Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: UeZwfku32SS2L7HkuTROrTLGVrHi3Xwu4Q/wEOq0ceM=
Subject key identifier: 97:12:E3:14:55:8C:44:62:20:C7:B9:E9:D5:9C:FE:15:C9:20:EA:92
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 32D1A283E0BD8DA00DB38B219581412E3039E340
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
Signing time: Tue 12 May 2026 14:34:59 +0000
ROA not before: Tue 12 May 2026 14:29:59 +0000
ROA not after: Tue 11 May 2027 14:34:59 +0000
asID: 198250
IP address blocks: 46.202.14.0/24 maxlen: 24
46.202.41.0/24 maxlen: 24
46.203.38.0/24 maxlen: 24
46.203.78.0/24 maxlen: 24
92.112.20.0/24 maxlen: 24
92.112.21.0/24 maxlen: 24
178.94.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d1:a2:83:e0:bd:8d:a0:0d:b3:8b:21:95:81:41:2e:30:39:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 12 14:29:59 2026 GMT
Not After : May 11 14:34:59 2027 GMT
Subject: CN=9712E314558C446220C7B9E9D59CFE15C920EA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:17:83:82:3d:1e:83:0b:70:47:93:20:de:
96:17:f8:d2:8f:f6:1f:05:1e:f5:d3:b4:f9:cd:59:
7c:a1:ba:45:e5:ba:4f:7c:4e:8b:1e:f2:7f:81:1a:
d1:af:ba:70:e7:2a:47:32:a1:c8:96:c9:e3:33:58:
88:0b:e1:45:cf:86:b2:f5:87:07:70:55:05:bd:e3:
1e:51:ae:39:e5:68:07:f8:8b:07:f4:0a:0f:49:2d:
73:30:60:23:a5:07:c6:88:10:a3:db:65:26:bc:35:
b6:27:48:12:12:e2:4f:fd:75:da:e7:96:c2:77:cb:
1b:6f:08:e0:80:ae:53:4f:78:72:46:c4:c4:d7:d2:
b7:1e:19:c1:88:aa:04:99:6e:47:09:dd:aa:4a:39:
54:85:3a:e2:84:fe:9d:c0:a6:8a:47:ae:c6:70:47:
bd:88:9d:20:ec:d2:f1:33:5b:4e:ac:ca:e9:8d:4b:
ff:55:2b:7a:90:a5:24:be:8b:ca:d7:76:39:e4:4a:
b0:c3:b9:01:b8:70:d5:a5:75:d4:b3:dc:90:f8:df:
bf:d4:74:ff:01:21:b2:13:81:e1:7d:c1:cd:ac:e9:
4e:56:7b:1e:50:31:f6:0c:a8:72:10:64:f9:4f:4b:
8e:fa:0e:d2:a8:0b:72:e7:a3:5b:cd:78:47:d2:6b:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:E3:14:55:8C:44:62:20:C7:B9:E9:D5:9C:FE:15:C9:20:EA:92
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.14.0/24
46.202.41.0/24
46.203.38.0/24
46.203.78.0/24
92.112.20.0/23
178.94.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8b:fc:61:b7:49:91:2f:2a:e9:74:24:ab:ae:a0:1f:e9:f8:
80:8a:bf:ed:aa:86:89:f7:e5:91:b3:c6:ea:b6:6f:3b:b0:9d:
91:8a:02:df:4d:b1:57:d5:6a:30:3f:57:7c:d2:d7:2c:b3:d9:
8e:ad:ba:ce:10:9b:72:2b:96:6e:65:c8:0c:4e:c9:0d:9a:87:
55:fa:99:11:18:6b:71:6a:33:0e:50:3f:f9:81:79:d6:c5:9d:
1d:42:4c:f7:83:99:b6:17:1a:14:9b:49:cb:b0:c7:78:b1:27:
29:9a:87:ee:18:76:9f:d6:1b:90:48:76:30:1b:66:68:e1:f7:
bd:b4:c1:9b:49:80:e5:80:1e:c8:2f:05:fc:65:ac:bd:51:ba:
2a:50:32:9a:cd:a1:63:82:d8:41:a4:ed:12:e8:b3:6d:fd:81:
87:62:ad:37:0b:04:61:28:85:e9:bc:58:3e:5c:71:50:f0:53:
14:e3:8c:c0:91:8c:e9:91:77:5a:c4:ef:cd:5c:2a:d1:91:44:
25:95:f6:e7:cf:48:10:9b:ff:df:e0:61:a6:c8:65:5d:83:f5:
71:2b:a5:c9:4f:31:8c:c5:9a:94:5f:b1:07:6d:58:e9:53:e7:
61:00:43:6c:ff:34:f7:ae:0e:b5:a4:c6:3d:0e:be:17:2a:dd:
3f:4a:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:51 2026 by rpki-client