Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
File: AS198624.roa (raw, json)
Hash identifier: pRTF8vz9e9XN01XqJIVIXLEx9QG+RbZ2/UTL4+G0TOU=
Subject key identifier: 56:D3:A8:33:36:43:AE:92:59:91:9B:26:D6:90:AE:B9:71:56:A2:49
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 075D04FE95F8B160D567550542D9064A6C0D59F1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
Signing time: Wed 22 Apr 2026 06:07:19 +0000
ROA not before: Wed 22 Apr 2026 06:02:19 +0000
ROA not after: Wed 21 Apr 2027 06:07:19 +0000
asID: 198624
IP address blocks: 2a14:7583:ea00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5d:04:fe:95:f8:b1:60:d5:67:55:05:42:d9:06:4a:6c:0d:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 22 06:02:19 2026 GMT
Not After : Apr 21 06:07:19 2027 GMT
Subject: CN=56D3A8333643AE9259919B26D690AEB97156A249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:6c:76:7b:4d:2c:8c:39:4f:a7:70:ab:f7:
96:2c:8e:c0:0a:7f:54:04:c5:12:85:42:a7:cc:db:
3e:9f:e0:80:5d:de:6d:2f:b1:22:83:82:12:2e:01:
42:75:4d:98:76:36:ea:4f:9d:be:c9:67:bd:8b:f3:
30:79:cb:70:4d:ce:bb:33:f1:f2:28:c4:2a:36:05:
fd:78:e2:16:6b:ba:93:f8:76:0b:75:64:7d:28:63:
74:17:50:a4:b9:03:59:c7:82:0d:dd:a3:23:46:72:
6c:cd:10:8f:8e:f3:c6:05:be:a4:db:02:8f:9c:a4:
43:24:8e:62:7d:4e:05:57:57:40:c2:65:c3:d7:2d:
97:ca:61:5d:45:33:11:94:d1:96:dc:59:20:ca:28:
cb:73:00:bb:65:d9:7a:40:a1:9e:5e:91:2b:a9:ea:
99:cd:c7:56:3e:72:88:53:90:be:e5:4a:48:93:ef:
a3:80:88:20:d6:43:31:e3:7d:f1:2a:46:04:a6:80:
57:df:99:2c:51:8a:19:c1:08:33:b5:ca:10:88:aa:
68:15:42:b4:14:3f:ec:60:67:5b:92:92:cb:93:df:
e7:44:19:0c:1b:86:c9:cc:c4:d3:56:4a:93:53:c2:
eb:ea:15:42:c1:53:97:f5:3d:20:6d:4b:46:bd:a8:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:A8:33:36:43:AE:92:59:91:9B:26:D6:90:AE:B9:71:56:A2:49
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS198624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
8d:4e:1d:fa:de:6d:5f:93:59:03:b8:b6:e6:f6:34:ec:ee:bf:
5e:ee:60:22:f6:b0:ea:a1:bf:39:71:24:7e:77:71:dd:3b:d9:
64:b2:1e:d1:fe:6f:b1:67:08:b1:f2:12:e6:c8:00:67:c4:df:
54:79:4e:99:d2:76:04:f0:98:df:4f:4f:05:4d:29:0a:96:72:
d6:ae:d7:76:f1:cf:4c:99:6c:a9:a8:70:34:1f:d0:76:4f:c8:
46:c1:bf:31:32:29:3f:ee:11:90:99:57:92:23:b6:40:d3:f3:
26:ca:a0:6f:f7:4f:99:2a:86:89:21:4e:6d:76:aa:9c:c3:89:
e4:c9:1b:24:d3:18:14:7e:38:b9:b0:ee:0b:ff:69:29:bf:69:
7c:1a:de:1b:ef:d2:32:54:27:76:49:a4:88:5f:bb:96:bc:a1:
c2:47:19:1e:3c:ec:4f:f4:67:86:ca:af:b6:a1:2e:2d:32:df:
c6:9e:e8:74:af:62:6b:6f:f0:5e:72:71:ca:38:5c:5e:d2:e7:
2e:94:b9:00:a0:70:52:11:5d:7a:7e:79:26:b5:13:a0:30:98:
2b:bc:2c:d2:80:5f:76:db:47:58:50:33:06:d0:b9:8b:9f:3a:
01:4d:8f:c7:c5:e8:99:ba:3e:70:d5:ac:3e:93:9d:8e:48:f3:
f7:fa:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:57 2026 by rpki-client