Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198969.roa
File: AS198969.roa (raw, json)
Hash identifier: bMZHJX8rEeV5pL2XG/UfMrMCpkMD2IWRckZCDHSQR+M=
Subject key identifier: 58:3E:C5:83:99:CB:DF:53:48:F5:C6:66:3F:6A:03:9E:2B:32:E5:34
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2DD5FABB872C2BAE62203FFF0D8FC278EC8FC425
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198969.roa
Signing time: Mon 26 Oct 2026 15:02:53 +0000
ROA not before: Mon 26 Oct 2026 14:57:53 +0000
ROA not after: Mon 25 Oct 2027 15:02:53 +0000
asID: 198969
IP address blocks: 94.118.47.0/24 maxlen: 24
94.118.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d5:fa:bb:87:2c:2b:ae:62:20:3f:ff:0d:8f:c2:78:ec:8f:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 26 14:57:53 2026 GMT
Not After : Oct 25 15:02:53 2027 GMT
Subject: CN=583EC58399CBDF5348F5C6663F6A039E2B32E534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:46:0a:b4:34:e5:a8:43:10:78:04:3a:6b:
fa:37:ed:50:39:23:78:24:68:4a:01:f0:0d:35:96:
7f:5b:ba:0b:63:80:8e:98:4e:ba:4c:ae:50:aa:aa:
9c:58:1f:96:18:dd:fe:ec:6f:4f:d5:13:8c:86:50:
ff:94:bd:3c:ac:30:d5:a0:1c:05:3b:08:a7:ca:c8:
40:8c:f1:bf:b8:fb:5f:c3:e8:64:18:50:23:33:60:
a5:e8:b6:c9:2d:d2:e6:85:99:2a:cb:fa:01:ba:17:
17:22:4f:bc:80:bc:40:61:05:a3:46:38:e0:f5:cf:
a6:51:da:f3:8d:63:8d:5f:ba:b5:6a:03:a2:e8:ca:
76:8c:82:73:47:54:2b:73:ec:c7:3b:9d:21:37:2e:
8c:c8:f9:76:21:df:d1:11:51:78:c4:df:17:cd:b9:
5e:90:7e:f4:d0:e1:78:29:ca:23:8b:53:3a:20:40:
e7:9b:0e:25:72:49:18:0a:dc:bf:94:7b:63:5b:14:
9f:58:62:c9:a2:08:ab:63:c7:71:21:8a:ed:ff:c6:
61:14:43:f2:61:d9:dc:08:ef:d5:ae:b8:97:48:ea:
4b:c7:23:eb:01:70:b5:5a:b7:01:5e:0c:5b:70:08:
6f:9f:04:cd:97:ad:4c:7c:71:15:42:4d:aa:dc:74:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:C5:83:99:CB:DF:53:48:F5:C6:66:3F:6A:03:9E:2B:32:E5:34
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.47.0/24
94.118.103.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e9:b7:22:0a:bd:5f:43:81:0e:68:65:b5:0c:7e:a7:26:59:
e5:b3:7d:e6:91:a8:6f:09:bd:52:20:b9:1b:db:b4:eb:7a:24:
67:72:e6:38:87:b3:13:9f:65:df:c1:02:ef:d1:77:b8:72:a4:
4a:6b:fa:6e:93:ae:f9:af:03:d9:1d:e6:7f:03:9e:3e:05:1e:
84:b3:e7:3a:76:9d:77:b6:9e:13:92:ef:80:0a:ac:82:b8:56:
13:80:0e:7c:92:fa:fc:2e:23:49:82:f6:bf:21:17:d9:8d:65:
32:14:43:c4:c4:a5:cb:25:8a:e4:89:94:11:d4:3c:5c:2d:a1:
21:02:b2:08:d4:19:50:cd:15:96:d2:c5:9c:b1:7b:d0:c4:80:
29:3a:cd:9f:ba:47:93:97:3f:5e:1e:8a:72:fc:ef:1a:7e:7a:
4f:4a:cf:5f:e7:09:48:28:aa:28:ec:a0:d3:8e:df:e4:d3:b2:
e0:c9:45:8a:f2:b1:c4:ad:8b:3f:6c:4c:78:2e:ff:0a:01:4b:
02:f1:fc:5d:85:76:e6:a4:f6:91:92:c0:f2:a7:28:9f:3d:39:
8c:4a:ab:46:50:9c:09:b7:74:68:86:a8:c3:98:67:bb:c1:9e:
52:6f:cf:92:2f:69:2d:fd:fe:41:06:02:96:4c:a8:1c:2e:66:
09:81:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 16:58:47 2026 by rpki-client