Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198402.roa
File: AS198402.roa (raw, json)
Hash identifier: V0IYaxyAQt0M3fdDCPJkyPwsH7cj5y/Tekjp8SF9+io=
Subject key identifier: 9F:03:44:B4:BE:35:C4:30:03:BB:A5:79:DE:0C:05:30:8D:26:B1:AF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D4B9C45FC9F6E03685C29EFD17DE7E285162AE3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198402.roa
Signing time: Sun 26 Apr 2026 14:25:36 +0000
ROA not before: Sun 26 Apr 2026 14:20:36 +0000
ROA not after: Sun 25 Apr 2027 14:25:36 +0000
asID: 198402
IP address blocks: 2a13:9500:16a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4b:9c:45:fc:9f:6e:03:68:5c:29:ef:d1:7d:e7:e2:85:16:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 26 14:20:36 2026 GMT
Not After : Apr 25 14:25:36 2027 GMT
Subject: CN=9F0344B4BE35C43003BBA579DE0C05308D26B1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:e2:2b:c8:ee:83:05:1b:9d:cd:de:bf:93:
74:01:b5:48:8e:7f:61:2a:3c:19:a3:5e:7a:a5:6e:
fd:7b:f6:d5:f4:cc:83:68:4e:6a:94:55:18:b9:1f:
9e:f2:0c:54:eb:a8:e0:3d:0b:f6:7b:5b:83:13:24:
0b:6a:b3:3b:9d:b4:70:d9:5a:9e:58:66:5f:54:09:
e3:b5:46:7b:68:2d:b3:84:7a:f1:00:51:1a:36:18:
4b:86:5e:27:c1:69:31:ae:19:24:24:36:70:37:59:
3d:1e:22:79:06:a7:e6:f4:6b:55:39:b5:4b:90:fa:
0c:7e:0f:ea:ad:3f:6a:0e:ca:8f:50:3d:fe:b9:d3:
41:ae:81:33:df:f2:cb:8c:1c:7d:c4:b3:ed:00:bb:
f3:56:64:70:8d:f1:2c:09:d6:cb:67:a2:f8:f0:7b:
37:d9:83:59:f4:ec:de:4b:e8:25:c3:12:d2:bd:d3:
af:6c:29:5b:fe:dc:95:c1:5e:90:58:85:29:d4:8b:
61:a8:bc:35:8c:88:c7:d4:e9:09:a4:a0:25:26:8b:
ee:70:4c:ed:6c:06:5b:dd:d1:78:fb:84:b7:d3:e4:
f0:10:fd:15:c1:d8:ca:4e:a2:31:ad:12:76:29:5c:
9a:a9:44:72:fd:ab:d4:5e:98:da:f6:5c:5e:5a:5e:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:44:B4:BE:35:C4:30:03:BB:A5:79:DE:0C:05:30:8D:26:B1:AF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:16a::/48
Signature Algorithm: sha256WithRSAEncryption
21:d8:89:97:c0:58:a6:d1:71:57:8c:dd:16:47:76:df:b2:a7:
fb:0d:3d:07:bc:f9:df:4f:97:dd:5d:d3:93:61:6e:1e:3a:2c:
9d:df:5b:5c:6e:8e:83:e1:a7:bf:90:8e:5a:3d:d9:b5:13:30:
22:60:43:14:c4:b0:a7:92:4d:45:27:1d:0c:24:90:c6:36:6f:
38:9e:2c:9d:e7:9c:12:b7:4e:60:7a:cc:50:00:d7:9a:2e:c9:
75:82:4a:17:73:32:10:83:ae:ad:e7:24:49:d3:52:a6:39:9c:
1d:1b:ee:ea:6e:69:62:32:a8:98:b4:41:d6:11:f6:27:65:0f:
fa:fb:47:39:3b:de:cb:a3:e2:08:c3:10:8e:00:3c:96:fc:86:
1a:da:b6:c1:19:19:cf:4f:92:0d:3f:d3:48:2e:9c:fe:a1:11:
e5:76:33:47:99:04:eb:06:41:c7:26:ca:19:20:ec:bf:c9:d7:
92:23:c4:27:2d:e8:5a:75:7c:c8:07:57:3a:77:d5:27:4a:e9:
83:0c:4c:0f:d9:70:02:cc:1a:5b:52:e9:29:15:12:73:98:db:
57:84:b7:f4:32:fd:5d:7b:e4:21:e6:61:d0:0e:3d:b6:d7:fe:
ba:a4:35:de:7e:9b:fa:f7:aa:f9:b0:4a:18:15:d9:99:22:c4:
59:a5:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:11 2026 by rpki-client