Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: eEuQCRWLuWV8m/dz6nUi/KHTbIKBaIVdA3Q4kiqydXg=
Subject key identifier: 28:10:F8:0A:AB:BD:90:16:E2:DD:BE:D0:9C:29:6D:6C:2E:D4:8A:31
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 258FFC1F7EE93C24DFFAD05B683EE61D19005933
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa
Signing time: Tue 23 Jun 2026 08:00:42 +0000
ROA not before: Tue 23 Jun 2026 07:55:42 +0000
ROA not after: Tue 22 Jun 2027 08:00:42 +0000
asID: 197537
IP address blocks: 96.62.0.0/19 maxlen: 24
143.14.78.0/24 maxlen: 24
143.14.254.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8f:fc:1f:7e:e9:3c:24:df:fa:d0:5b:68:3e:e6:1d:19:00:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 23 07:55:42 2026 GMT
Not After : Jun 22 08:00:42 2027 GMT
Subject: CN=2810F80AABBD9016E2DDBED09C296D6C2ED48A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:c2:8b:8e:a4:9e:dd:11:8d:44:f8:c0:1b:
3b:79:db:fe:1c:9c:e7:e4:af:b8:89:79:4e:08:c3:
b0:91:06:18:56:f1:e3:10:75:c0:cf:f8:0e:9c:72:
2d:bb:6c:d9:75:bc:ed:21:36:0e:95:fd:cf:cd:ed:
68:ea:55:3c:86:83:3d:d2:32:f1:ca:e9:10:f7:75:
2b:51:bb:7e:b1:81:44:7d:ca:ff:7c:1c:b4:94:bc:
18:14:f8:00:0f:55:72:cf:c3:8e:68:87:ef:f7:b3:
11:cc:df:bb:9a:c6:4c:27:a7:0f:97:d4:99:85:d9:
75:16:57:af:89:51:75:43:1b:92:51:af:4d:22:05:
7e:69:45:93:e6:23:e9:48:36:0f:d6:b1:1f:7b:70:
4e:a1:a3:09:e7:73:fd:ad:f3:05:4a:b1:77:8d:8a:
85:aa:af:6a:28:e0:64:88:78:0d:e9:4a:96:f6:7a:
0a:57:e6:5f:e3:d7:ff:0c:2a:e8:77:01:25:40:4c:
18:87:f7:ee:2e:46:22:6c:30:3f:6a:2a:94:33:15:
fe:ea:36:9f:68:73:55:95:92:90:05:93:0a:b7:7b:
94:9b:49:a2:07:83:a0:ee:bf:80:8b:48:86:58:f6:
e1:26:be:88:2a:d9:b1:57:fa:06:4e:08:e5:33:44:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:F8:0A:AB:BD:90:16:E2:DD:BE:D0:9C:29:6D:6C:2E:D4:8A:31
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
143.14.78.0/24
143.14.254.0/24
162.141.13.0/24
Signature Algorithm: sha256WithRSAEncryption
05:77:e6:5b:d8:72:39:66:89:75:37:f1:14:06:40:7b:2e:9f:
2a:93:4c:5d:93:5b:e4:c2:da:a8:61:49:86:ae:72:fe:51:23:
80:4b:7a:1a:56:c1:07:e9:5b:45:d1:ff:99:48:b2:f6:8d:a3:
7b:89:96:b5:11:4c:c8:9e:7f:6f:fd:94:24:b3:e3:c0:6a:3d:
5a:28:ff:95:b5:39:03:49:8d:79:3b:d5:87:2e:17:86:7a:b1:
c8:b2:2b:81:d5:fc:3c:67:d9:74:80:a2:ce:1a:73:cc:1a:c4:
1e:a4:eb:3e:df:0a:50:60:bf:5a:bd:98:c4:5b:9e:be:6d:98:
a8:29:2e:66:8a:64:44:ec:cb:eb:20:e4:6f:84:d4:d2:b3:f1:
81:ca:32:af:1c:38:5e:0b:b5:96:95:c6:88:16:69:b9:8f:5c:
17:cb:57:98:70:0d:6e:a9:fe:3f:aa:c5:80:09:0e:19:a8:37:
5a:7e:3c:b3:7e:6d:7d:b9:39:0c:59:75:f9:7a:95:35:6f:20:
42:2e:a2:f6:22:da:ab:31:20:40:4f:67:48:83:1d:52:73:b3:
4d:a7:df:45:97:1a:ab:0a:ae:d7:41:d8:ea:38:bd:d3:54:58:
ef:8f:2a:c2:e9:27:03:51:53:56:c1:98:e4:69:53:41:9b:01:
3f:81:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:41 2026 by rpki-client