Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198584.roa
File: AS198584.roa (raw, json)
Hash identifier: N3tBafHnEh1u8kR/XYEfc44+AVOWBhm+bWuBTNaNGVU=
Subject key identifier: 91:E5:98:31:0C:06:2C:AC:AB:61:F4:17:09:3F:28:67:4A:C0:22:DB
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7837F24F25985EF3AF889AD6434A49DBF86E9CD7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198584.roa
Signing time: Sat 14 Nov 2026 11:52:04 +0000
ROA not before: Sat 14 Nov 2026 11:47:04 +0000
ROA not after: Sat 13 Nov 2027 11:52:04 +0000
asID: 198584
IP address blocks: 94.118.7.0/24 maxlen: 24
94.118.71.0/24 maxlen: 24
94.118.90.0/24 maxlen: 24
94.118.211.0/24 maxlen: 24
94.118.213.0/24 maxlen: 24
94.118.219.0/24 maxlen: 24
94.118.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:37:f2:4f:25:98:5e:f3:af:88:9a:d6:43:4a:49:db:f8:6e:9c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 14 11:47:04 2026 GMT
Not After : Nov 13 11:52:04 2027 GMT
Subject: CN=91E598310C062CACAB61F417093F28674AC022DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:bc:60:27:72:79:7d:cb:0c:94:12:9b:9f:
50:24:0f:b1:4d:25:38:66:65:0d:95:d9:05:3e:3c:
2e:8b:28:e6:04:73:ad:30:cc:44:72:90:6e:ed:48:
51:ec:d3:7e:c1:40:4d:41:e0:d9:ac:84:e8:a7:cb:
a3:66:46:5c:24:33:d4:08:18:4a:03:78:a0:10:85:
89:84:fe:be:f0:fc:5b:fd:df:0e:b6:f9:6d:b5:cf:
a6:d2:b2:ca:2b:54:5e:f4:4a:0f:f8:d4:a8:fc:de:
cc:03:28:a8:f2:03:b7:81:57:ae:52:d1:b2:5f:6f:
88:e6:34:2b:3a:8e:4a:69:a2:a2:33:bb:ff:8c:bd:
88:3b:62:8c:ed:61:da:8b:12:9b:55:8b:ba:28:2e:
1e:4c:40:38:d2:2b:4b:c3:90:d9:57:14:65:3f:39:
d7:b7:e8:c4:da:09:c9:59:fe:d8:a3:a7:63:ac:96:
8b:f2:06:cc:53:1d:30:09:ed:31:07:eb:e9:72:ad:
f6:8b:1e:60:4d:c2:5f:50:0d:6e:33:b9:04:41:f8:
dc:22:c0:ee:66:c4:ed:c1:f9:76:66:20:8b:25:a9:
f7:43:98:b4:54:3c:92:3d:f5:fe:2c:90:cc:51:dc:
42:c9:a4:57:2e:2a:4c:e5:b8:df:fd:e9:68:55:27:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:98:31:0C:06:2C:AC:AB:61:F4:17:09:3F:28:67:4A:C0:22:DB
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.7.0/24
94.118.71.0/24
94.118.90.0/24
94.118.211.0/24
94.118.213.0/24
94.118.219.0/24
94.118.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bb:72:02:3f:a7:5a:1d:7c:29:f1:a5:35:9c:f5:98:a1:41:
e2:f3:4f:32:35:80:21:ac:38:26:fb:d3:1a:b0:86:12:7b:ae:
ef:d3:cf:d2:50:5c:e8:77:32:a3:8a:46:4c:7e:d7:ae:e0:3c:
99:e0:6e:ce:d4:dd:d5:f5:d4:f4:4e:c6:fb:47:3a:81:a8:a3:
39:5a:48:50:bd:40:f8:5f:12:6b:b5:b4:9f:72:63:bd:f2:28:
03:09:4e:5a:ba:7c:2b:89:ff:6e:48:6e:3b:cb:bd:64:ab:8b:
61:8d:05:58:f1:1f:33:62:4c:38:de:2c:a7:79:2c:75:82:fe:
6b:46:a0:f7:e0:03:75:fe:6d:a1:08:be:ce:b8:6e:f4:af:1f:
b8:d7:34:14:10:42:a1:58:a8:0a:53:85:d8:a3:56:5f:ff:cd:
95:d1:0c:bd:35:29:04:ed:c7:ff:0a:71:fc:48:7f:ac:73:6d:
ed:80:00:b5:d9:d0:40:41:3e:ca:24:6b:54:51:e8:42:f6:a4:
3d:d2:a0:3e:e5:b4:3b:28:30:da:01:af:44:16:55:68:4c:53:
d0:99:ff:ed:2a:f5:aa:c5:84:39:45:78:4d:3b:5a:39:5a:05:
e7:f7:cb:06:85:2f:fb:4c:4a:df:54:46:72:1c:d1:d8:79:fe:
0f:7a:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:00:44 2026 by rpki-client