Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198057.roa
File: AS198057.roa (raw, json)
Hash identifier: 4rwMCuzaHCTcgsayHdhzElhhQ0BtDs2FS/LQmjzK5rc=
Subject key identifier: 3F:B1:D4:69:7F:9F:B2:50:E4:22:6D:BE:4D:40:D2:76:1E:36:A6:25
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1EBA02CF9C1A644287C70201B2C6E9E611DFCBE4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198057.roa
Signing time: Mon 20 Apr 2026 09:47:05 +0000
ROA not before: Mon 20 Apr 2026 09:42:05 +0000
ROA not after: Mon 19 Apr 2027 09:47:05 +0000
asID: 198057
IP address blocks: 2a13:9500:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ba:02:cf:9c:1a:64:42:87:c7:02:01:b2:c6:e9:e6:11:df:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 20 09:42:05 2026 GMT
Not After : Apr 19 09:47:05 2027 GMT
Subject: CN=3FB1D4697F9FB250E4226DBE4D40D2761E36A625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:89:7b:bd:7c:d3:ee:02:f2:f1:4c:e9:67:
3c:b2:94:6c:d2:ff:77:18:9f:ad:29:09:ad:d2:10:
a6:a5:d3:2f:23:df:bb:7d:26:fa:d8:7f:fe:46:2a:
2a:9f:92:94:bc:2e:d6:c1:5a:88:6d:c4:c0:31:1a:
4d:a5:8c:55:c7:60:82:d2:f0:78:05:49:df:5c:92:
c3:a5:ee:44:f7:2d:98:b2:8a:31:9d:17:40:5e:29:
03:71:15:e4:aa:94:f8:de:ea:12:a4:38:13:1d:fa:
a1:49:3a:ec:4d:82:84:a0:2d:e5:73:49:1c:4c:b7:
e3:5d:db:84:04:4b:e4:f3:dc:c1:49:ad:d7:d9:dc:
ec:a3:34:1b:cf:0b:a8:0a:20:ab:13:2c:64:c2:ca:
ba:e3:10:99:71:e7:68:69:3e:c1:40:81:8d:15:d7:
fc:3a:4d:9a:aa:dd:62:92:08:18:65:4f:37:98:55:
26:cc:c8:e8:20:88:94:7c:30:ed:a9:5c:68:e5:f4:
8b:d9:a3:59:41:cf:b4:c1:d2:39:4c:ef:16:1b:2f:
6e:7a:3c:d7:e3:f0:8e:c0:3e:df:71:73:53:28:c9:
db:8f:23:01:49:ac:12:58:b6:90:57:b3:1f:d7:1a:
1f:72:9d:6a:7a:9c:7c:38:dc:19:0a:f3:c2:43:09:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:D4:69:7F:9F:B2:50:E4:22:6D:BE:4D:40:D2:76:1E:36:A6:25
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:51::/48
Signature Algorithm: sha256WithRSAEncryption
81:24:26:e2:18:01:20:16:f4:24:3a:92:e1:3f:be:75:13:82:
b8:51:03:70:b0:f4:73:4d:86:77:67:d7:62:f5:6f:4e:b2:fe:
97:c9:fd:38:74:21:47:c0:26:0f:40:64:9b:82:95:3f:a4:56:
c6:eb:00:ef:c4:cf:81:e2:93:16:a1:d8:88:6b:dd:ea:29:9b:
1a:d8:e4:cb:0b:40:71:21:24:b8:3d:6c:b1:8d:37:65:64:b0:
a1:93:ca:20:26:9d:66:15:94:1a:d9:40:f7:fc:e1:d8:f6:93:
7c:aa:5b:ac:61:24:81:46:92:07:1c:e7:cb:84:b9:ed:47:33:
b8:51:1c:ae:b7:45:8a:26:07:42:cd:4b:9b:bb:c9:38:3f:71:
f3:07:5b:39:c0:5a:11:02:f9:21:a4:97:1b:90:38:05:73:2c:
9e:34:eb:84:b7:78:02:16:b5:3f:0d:53:d4:b1:09:ef:d0:96:
12:70:24:22:b1:ca:22:d5:85:4e:82:9f:d9:f4:a9:7d:ac:16:
18:74:18:d9:e4:e9:a2:e8:68:71:93:72:35:9e:79:b8:ea:c2:
0b:e9:84:9e:65:44:ed:39:f5:27:b2:24:a6:15:26:d5:84:a1:
6f:59:57:97:65:9b:e5:8b:4d:94:d8:67:5d:50:33:85:5f:f0:
d8:7b:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:01 2026 by rpki-client