Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
File: AS198590.roa (raw, json)
Hash identifier: vEljuLP7TsxU996+nAOmrR7Zpwa+XQaSkDEwS9HS2eQ=
Subject key identifier: D7:93:DF:44:B5:2C:2B:D1:EC:21:F3:AA:96:8B:45:1C:B1:80:98:0E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2F0EE14964D325EE77360741B11E77492C19F755
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
Signing time: Tue 28 Apr 2026 21:44:44 +0000
ROA not before: Tue 28 Apr 2026 21:39:44 +0000
ROA not after: Tue 27 Apr 2027 21:44:44 +0000
asID: 198590
IP address blocks: 2a14:7580:5100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0e:e1:49:64:d3:25:ee:77:36:07:41:b1:1e:77:49:2c:19:f7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 28 21:39:44 2026 GMT
Not After : Apr 27 21:44:44 2027 GMT
Subject: CN=D793DF44B52C2BD1EC21F3AA968B451CB180980E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:5a:a5:71:80:6e:57:93:0a:61:bc:3b:01:
e9:7f:77:1b:28:6a:41:ff:5f:b0:2c:a8:83:4a:1a:
e0:cb:1b:51:3a:dc:24:3a:12:be:af:4a:29:56:bc:
c1:85:f4:6d:63:13:68:69:cf:f6:2c:46:cf:90:fc:
40:1a:19:14:86:32:60:dd:6e:dd:56:12:3e:84:95:
b8:a6:b8:03:4a:de:fe:e9:b7:54:a6:0a:e2:ee:ea:
32:ad:91:38:86:cf:76:89:be:ad:7f:49:16:af:25:
c1:26:24:2b:2d:96:6a:8e:35:91:75:4e:69:d0:ed:
13:5b:82:3a:69:09:3d:58:8e:ee:7b:9b:b2:7e:79:
cd:ab:dc:57:fc:80:80:76:9b:4d:25:b6:cf:c6:4a:
7e:60:8b:55:b5:bd:d0:1a:69:12:d0:f9:dc:f4:b7:
09:c1:dd:ae:25:59:20:d4:90:ec:b4:42:05:3f:42:
49:e2:61:e6:e8:8a:f6:04:4e:4d:4c:1e:37:6e:21:
55:1d:bd:45:1b:90:d3:43:6e:f3:76:16:33:93:54:
3f:eb:21:9b:40:a7:7c:65:e0:73:d0:3c:c2:78:61:
63:8b:e9:bf:54:e1:e6:97:34:66:39:10:49:d2:1b:
14:d5:c1:20:a5:36:38:d1:09:70:47:74:8b:6a:ea:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:DF:44:B5:2C:2B:D1:EC:21:F3:AA:96:8B:45:1C:B1:80:98:0E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5100::/40
Signature Algorithm: sha256WithRSAEncryption
20:b5:c2:59:7d:b3:5a:fb:af:f8:aa:da:82:88:1c:97:3f:24:
e4:b6:45:9b:79:29:4f:78:2f:cc:4e:66:2b:6f:44:94:0a:a5:
35:74:24:56:68:59:ab:78:47:f0:64:87:35:68:cd:ad:72:b4:
3e:48:f8:ef:be:16:6e:df:35:52:ae:2b:3f:6a:89:9c:d2:e8:
f4:5f:7e:a1:05:4d:24:ca:16:50:a4:23:bf:27:2b:ee:7b:61:
1c:8a:43:c3:5d:fc:7f:a5:ad:25:03:82:35:0c:9c:7c:d6:dc:
b8:ca:b9:ba:11:a6:fa:1b:e8:3c:17:3d:37:65:23:6c:d1:9c:
96:9f:d0:b1:d6:c6:fa:47:fb:f0:c7:16:0b:4a:35:51:8e:e8:
14:13:22:4b:47:12:59:0b:ef:b3:22:c7:c2:ad:3f:31:61:53:
b4:d6:fa:27:c3:fd:fd:39:bf:61:27:d4:6f:4a:fb:fa:f7:00:
2b:f9:7f:d9:c8:e1:f9:91:8f:25:9b:e2:80:10:18:00:d9:ee:
3c:7b:b7:2a:c4:e4:57:22:ff:33:85:c6:fa:38:d0:67:fa:b7:
1d:0f:96:0f:6a:39:eb:22:ab:67:85:45:a3:6d:f3:1b:b8:a5:
cc:ef:23:01:e9:e7:cf:89:fb:f3:04:65:0d:3c:db:6a:91:c9:
8b:ca:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:56 2026 by rpki-client