Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198487.roa
File: AS198487.roa (raw, json)
Hash identifier: 2TR7KURBm2w1khu4dmIqinxDFLkdhfyNvNIQIi5z4xg=
Subject key identifier: 4B:C5:FB:B2:B4:AE:6F:F4:0B:35:A4:AA:D6:2C:CE:6F:13:BB:08:87
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 76405B4A4C9FCC61F6E32BFD000D04F8946A6800
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198487.roa
Signing time: Thu 07 May 2026 11:04:57 +0000
ROA not before: Thu 07 May 2026 10:59:57 +0000
ROA not after: Thu 06 May 2027 11:04:57 +0000
asID: 198487
IP address blocks: 95.134.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:40:5b:4a:4c:9f:cc:61:f6:e3:2b:fd:00:0d:04:f8:94:6a:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 7 10:59:57 2026 GMT
Not After : May 6 11:04:57 2027 GMT
Subject: CN=4BC5FBB2B4AE6FF40B35A4AAD62CCE6F13BB0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:f9:2b:b9:78:5b:b9:a1:c9:07:b5:cd:fe:
bd:48:88:80:ab:f2:71:5f:ed:90:2e:9a:24:21:93:
69:16:82:e9:af:b0:88:dd:3c:1a:40:98:eb:e1:9f:
81:41:ac:7a:e3:4e:c7:b1:cc:1f:ea:95:70:d5:62:
af:01:65:fb:10:fa:07:99:eb:45:8d:1b:6e:cb:48:
c6:4e:d7:82:73:f8:c5:b0:a8:c4:bf:19:e1:eb:52:
f3:27:de:e2:63:5f:25:96:d2:c4:1c:8c:01:58:07:
22:75:e1:28:b8:f9:e1:4f:4d:f0:39:6e:1f:0e:8e:
53:4f:5d:ff:f6:62:1c:ff:33:94:5a:99:22:7b:1c:
09:48:8b:93:35:b0:c8:47:03:72:13:07:9b:41:4a:
2c:23:16:ee:5b:68:18:50:e9:06:10:3c:96:34:37:
f5:dd:4e:65:4d:0e:3f:4f:7b:04:21:a3:9d:a7:4b:
9f:71:f9:ed:42:62:33:35:2e:f8:57:c7:c1:cf:dd:
4f:34:c3:82:8b:78:46:34:9d:dd:c8:6f:67:dc:ba:
95:1e:e6:56:e8:5f:3b:b0:e9:fe:29:42:fc:6a:68:
6e:17:70:44:8f:eb:04:28:ce:cf:7b:bd:6c:52:fd:
0e:12:78:f7:a0:63:17:2d:cc:d5:81:a4:86:36:07:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:FB:B2:B4:AE:6F:F4:0B:35:A4:AA:D6:2C:CE:6F:13:BB:08:87
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.31.0/24
Signature Algorithm: sha256WithRSAEncryption
46:57:3d:e2:d7:d2:4d:fb:2c:7e:79:7b:7e:d1:61:d3:51:b7:
99:90:bf:4b:4b:05:74:02:fb:8f:d3:31:de:86:7b:2b:ff:11:
a7:8a:eb:0c:d0:0d:ff:89:db:e3:b4:db:fd:78:4b:88:7d:85:
69:8d:14:72:d6:60:22:0a:bf:87:9e:92:be:f8:a8:45:d4:97:
94:e2:2b:1a:2e:0e:56:03:50:ae:f6:c2:ae:4a:a0:32:e2:73:
a8:b3:bf:f4:d7:90:65:d7:a4:de:45:1c:bd:7f:21:54:ff:4c:
36:89:d4:b1:87:d6:29:2a:3b:7c:f0:a2:f0:07:00:f7:04:0d:
ef:3d:e8:13:d2:84:9e:35:40:4b:3d:ab:4c:1a:b0:f1:e5:bb:
f6:45:e5:86:95:97:00:7e:20:d6:2a:26:0a:50:88:cc:59:4e:
ad:ec:4d:f5:43:31:5c:39:5f:1d:c9:d7:2a:8c:cb:ef:60:57:
10:a0:1a:b8:09:b2:fa:d0:73:96:fc:10:27:86:0c:99:3b:09:
66:f5:aa:27:f7:c8:62:6e:7e:f3:97:8a:6b:d2:5b:a6:85:69:
14:78:ca:cb:27:31:84:0e:70:ad:ec:26:01:5f:83:ce:1d:5d:
99:ae:3a:1d:27:e7:ce:36:47:b1:fb:7b:32:f2:20:9f:6f:92:
55:57:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:30 2026 by rpki-client