Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: anI8w7lQunEV5u1f+T34AnkAC34JBg03RZH+ZRbShBA=
Subject key identifier: F8:ED:84:CF:2D:46:FD:DD:39:B9:DD:0E:94:82:D0:82:FA:2E:39:1F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 128560AE97CCFBDA2261EA98DE454D549DB1079E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198250.roa
Signing time: Tue 12 May 2026 01:14:09 +0000
ROA not before: Tue 12 May 2026 01:09:09 +0000
ROA not after: Tue 11 May 2027 01:14:09 +0000
asID: 198250
IP address blocks: 82.47.12.0/24 maxlen: 24
84.75.137.0/24 maxlen: 24
178.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:85:60:ae:97:cc:fb:da:22:61:ea:98:de:45:4d:54:9d:b1:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 12 01:09:09 2026 GMT
Not After : May 11 01:14:09 2027 GMT
Subject: CN=F8ED84CF2D46FDDD39B9DD0E9482D082FA2E391F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3c:e7:ad:d9:1f:06:06:12:bd:96:ed:ec:d7:
39:63:55:4e:08:1c:2b:41:0d:e2:93:e6:b3:b7:ac:
76:50:ca:9c:2a:ce:b6:9e:0e:20:3f:e1:a9:bc:cb:
4f:68:75:10:d9:9e:ac:07:5e:48:b1:a7:8f:ee:94:
22:29:42:b8:fe:32:ed:6a:4b:64:96:2c:f9:b8:1a:
1c:bb:d0:a0:8a:27:df:3b:e6:eb:43:81:bf:00:4b:
04:4a:aa:59:9a:1a:3e:70:d9:44:81:8d:6b:e9:39:
74:ea:49:b5:3f:36:4c:66:60:a0:75:04:b8:81:3b:
56:b7:0e:5b:a4:3c:a1:06:19:3a:e8:75:81:92:78:
09:4b:d1:5d:63:93:78:20:7f:7c:71:65:28:d8:97:
d1:eb:01:12:25:03:3d:31:97:10:ce:5e:1f:30:5a:
3d:cf:50:65:56:1b:b3:49:98:09:1f:9c:78:76:74:
48:f9:d2:3e:83:19:4c:15:b5:b5:df:e7:95:39:1c:
e8:dc:a0:95:c1:99:fd:a9:c1:d1:80:c8:58:79:07:
8b:dd:c0:9f:45:b9:53:85:52:6f:0b:c7:5f:37:84:
de:91:5a:0c:9b:83:ab:06:6b:6a:0a:c4:07:d6:84:
e1:1d:54:72:c8:c7:9a:68:89:44:c2:88:68:f3:f0:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:84:CF:2D:46:FD:DD:39:B9:DD:0E:94:82:D0:82:FA:2E:39:1F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.12.0/24
84.75.137.0/24
178.83.103.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0b:42:e4:fa:25:18:ec:0b:df:41:38:dc:59:aa:51:68:6f:
dd:ba:64:55:81:08:0a:e0:37:f4:37:34:2e:e2:ae:fa:8c:d2:
61:7a:0d:53:65:43:7d:07:5c:24:fa:24:5f:5c:f9:0e:e0:ef:
28:74:9f:c7:b1:1c:1e:cf:db:e4:6d:dc:8c:e0:45:8a:19:e7:
ab:de:b4:a9:ef:88:7c:d3:07:6f:8d:9d:89:d7:85:2e:05:3b:
4b:cc:92:fc:2c:ee:c0:d9:65:3f:fa:2d:66:96:fd:55:a9:26:
c9:d7:af:b7:ed:69:7c:43:4c:23:5c:6a:6b:fc:22:2f:e6:64:
d8:fc:bf:9a:9e:be:69:cf:0f:21:e8:53:88:99:a2:11:b6:af:
2d:d7:81:38:0d:29:78:52:b0:a2:6f:07:c0:0e:df:c7:b2:63:
26:fd:b6:8d:1b:f8:e9:83:ae:08:f9:32:59:3a:d3:61:a9:f2:
84:73:5f:89:2d:22:43:3f:95:84:c5:f4:ca:bf:7e:32:91:8e:
b0:27:21:33:c0:f6:da:5a:f5:ea:72:fc:27:12:3e:a5:0d:cb:
99:21:71:87:a1:a4:7b:14:79:06:5c:ae:bc:e2:c9:da:49:06:
d4:c8:e1:77:2d:3b:a0:70:45:3c:16:b4:2c:5a:4b:fd:92:61:
ac:74:5f:20
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUEoVgrpfM+9oiYeqY3kVNVJ2xB54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MTIwMTA5MDlaFw0yNzA1MTEwMTE0MDlaMDMxMTAvBgNV
BAMTKEY4RUQ4NENGMkQ0NkZEREQzOUI5REQwRTk0ODJEMDgyRkEyRTM5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7POet2R8GBhK9lu3s1zljVU4I
HCtBDeKT5rO3rHZQypwqzraeDiA/4am8y09odRDZnqwHXkixp4/ulCIpQrj+Mu1q
S2SWLPm4Ghy70KCKJ9875utDgb8ASwRKqlmaGj5w2USBjWvpOXTqSbU/NkxmYKB1
BLiBO1a3DlukPKEGGTrodYGSeAlL0V1jk3ggf3xxZSjYl9HrARIlAz0xlxDOXh8w
Wj3PUGVWG7NJmAkfnHh2dEj50j6DGUwVtbXf55U5HOjcoJXBmf2pwdGAyFh5B4vd
wJ9FuVOFUm8Lx183hN6RWgybg6sGa2oKxAfWhOEdVHLIx5poiUTCiGjz8DdJAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU+O2Ezy1G/d05ud0OlILQgvouOR8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk4MjUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUi8M
AwQAVEuJAwQAslNnMA0GCSqGSIb3DQEBCwUAA4IBAQCBC0Lk+iUY7AvfQTjcWapR
aG/dumRVgQgK4Df0NzQu4q76jNJheg1TZUN9B1wk+iRfXPkO4O8odJ/HsRwez9vk
bdyM4EWKGeer3rSp74h80wdvjZ2J14UuBTtLzJL8LO7A2WU/+i1mlv1VqSbJ16+3
7Wl8Q0wjXGpr/CIv5mTY/L+anr5pzw8h6FOImaIRtq8t14E4DSl4UrCibwfADt/H
smMm/baNG/jpg64I+TJZOtNhqfKEc1+JLSJDP5WExfTKv34ykY6wJyEzwPbaWvXq
cvwnEj6lDcuZIXGHoaR7FHkGXK684snaSQbUyOF3LTugcEU8FrQsWkv9kmGsdF8g
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:57 2026 by rpki-client