Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198831.roa
File: AS198831.roa (raw, json)
Hash identifier: Nm23/a78KPvpqsHkp9f9MObb2b+OskZpWMPSa5Iw1Ho=
Subject key identifier: 4F:66:25:14:EB:14:39:1F:9F:A1:B5:91:05:FA:D5:42:A1:D8:05:04
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B9D1072676064259E0DED6505F5850A1DFB5ED5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198831.roa
Signing time: Sun 12 Jul 2026 18:49:10 +0000
ROA not before: Sun 12 Jul 2026 18:44:10 +0000
ROA not after: Sun 11 Jul 2027 18:49:10 +0000
asID: 198831
IP address blocks: 82.24.183.0/24 maxlen: 24
2a13:9500:c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:9d:10:72:67:60:64:25:9e:0d:ed:65:05:f5:85:0a:1d:fb:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 12 18:44:10 2026 GMT
Not After : Jul 11 18:49:10 2027 GMT
Subject: CN=4F662514EB14391F9FA1B59105FAD542A1D80504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:96:da:02:d4:d1:31:02:f6:e6:a1:1a:58:
5e:bd:19:45:40:e2:9f:f2:4d:cf:aa:73:d0:70:37:
cc:f7:94:12:60:0a:0e:9e:f9:27:c6:aa:58:17:29:
2a:da:5a:0a:b2:d1:b5:90:c1:97:da:20:4b:13:1e:
84:2c:0e:fd:81:27:57:cd:88:e6:c4:75:ad:9d:a3:
78:91:5f:ee:5f:ed:82:de:63:d1:d0:d1:51:91:20:
11:16:d7:9d:99:68:47:96:99:d9:d4:a2:c0:93:cf:
dc:90:50:4c:1d:05:b7:f2:23:4e:a3:52:3a:15:4c:
72:41:32:d1:36:60:be:4e:d2:9d:48:be:c3:23:7c:
c1:0b:bd:99:e2:48:6d:d7:e6:6e:43:01:00:cc:23:
a2:ed:98:d4:dd:dd:42:2c:18:fd:1d:e6:d3:1a:6a:
92:73:31:e7:21:e7:8f:98:9b:b9:b7:bd:1e:76:e5:
d9:43:2c:41:14:f8:f1:14:d8:46:e0:43:a4:72:73:
72:e5:ea:08:ca:bc:eb:a5:cf:9b:12:80:25:6d:cf:
c1:5b:7d:49:5c:e4:c1:b4:e1:04:d9:35:07:60:b6:
61:f4:28:ce:7f:2b:36:d8:e3:9c:e6:e1:e9:a3:7c:
f9:4e:14:87:2d:07:1b:b3:2b:b3:fb:47:ad:e6:e1:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:25:14:EB:14:39:1F:9F:A1:B5:91:05:FA:D5:42:A1:D8:05:04
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.183.0/24
IPv6:
2a13:9500:c4::/48
Signature Algorithm: sha256WithRSAEncryption
8f:54:a5:e2:bc:f7:ed:f2:4f:e0:c2:c9:25:3b:9b:ae:38:61:
3a:51:9d:b5:42:7c:30:46:00:a3:90:d6:e1:59:67:db:6a:5a:
9b:99:c6:7d:b3:16:5c:8b:a0:39:1f:f7:09:2d:cc:a8:ca:8d:
22:0a:fd:9d:f4:a0:20:da:e3:4f:81:79:07:de:3b:12:a0:b8:
f2:5c:be:d3:31:05:da:23:19:a6:4d:83:a9:98:c2:9b:5b:ec:
dc:2d:4f:d7:75:80:2f:14:c5:38:4d:99:ed:99:b7:6c:0e:3d:
e3:b4:e3:81:18:e4:c4:2e:fb:20:83:7e:0f:6c:fa:86:cf:89:
74:89:77:76:8e:5b:ed:a1:4d:01:f0:46:56:05:aa:1d:e8:83:
de:17:1b:11:4d:5c:80:be:67:ab:b9:42:a2:0d:41:3b:9a:36:
b0:a1:a6:14:a4:8d:b6:84:37:00:e6:14:6b:c4:50:09:46:d2:
fb:0f:22:d5:a7:39:6d:cc:da:a7:a2:03:7d:e9:24:ce:4a:5f:
e4:4d:02:4c:1f:e6:59:75:c3:e4:7a:98:2f:a5:f7:88:db:2a:
22:9c:e1:e4:76:3b:09:2e:d2:e4:26:ee:01:d3:a7:38:98:24:
5b:97:e6:55:21:16:c5:b2:41:2a:bf:8f:f7:bf:95:17:89:af:
7c:a6:44:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:38 2026 by rpki-client