:a8:97:
4b:25:93:bb:33:cb:b5:f2:d3:e2:ac:f2:e5:49:85:
0a:be:1b:10:ff:68:8e:79:2b:3a:27:b1:85:3b:07:
32:19:cf:56:05:bc:23:49:ae:fb:91:53:2e:47:e3:
e9:3e:dc:e9:91:f1:5f:43:27:4d:e7:61:c5:9a:5d:
b6:6b:a0:0e:fd:7b:bc:42:1e:e6:c9:91:35:71:15:
12:6a:5f:17:60:e4:4c:36:b4:2c:9a:72:1f:23:b7:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:21:D9:61:98:52:3E:B2:6E:4A:70:5A:89:13:B3:B8:0E:32:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:71:66:87:87:d0:08:26:ac:a4:d5:c8:02:86:e0:35:00:5f:
b9:c6:3b:7d:3f:d5:9e:50:f2:cc:a1:9f:f5:d8:7b:82:e3:38:
50:b5:eb:f8:60:42:6a:4a:df:78:2b:97:a2:8c:78:32:2e:31:
7b:cc:9e:2d:13:32:e1:c0:be:f4:e9:f2:37:83:39:44:3f:9e:
de:62:b2:91:ec:96:dd:8b:c4:49:cc:64:fe:e5:00:1b:42:43:
da:6d:bd:59:88:ff:12:db:a0:e5:98:4f:48:ce:3a:a9:fd:ef:
ef:bf:bf:f5:a5:61:d4:78:c7:cb:bc:a2:84:05:a8:51:98:ba:
0f:d3:93:21:fc:96:e2:b3:00:fd:6a:8f:30:9f:6e:fa:da:0c:
bc:6e:d8:08:7e:00:8b:4a:bd:d8:e6:f8:c4:de:6a:f5:54:89:
44:c5:aa:c4:f9:1e:f6:1f:21:3c:7d:6c:da:ab:16:7d:92:6d:
1b:e7:38:a5:16:18:60:ca:a6:a5:82:e6:1d:d5:9e:03:1a:e2:
b8:22:49:aa:2c:49:36:ae:80:0e:dd:cf:d0:0d:78:6f:a2:e8:
44:61:7f:47:ff:61:64:e6:ff:b9:22:d3:08:bf:8d:9a:bf:1b:
dc:1e:bb:6c:7d:43:fa:d6:59:22:b8:bb:2a:63:ee:85:d8:93:
66:51:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:14:21 2026 by rpki-client