Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198358.roa
File: AS198358.roa (raw, json)
Hash identifier: LuLXP015sTGkjdVdyKFWLFBsdjKmmBGydOXb3Wkrb6Q=
Subject key identifier: F5:AC:23:2C:F6:30:B5:FD:54:7A:18:36:16:8E:B3:B2:65:5B:A4:96
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3D996D2F1E1502285F4C8F080C8061DF1C230DD6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198358.roa
Signing time: Sat 02 May 2026 01:05:45 +0000
ROA not before: Sat 02 May 2026 01:00:45 +0000
ROA not after: Sat 01 May 2027 01:05:45 +0000
asID: 198358
IP address blocks: 2a14:7580:e900::/40 maxlen: 48
2a14:7580:ea00::/40 maxlen: 48
2a14:7583:eff2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:99:6d:2f:1e:15:02:28:5f:4c:8f:08:0c:80:61:df:1c:23:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 2 01:00:45 2026 GMT
Not After : May 1 01:05:45 2027 GMT
Subject: CN=F5AC232CF630B5FD547A1836168EB3B2655BA496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:a2:9b:36:d7:ae:09:6e:6d:1c:8c:ea:f7:
96:42:62:fe:db:25:53:59:08:8d:53:0b:8c:f9:f6:
fe:20:9e:3d:52:72:54:d1:d9:24:1f:ff:63:04:a0:
00:ea:9d:a7:cf:03:f2:7f:75:80:f5:42:7d:4f:9f:
47:4b:26:13:ad:18:fb:0d:2e:47:0e:bf:f6:9f:22:
e4:e0:0d:eb:1d:56:4f:73:ed:2f:e0:8c:7d:bb:51:
f7:1d:1a:33:d7:00:ba:25:5b:a5:9b:c9:59:17:e6:
74:3d:0c:32:28:e7:c7:f4:c4:6b:8d:a9:62:5a:05:
42:7d:9d:4c:a7:c2:8f:6f:55:87:53:ee:aa:d8:41:
94:f1:63:6e:a5:bf:5a:81:7b:9d:03:c7:1b:3d:28:
df:ff:ed:9e:bb:93:af:4a:1e:b1:63:a7:f3:49:01:
68:1e:4f:08:ca:89:11:f9:44:be:91:12:42:34:bd:
c8:90:65:b7:48:39:cb:fa:29:ad:6a:84:cb:4f:63:
04:78:57:0f:0b:46:dd:0e:99:c0:72:04:db:31:09:
ff:2a:df:04:b6:c0:66:ea:4b:d0:64:c0:49:ae:f6:
6b:c2:e4:60:50:d6:45:36:44:be:14:f5:a9:5f:c2:
d1:11:dc:15:29:dc:19:3a:7b:3a:5e:68:95:12:0c:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:23:2C:F6:30:B5:FD:54:7A:18:36:16:8E:B3:B2:65:5B:A4:96
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e900::-2a14:7580:eaff:ffff:ffff:ffff:ffff:ffff
2a14:7583:eff2::/48
Signature Algorithm: sha256WithRSAEncryption
44:8c:58:0e:4e:25:7a:cd:6e:f0:10:e8:98:58:72:70:b9:7a:
37:82:c4:26:df:f3:c7:a7:e8:85:26:11:72:92:60:22:af:98:
9b:37:00:62:3b:16:3b:d0:38:d9:45:fe:f0:9c:4d:37:20:27:
a7:42:84:b5:88:de:e4:23:46:ab:bf:d2:b9:58:6d:28:55:61:
ae:b3:c1:0a:52:8d:f3:c1:df:8a:98:76:88:bb:f9:4c:90:6c:
0a:91:64:06:fe:2a:b5:5d:7a:10:77:a2:cb:9d:d2:56:89:16:
54:56:9e:6f:43:39:52:23:94:95:ab:07:4d:66:1c:59:52:21:
c3:53:c1:b5:d2:a4:57:73:71:08:e7:a2:01:e2:bf:ab:40:ff:
4b:ff:46:94:4c:45:b4:f3:02:9c:04:e0:92:09:ff:42:af:52:
ac:30:04:f2:0d:ed:a9:65:5f:34:90:2c:d2:e3:ac:70:6a:2f:
ad:92:12:51:63:9e:0d:a2:bc:a3:0b:68:23:9f:56:37:2f:31:
77:23:22:4d:8e:bd:e6:f8:81:bb:e0:d5:d6:27:96:9a:a4:09:
c1:b4:d7:0e:13:1c:50:af:a9:2a:4e:59:a3:94:4a:f2:51:d3:
5b:38:7d:67:49:27:b0:d2:94:d7:64:16:17:ef:fd:dd:79:fd:
c3:51:30:e6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUPZltLx4VAihfTI8IDIBh3xwjDdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA1MDIwMTAwNDVaFw0yNzA1MDEwMTA1NDVaMDMxMTAvBgNV
BAMTKEY1QUMyMzJDRjYzMEI1RkQ1NDdBMTgzNjE2OEVCM0IyNjU1QkE0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyx6KbNteuCW5tHIzq95ZCYv7b
JVNZCI1TC4z59v4gnj1SclTR2SQf/2MEoADqnafPA/J/dYD1Qn1Pn0dLJhOtGPsN
LkcOv/afIuTgDesdVk9z7S/gjH27UfcdGjPXALolW6WbyVkX5nQ9DDIo58f0xGuN
qWJaBUJ9nUynwo9vVYdT7qrYQZTxY26lv1qBe50Dxxs9KN//7Z67k69KHrFjp/NJ
AWgeTwjKiRH5RL6REkI0vciQZbdIOcv6Ka1qhMtPYwR4Vw8LRt0OmcByBNsxCf8q
3wS2wGbqS9BkwEmu9mvC5GBQ1kU2RL4U9alfwtER3BUp3Bk6ezpeaJUSDARVAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQU9awjLPYwtf1Uehg2Fo6zsmVbpJYwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTk4MzU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbMBADBgAq
FHWA6QMGACoUdYDqAwcAKhR1g+/yMA0GCSqGSIb3DQEBCwUAA4IBAQBEjFgOTiV6
zW7wEOiYWHJwuXo3gsQm3/PHp+iFJhFykmAir5ibNwBiOxY70DjZRf7wnE03ICen
QoS1iN7kI0arv9K5WG0oVWGus8EKUo3zwd+KmHaIu/lMkGwKkWQG/iq1XXoQd6LL
ndJWiRZUVp5vQzlSI5SVqwdNZhxZUiHDU8G10qRXc3EI56IB4r+rQP9L/0aUTEW0
8wKcBOCSCf9Cr1KsMATyDe2pZV80kCzS46xwai+tkhJRY54NoryjC2gjn1Y3LzF3
IyJNjr3m+IG74NXWJ5aapAnBtNcOExxQr6kqTlmjlEryUdNbOH1nSSew0pTXZBYX
7/3def3DUTDm
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:56 2026 by rpki-client