Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
File: AS198590.roa (raw, json)
Hash identifier: VcK0MQXXEBLsyx8a1NTZZT8e1EK38luzP0r50yFHWCc=
Subject key identifier: F4:11:8D:E4:33:6A:5D:BD:AC:B8:6D:15:AC:07:EF:2E:FC:82:25:2A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 06C8B34A64F38979ACB9CB052BC0942DDC1A800B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
Signing time: Mon 13 Jul 2026 19:30:20 +0000
ROA not before: Mon 13 Jul 2026 19:25:20 +0000
ROA not after: Mon 12 Jul 2027 19:30:20 +0000
asID: 198590
IP address blocks: 2a14:7580:5200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c8:b3:4a:64:f3:89:79:ac:b9:cb:05:2b:c0:94:2d:dc:1a:80:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 13 19:25:20 2026 GMT
Not After : Jul 12 19:30:20 2027 GMT
Subject: CN=F4118DE4336A5DBDACB86D15AC07EF2EFC82252A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:8c:ee:45:63:62:7d:23:f8:8f:c1:ab:b8:
99:a3:65:2a:f0:c1:9f:e2:b6:bd:a2:9f:e7:e2:2b:
c5:59:a1:75:5f:fd:30:e4:0b:92:1e:9c:86:ed:30:
16:4b:5e:af:87:7b:86:2e:4c:69:a4:e7:d1:40:5d:
fe:2a:d1:f8:46:77:b2:e0:c7:b9:10:b2:39:85:32:
5f:e0:48:b8:8f:41:a0:0f:9f:72:19:63:d8:00:08:
2e:a2:5e:a4:93:b5:dc:72:fe:1a:a8:72:d9:71:53:
ae:06:94:00:fa:a7:16:0e:48:5f:5d:55:2f:3e:a5:
8c:42:51:90:d2:dd:ed:da:2b:70:9c:52:5f:5a:d5:
b8:75:e1:75:4b:d3:12:7c:f1:9b:0b:90:6c:5e:1c:
5b:55:0c:2a:1a:a7:77:9e:e8:b2:58:f2:95:2a:83:
13:21:f0:7d:c6:2d:2f:7f:5e:85:03:ce:03:ae:03:
21:9f:44:f6:c1:32:4b:40:bc:4a:ef:7c:3a:9f:75:
34:90:08:2e:e8:0c:a9:14:f7:94:95:29:0a:c5:6b:
15:d7:04:d0:24:30:8c:f8:42:f2:46:31:41:64:73:
c9:6d:38:79:11:55:ed:e2:40:9a:08:05:50:a5:4a:
86:1d:74:23:62:da:e7:97:f9:a3:43:2d:28:b1:f4:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:8D:E4:33:6A:5D:BD:AC:B8:6D:15:AC:07:EF:2E:FC:82:25:2A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5200::/40
Signature Algorithm: sha256WithRSAEncryption
6d:89:8c:7a:ec:9a:1e:f3:e1:eb:89:e5:b1:c1:0d:2d:e9:66:
a7:cd:e9:a2:e0:4c:2d:ae:84:da:1f:43:35:d0:18:6d:a9:78:
9b:89:3c:6f:ab:c3:4c:d2:da:6e:1d:18:a6:9e:0a:19:3e:87:
4f:52:a4:66:eb:9d:96:39:91:e7:8b:7b:27:0b:49:8d:77:1a:
6a:a0:93:09:d3:76:e9:bb:83:d6:c6:7f:3b:81:e5:dc:ef:96:
3b:5c:41:36:8f:10:48:9e:67:3a:0a:fb:2c:a9:ff:70:b1:e5:
4d:99:f6:1f:f4:0e:30:a4:85:a0:5c:95:fa:d6:6d:bb:a4:41:
9d:12:c5:c6:52:25:17:9d:20:16:ef:54:cf:89:bb:0c:92:3d:
a3:0e:e3:bf:18:5c:cb:c3:1f:78:24:f1:28:15:e6:e8:4d:6c:
a7:fc:94:6a:8f:35:de:1a:5f:db:5a:b0:cc:9c:e1:8f:e7:46:
2a:c3:62:63:8c:b4:ac:44:19:52:af:ed:1d:05:19:07:75:2c:
2b:d3:ab:e3:62:4c:36:0c:00:ab:c6:94:59:f1:ce:50:9c:36:
01:3f:60:6a:45:e6:7b:c9:06:f4:96:75:b3:90:9c:3a:83:4a:
c8:66:4b:2d:b0:21:61:fc:b1:53:98:7f:8e:c0:48:2f:04:fa:
7d:bb:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:00:31 2026 by rpki-client