Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198690.roa
File: AS198690.roa (raw, json)
Hash identifier: /ig3+DddgZ+odQIdOjIg2WyEeQA5oioJDLQ65yM3xsg=
Subject key identifier: 86:B8:0F:7C:84:18:CA:F5:56:0D:AF:B4:45:AF:21:D5:DD:DA:F8:A9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B074B0A3F445E13EF8BF970A0F87532050E43BA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198690.roa
Signing time: Wed 18 Mar 2026 10:07:01 +0000
ROA not before: Wed 18 Mar 2026 10:02:01 +0000
ROA not after: Wed 17 Mar 2027 10:07:01 +0000
asID: 198690
IP address blocks: 82.41.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:07:4b:0a:3f:44:5e:13:ef:8b:f9:70:a0:f8:75:32:05:0e:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 18 10:02:01 2026 GMT
Not After : Mar 17 10:07:01 2027 GMT
Subject: CN=86B80F7C8418CAF5560DAFB445AF21D5DDDAF8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:13:58:1a:7e:db:61:93:f0:6d:c4:62:5f:
34:58:0a:c7:19:a3:70:28:90:a2:f0:a8:64:e0:b6:
8c:02:4c:4e:ef:19:47:ab:3e:25:22:fe:35:ee:52:
1a:fe:d7:c7:87:1b:04:d0:29:ab:42:0c:78:2b:c2:
95:66:a7:a6:65:3c:7a:fc:c8:ed:2a:2c:9c:92:48:
71:5b:09:66:8c:a3:b3:4b:35:57:50:46:ae:76:46:
09:81:5a:0b:71:59:d0:b5:68:2f:e6:2a:fd:72:a8:
56:7a:eb:88:39:13:2e:ce:5a:57:c4:89:6c:39:33:
4c:26:ad:a3:60:67:39:71:20:53:6f:0b:86:5f:b5:
97:e0:46:f6:9f:40:92:a3:d0:3d:0b:02:10:be:23:
e6:79:ec:41:8d:a4:7e:8a:01:ea:3c:47:39:cb:8c:
56:ee:0a:5b:8e:69:b5:58:96:de:28:62:4c:a4:2d:
de:06:f1:bf:f2:dc:85:f8:40:1e:88:84:80:d3:a2:
e7:30:e2:6e:ba:20:79:e9:a4:3b:1c:8a:d6:a2:c2:
cb:bf:00:21:8b:2a:73:82:8e:ef:9a:14:49:c5:3f:
ba:70:bb:b0:d7:47:94:8f:2d:70:3c:f4:61:ca:c9:
ea:65:ea:36:60:d9:77:76:0b:36:f5:0e:8b:dc:89:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B8:0F:7C:84:18:CA:F5:56:0D:AF:B4:45:AF:21:D5:DD:DA:F8:A9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.65.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8e:0d:ff:00:8e:80:93:1b:29:99:74:59:05:98:ca:2a:47:
22:69:87:0e:e2:6e:db:20:92:3c:af:cd:64:7c:dc:28:55:d2:
5f:1a:f2:64:eb:ed:21:bc:9a:c0:92:e7:20:7d:e0:ef:fc:d2:
17:4a:3d:f5:79:81:b2:fc:62:d3:95:29:66:78:e3:b2:77:85:
b3:23:e6:43:2a:01:7d:c5:ac:a3:ed:8d:fd:9c:10:ef:a7:b2:
ad:be:5d:af:54:26:1b:31:07:84:9d:6c:eb:e5:78:0f:0b:c3:
9c:bf:0b:6c:89:2c:e5:79:ef:f8:77:d9:50:ad:94:8d:a1:d4:
e6:62:93:05:57:43:b8:fd:fb:83:44:69:90:da:bf:58:2e:9b:
27:bf:b1:cf:0c:88:dd:6d:c4:c9:a7:9c:ae:80:c1:6e:41:7c:
b1:1c:f1:66:7d:57:75:ca:54:6e:2b:fc:3e:30:8e:e8:3b:19:
0d:a6:6b:b9:8b:52:da:3f:fc:d9:a4:26:ab:9e:39:38:7b:d4:
17:0a:0c:dd:04:25:ec:3e:a2:bb:85:93:6f:38:30:ea:d5:8f:
4c:55:8f:05:62:42:7b:fd:a7:c4:37:e1:76:26:67:3b:0f:65:
39:46:c2:7c:c9:67:cc:bf:49:5d:c8:2c:ce:b5:69:c3:0f:19:
f9:56:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:40 2026 by rpki-client