Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS198087.roa
File: AS198087.roa (raw, json)
Hash identifier: KbEXfW1iiD4QKlzNAeXhORdEp87UXgYYT+JBn+IB5Ak=
Subject key identifier: 29:91:41:2E:BF:88:6E:9A:EB:62:BD:37:0F:B1:08:EB:A4:16:A8:3D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4040AE75B483484145C559DF8C803231DA84B5BB
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS198087.roa
Signing time: Thu 26 Mar 2026 11:34:23 +0000
ROA not before: Thu 26 Mar 2026 11:29:23 +0000
ROA not after: Thu 25 Mar 2027 11:34:23 +0000
asID: 198087
IP address blocks: 147.125.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:40:ae:75:b4:83:48:41:45:c5:59:df:8c:80:32:31:da:84:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 26 11:29:23 2026 GMT
Not After : Mar 25 11:34:23 2027 GMT
Subject: CN=2991412EBF886E9AEB62BD370FB108EBA416A83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:34:37:dd:9f:32:1d:a2:17:a3:01:de:70:
5a:2c:ad:78:91:04:4a:b5:3f:76:95:af:24:8d:5f:
1b:31:a5:47:45:b6:9c:a8:b7:65:db:5d:6e:19:d8:
6a:13:be:f7:19:89:a0:14:2b:ab:b2:2a:e5:52:d2:
a7:f1:52:8d:54:2e:5d:da:c2:40:5b:ea:ad:f5:c5:
4a:00:90:1e:35:01:f2:06:6e:ea:9f:96:d5:fb:b3:
2d:9b:de:9a:a2:36:61:32:1a:83:f6:d2:2b:12:2d:
82:7c:14:af:2b:13:4b:78:66:4d:7c:c3:4d:00:06:
23:af:2e:8d:b9:3b:d1:2f:58:f0:1a:8b:ac:ce:4d:
0b:19:1d:bc:92:31:1c:60:30:f7:7e:cb:4b:b7:fc:
6c:f7:4a:b2:55:0b:ce:99:86:b0:4f:1c:83:ca:17:
51:ff:87:d8:ea:42:69:db:91:e7:a4:71:b3:27:d4:
03:2f:2d:3d:49:f3:2d:2b:13:3a:26:34:8b:ab:74:
03:e0:82:87:bc:1f:f4:f9:cf:41:ba:09:44:7c:9c:
57:e5:90:c8:c9:b1:ec:35:8e:66:7e:e4:ee:81:8d:
f0:46:c0:af:5d:4e:06:0c:37:e7:32:c9:db:ab:a5:
4d:14:3b:eb:3e:a4:df:1c:a6:1b:83:9d:d3:f7:f1:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:41:2E:BF:88:6E:9A:EB:62:BD:37:0F:B1:08:EB:A4:16:A8:3D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS198087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f8:33:b4:b2:e5:6a:9c:90:e1:8e:90:ef:04:8a:48:35:e4:
a3:39:34:33:d9:58:5a:ab:21:de:b1:38:00:cf:2c:52:d4:3a:
88:53:cf:bd:bb:05:dd:0a:36:71:fc:54:88:62:fd:0d:71:86:
ec:64:35:ce:f8:97:db:2e:53:f3:b5:bc:1c:05:63:11:3a:90:
07:6b:36:89:34:bd:9c:96:39:33:e0:ab:05:20:e3:1d:f4:f1:
d0:32:3c:31:a3:f8:8a:9e:8c:83:2c:ed:4a:f2:76:b8:2b:2d:
ce:9b:4d:59:9b:0e:d1:05:67:af:b7:07:f9:e3:6a:3a:ed:25:
64:87:7a:76:70:5e:db:41:65:5f:5d:03:a6:1a:ac:af:1f:23:
f5:81:09:75:e6:e2:1d:16:30:d5:c0:7e:12:de:99:17:fe:35:
bd:52:a9:07:a3:47:31:46:5a:6d:08:e4:46:30:19:8b:76:7b:
7b:23:8d:a8:0e:98:b3:33:cf:d5:32:c1:3f:f5:b4:8a:7f:1f:
2d:7a:c6:94:64:9a:69:8a:48:30:ba:0c:21:e7:9d:4e:c6:5a:
11:b2:9c:35:71:33:f6:b4:03:f5:c2:f7:40:cd:9f:38:77:1a:
e5:7b:5b:7d:61:e2:a0:3a:8a:19:8a:b1:63:8d:96:56:12:e6:
a8:b4:04:c9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQECudbSDSEFFxVnfjIAyMdqEtbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjAzMjYxMTI5MjNaFw0yNzAzMjUxMTM0MjNaMDMxMTAvBgNV
BAMTKDI5OTE0MTJFQkY4ODZFOUFFQjYyQkQzNzBGQjEwOEVCQTQxNkE4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wDQ33Z8yHaIXowHecFosrXiR
BEq1P3aVrySNXxsxpUdFtpyot2XbXW4Z2GoTvvcZiaAUK6uyKuVS0qfxUo1ULl3a
wkBb6q31xUoAkB41AfIGbuqfltX7sy2b3pqiNmEyGoP20isSLYJ8FK8rE0t4Zk18
w00ABiOvLo25O9EvWPAai6zOTQsZHbySMRxgMPd+y0u3/Gz3SrJVC86ZhrBPHIPK
F1H/h9jqQmnbkeekcbMn1AMvLT1J8y0rEzomNIurdAPggoe8H/T5z0G6CUR8nFfl
kMjJsew1jmZ+5O6BjfBGwK9dTgYMN+cyydurpU0UO+s+pN8cphuDndP38abPAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUKZFBLr+IbprrYr03D7EI66QWqD0wHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NjZDM4ODRhLWMzODUt
NGI2NS05ODY2LTRmNjM4MzE3MjY3Mi8wL0FTMTk4MDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk32I
MA0GCSqGSIb3DQEBCwUAA4IBAQBs+DO0suVqnJDhjpDvBIpINeSjOTQz2VhaqyHe
sTgAzyxS1DqIU8+9uwXdCjZx/FSIYv0NcYbsZDXO+JfbLlPztbwcBWMROpAHazaJ
NL2cljkz4KsFIOMd9PHQMjwxo/iKnoyDLO1K8na4Ky3Om01Zmw7RBWevtwf542o6
7SVkh3p2cF7bQWVfXQOmGqyvHyP1gQl15uIdFjDVwH4S3pkX/jW9UqkHo0cxRlpt
CORGMBmLdnt7I42oDpizM8/VMsE/9bSKfx8tesaUZJppikgwugwh551OxloRspw1
cTP2tAP1wvdAzZ84dxrle1t9YeKgOooZirFjjZZWEuaotATJ
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:50 2026 by rpki-client