Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197795.roa
File: AS197795.roa (raw, json)
Hash identifier: KoqZRjsupvGJV1mNUE4styFzgM7dHCadQc/BV/IO3KY=
Subject key identifier: B9:E8:E6:05:12:BB:5B:01:E9:9E:18:A4:9D:C7:BE:97:57:CD:BA:06
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4796F5EBBEE40934DA1B5926BC03F62F7C6CF51B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197795.roa
Signing time: Fri 16 Oct 2026 21:49:37 +0000
ROA not before: Fri 16 Oct 2026 21:44:37 +0000
ROA not after: Fri 15 Oct 2027 21:49:37 +0000
asID: 197795
IP address blocks: 82.38.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:96:f5:eb:be:e4:09:34:da:1b:59:26:bc:03:f6:2f:7c:6c:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 16 21:44:37 2026 GMT
Not After : Oct 15 21:49:37 2027 GMT
Subject: CN=B9E8E60512BB5B01E99E18A49DC7BE9757CDBA06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:41:ab:c2:63:05:ab:3d:68:2d:ca:bf:c8:
00:1f:05:1a:ba:a6:3c:f9:aa:c4:a3:a5:b0:49:89:
92:d1:90:48:ae:f9:49:af:dd:1a:3a:b1:06:25:cb:
05:1a:c7:96:a1:ab:c0:3f:4f:64:bf:0c:f7:66:e5:
a7:a4:bf:7f:83:5f:18:9f:47:2f:3a:98:d6:83:b1:
4a:01:52:0d:43:30:05:62:5a:87:b8:a6:bc:da:e8:
95:64:a8:d3:f2:b6:63:04:6b:44:a7:c5:1b:c7:bd:
d9:d3:6f:a7:a2:e7:0f:24:e3:af:eb:38:b2:0d:fc:
82:ff:16:15:7d:5a:88:c1:6a:8e:2c:64:72:e7:62:
e5:d0:a0:8b:98:18:75:70:e1:dc:61:5b:da:d5:24:
7b:b4:55:2a:78:42:c8:90:41:7a:32:51:5b:3a:fe:
86:a8:1f:26:ca:ca:ca:0b:50:d3:76:8e:d2:73:a7:
78:f2:18:0c:6b:4e:33:83:64:4c:9b:2a:87:e3:5c:
0d:53:31:5a:77:46:45:61:44:53:bc:43:2e:42:a4:
2a:ba:57:69:3a:92:10:d6:5a:00:be:0b:c7:7c:06:
86:c0:2a:07:d1:00:e9:ad:93:f6:e6:03:4d:6a:4d:
55:d6:48:2b:13:f4:0a:a8:81:42:5e:e9:10:09:b1:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:E6:05:12:BB:5B:01:E9:9E:18:A4:9D:C7:BE:97:57:CD:BA:06
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197795.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.8.0/24
Signature Algorithm: sha256WithRSAEncryption
27:30:b1:37:1b:0f:50:79:78:11:d3:9e:7d:eb:51:c4:12:7c:
82:a8:8c:89:61:92:d6:75:5c:aa:b7:1d:ab:85:29:29:96:64:
42:3e:92:84:c5:92:42:67:4b:5d:ad:18:77:b4:94:ad:0d:57:
99:b8:cd:2d:81:f4:fe:f9:55:88:3a:9d:35:8d:06:6e:a9:f1:
0a:ea:17:02:a5:82:ca:cb:b2:3c:c6:44:ad:88:b0:cc:ca:70:
b8:2d:7d:fc:f8:4d:32:68:bf:71:12:f9:14:0d:bb:f8:05:c8:
8d:ac:95:c8:4d:6a:05:6a:ac:e7:cd:3a:ca:e6:c5:cf:b4:a1:
bf:c5:d3:17:26:82:3d:43:f1:15:67:52:4e:a3:a0:9b:c3:ed:
85:a5:f1:63:1a:87:f0:c6:88:7c:a8:5b:1e:3c:7d:d8:4b:bc:
f2:9b:7c:ce:8b:d0:04:bd:74:07:ff:40:91:2b:0a:8a:6b:2f:
f5:6d:48:63:26:26:4a:88:7b:43:f0:e1:f5:3d:7a:35:8b:cc:
2a:a8:df:dc:27:f4:f0:97:71:f1:c0:58:4b:fa:4d:e4:27:da:
31:11:4a:f9:5a:1d:0b:9b:ef:ef:e1:53:e6:e6:ee:92:c9:9b:
73:21:3f:a0:88:42:22:b8:b5:e7:b0:94:0f:1a:0a:6b:48:19:
41:5b:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:12:17 2026 by rpki-client