Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198566.roa
File: AS198566.roa (raw, json)
Hash identifier: 4v9WwI1S/Y76aFF3vRunnfRCAMrT9GI7H7KifPKv2rQ=
Subject key identifier: 6E:AA:75:A1:9C:0E:0F:68:97:A3:77:D3:0A:68:A0:66:8F:7A:F9:CB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0C84DF437E434733D9E9DA0C0BAC5D5BA99E9804
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198566.roa
Signing time: Sun 08 Nov 2026 14:12:28 +0000
ROA not before: Sun 08 Nov 2026 14:07:28 +0000
ROA not after: Sun 07 Nov 2027 14:12:28 +0000
asID: 198566
IP address blocks: 5.181.135.0/24 maxlen: 24
5.182.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:84:df:43:7e:43:47:33:d9:e9:da:0c:0b:ac:5d:5b:a9:9e:98:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 8 14:07:28 2026 GMT
Not After : Nov 7 14:12:28 2027 GMT
Subject: CN=6EAA75A19C0E0F6897A377D30A68A0668F7AF9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:b2:1d:fc:04:09:9a:0d:2d:99:f6:6e:11:
f5:f3:bc:89:0f:62:2c:19:2f:67:7d:be:b3:16:20:
ec:02:fd:ee:b1:b3:7c:e2:83:7c:a2:f1:ba:be:dd:
97:68:18:a7:0e:96:e8:83:6c:6f:8e:47:95:de:68:
a7:12:75:c0:bf:64:84:3e:eb:be:68:23:24:0c:6d:
19:1e:f0:35:bd:c6:8b:37:c9:8d:7e:89:f4:04:8d:
5d:2a:83:b0:16:b0:4c:c6:07:56:2c:4c:be:c5:cd:
5b:4d:1b:15:24:f1:b6:02:ab:49:86:c8:c9:d2:e9:
fb:71:4e:a2:49:c9:37:fe:78:b8:b2:05:d5:8c:42:
16:b3:ea:e8:75:ad:6e:ed:6e:18:0f:01:cf:d4:6c:
39:3e:be:dd:79:30:5a:b0:46:5e:3a:ff:5f:63:4a:
f5:99:5b:e9:0d:99:9e:16:03:18:47:15:7c:92:a0:
c1:3a:ec:64:e0:c5:26:09:72:3e:da:a1:0a:86:5a:
a0:6f:4f:6d:71:3d:ff:64:c8:97:c4:4a:31:7e:21:
d4:de:a8:d0:8f:54:38:b9:87:4c:57:92:a3:bc:7d:
65:ce:cd:06:4b:ec:17:28:bb:83:b8:59:49:d0:4b:
be:e5:42:fc:e7:b1:4c:8e:69:6d:c5:e5:54:3d:12:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:75:A1:9C:0E:0F:68:97:A3:77:D3:0A:68:A0:66:8F:7A:F9:CB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.135.0/24
5.182.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:17:9f:50:75:1c:97:4a:0c:8d:f8:04:80:f7:5e:e5:d3:64:
1d:18:7b:60:9a:9f:99:a8:9f:53:42:dd:ac:2b:b7:f1:2c:df:
c7:42:29:76:4c:2c:28:38:d2:e0:1e:8a:18:c2:ea:1f:36:e5:
75:38:d3:64:b3:62:1d:ab:35:65:21:20:b1:f5:a4:41:7b:f0:
97:bb:aa:4f:e4:d0:e9:d4:a0:cb:88:bd:f5:3c:fb:60:f3:54:
5d:bf:a7:70:fe:f5:5b:70:76:d7:32:9b:8a:a6:cf:6b:fe:db:
be:5a:3b:72:4a:2c:02:34:8b:e5:6e:00:cd:75:4b:f9:7e:33:
61:c6:43:37:96:a1:9a:e5:81:aa:e8:d0:d6:d1:f2:50:1d:0e:
45:88:80:88:08:9b:e2:6c:95:d0:22:8a:84:d9:9b:3d:b2:5d:
2c:f0:88:54:27:48:7b:bd:a2:e2:ba:92:04:2e:d0:9e:0f:32:
6a:31:7a:f1:a4:1a:b6:3a:c7:a7:4d:ec:a4:93:2b:8b:ec:ec:
d3:10:5e:19:0b:8b:ba:3e:d6:06:4a:0c:b3:cf:f2:0e:53:d6:
4e:db:9e:0c:85:1c:da:03:11:27:2a:69:a1:eb:be:67:b5:48:
02:83:5c:5b:3a:34:92:b6:1f:72:3c:20:c1:12:1f:97:57:60:
50:77:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:28:34 2026 by rpki-client