Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198079.roa
File: AS198079.roa (raw, json)
Hash identifier: LsXHhSaCZ/uMs6U4qm9tlIUZVaO5jGI2/VHY0owfTaM=
Subject key identifier: 24:47:B2:68:E6:28:5C:26:9A:2D:AE:5A:BE:8A:86:9D:82:DD:BA:89
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3ED8C6A8789860754224FC8D78DC7D30AE8887AD
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198079.roa
Signing time: Mon 04 May 2026 11:38:02 +0000
ROA not before: Mon 04 May 2026 11:33:02 +0000
ROA not after: Mon 03 May 2027 11:38:02 +0000
asID: 198079
IP address blocks: 2a14:7583:eff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d8:c6:a8:78:98:60:75:42:24:fc:8d:78:dc:7d:30:ae:88:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 4 11:33:02 2026 GMT
Not After : May 3 11:38:02 2027 GMT
Subject: CN=2447B268E6285C269A2DAE5ABE8A869D82DDBA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:79:a2:c9:1d:91:cb:e7:7a:5b:3e:81:63:
dd:39:36:f1:93:98:ea:1f:0a:82:21:fb:bd:d4:e6:
08:26:e3:c8:bf:fe:7c:90:6e:8d:7c:34:a3:88:46:
b0:71:92:82:3a:3a:6e:55:49:d6:7b:91:d9:3b:62:
ff:e1:d1:36:14:e1:a7:4e:bb:07:3c:06:58:1a:b6:
18:25:95:27:8c:64:7e:ca:65:b9:78:42:a4:82:89:
38:cb:20:99:ae:cf:7d:99:54:71:bf:e4:5f:eb:e9:
24:ec:4a:0c:5c:30:b0:0b:56:8a:53:cf:e5:3d:c1:
38:61:34:6c:0d:c5:55:90:2a:88:f7:ba:17:41:95:
b8:48:88:83:75:a5:a8:4b:8c:c1:7c:d3:70:a2:c5:
2f:4b:7a:09:12:c6:9d:15:2b:02:76:9c:80:ef:15:
fb:68:01:91:7d:77:7c:02:cf:26:e3:2a:ca:9a:55:
d4:81:b7:99:23:d3:b2:28:a3:ba:59:53:11:b4:ed:
cb:06:da:46:14:e7:05:33:46:1b:2c:51:51:4a:6e:
84:9e:ec:1c:f9:bb:28:f1:27:b4:5d:be:74:7b:66:
b8:c2:9b:94:c2:2e:85:0e:67:cc:3f:a1:21:5f:97:
d0:b0:2f:03:20:c0:c4:86:7e:1e:f6:e0:dc:52:0a:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:B2:68:E6:28:5C:26:9A:2D:AE:5A:BE:8A:86:9D:82:DD:BA:89
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:eff4::/48
Signature Algorithm: sha256WithRSAEncryption
7d:67:43:96:5a:92:a8:43:88:40:0a:18:90:52:22:2c:92:4b:
d2:3c:5f:6f:d7:ce:51:63:e6:26:c3:99:71:1a:c3:a6:47:49:
73:d4:92:8b:48:75:53:8a:66:57:81:d4:24:be:c1:87:0a:8d:
5a:a5:04:b9:4a:e9:72:f1:19:b5:7c:b6:90:1a:1f:11:90:2f:
e0:ab:f1:5f:7d:a9:a3:00:44:5a:8a:ae:24:13:6f:ab:71:68:
6a:1b:3b:f8:9e:98:9b:59:1c:bb:18:46:29:aa:66:f5:25:4a:
15:13:e2:b9:02:c0:40:3d:24:f0:96:99:3a:aa:e8:8f:a8:42:
9d:a3:9e:8e:d0:be:b9:d4:95:50:7b:c7:b3:35:b6:8e:29:6a:
4c:da:54:53:b1:29:e8:be:7b:d4:30:c0:d9:b7:52:86:44:0c:
5e:a4:5f:92:6e:0d:c7:f7:1e:bb:2e:95:b8:db:0f:ca:34:d4:
90:d5:ad:1a:70:73:9c:23:b9:04:ad:4c:9c:3f:e8:09:7d:ef:
33:b6:4f:6b:46:04:dd:ed:ee:22:ce:37:9c:50:61:ca:24:5b:
f2:f1:71:6a:8c:c3:a4:15:0e:c2:56:9e:28:1a:de:77:b3:0b:
f2:ef:94:b6:b1:b7:fb:22:2f:09:e6:fb:e2:7a:52:ef:c4:25:
53:71:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:44 2026 by rpki-client