Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197173.roa
File: AS197173.roa (raw, json)
Hash identifier: zxZmVYJiMMFX5YnqmtIlW638NE7BHs1ThUNJqOtZiRw=
Subject key identifier: 95:A3:7E:D8:54:5A:94:75:71:F2:F1:C1:75:21:5A:85:1D:D5:7A:2A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5F88DDF34C5C35F3CAD01BEAEF6EAB5E7F1A1672
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197173.roa
Signing time: Thu 09 Jul 2026 09:45:55 +0000
ROA not before: Thu 09 Jul 2026 09:40:55 +0000
ROA not after: Thu 08 Jul 2027 09:45:55 +0000
asID: 197173
IP address blocks: 148.135.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:88:dd:f3:4c:5c:35:f3:ca:d0:1b:ea:ef:6e:ab:5e:7f:1a:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 09:40:55 2026 GMT
Not After : Jul 8 09:45:55 2027 GMT
Subject: CN=95A37ED8545A947571F2F1C175215A851DD57A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:a6:58:d1:71:f7:dc:c1:03:b9:7f:d2:45:
53:a0:a5:0e:d4:46:98:bf:2d:b8:e2:81:22:db:2f:
96:f5:3c:d9:31:8d:b7:98:1f:29:08:54:5e:53:56:
6c:78:1f:a3:b3:2a:fe:d2:67:63:3a:61:a1:35:66:
58:1e:8b:64:84:eb:70:8e:0f:fd:89:5a:4a:75:c0:
27:f1:a3:79:ed:cd:03:ea:2f:29:09:fd:45:67:d5:
d5:c9:ee:e1:a6:36:33:11:fb:a5:02:e9:b0:ed:a6:
6b:90:ef:9c:1e:c9:08:cb:4a:52:5f:63:bf:02:df:
b4:73:34:96:32:b8:a0:70:6f:56:1e:e7:23:f7:bd:
85:37:9c:e4:50:2a:6d:d2:ae:98:03:f3:bb:32:b8:
e7:07:f0:48:44:86:b3:73:2b:7f:57:aa:ef:41:21:
a9:97:87:5c:c3:aa:c1:9c:83:71:85:43:f4:11:f0:
55:d0:06:5f:88:62:07:2c:55:9b:00:cc:42:ce:39:
e1:70:e1:79:24:b8:fa:36:9b:b1:fa:9d:a4:35:c8:
0b:a4:1d:bc:8d:00:47:9b:2c:d4:3f:f4:72:fc:a1:
53:71:ed:dd:2a:11:e2:ee:00:ac:4a:d5:bb:c4:88:
da:3c:be:dd:5b:6f:6a:1d:38:c4:e6:0a:f7:5f:37:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:7E:D8:54:5A:94:75:71:F2:F1:C1:75:21:5A:85:1D:D5:7A:2A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.187.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c8:49:4b:b6:4b:30:b8:67:89:20:04:d4:0a:eb:2f:83:a4:
7e:d6:27:ee:2b:b1:ab:f8:f8:2f:17:b9:4f:c6:29:34:9b:48:
5e:60:df:9d:bc:06:f0:e3:d5:5e:ad:5a:fe:43:62:25:ed:53:
44:1a:09:32:65:0d:a0:44:77:6f:6d:cd:88:10:17:16:a4:98:
da:16:a7:ed:31:db:e5:d6:33:6f:0e:1a:3b:ec:90:c2:57:9a:
ac:69:cb:d0:1a:82:fe:48:e4:f8:c0:51:c9:25:a6:67:2e:f5:
6d:d3:c8:ba:5a:f9:97:3a:c6:49:87:ea:b8:0e:63:5c:b7:70:
3a:a7:41:73:2b:9a:a4:4a:32:2e:76:48:dc:cd:25:0f:02:60:
0f:9c:d0:fb:fe:f2:1d:f7:73:25:26:8d:61:a8:d3:63:56:7e:
35:0f:45:86:44:ba:19:ce:22:fc:58:1f:68:21:72:90:27:15:
c9:d6:62:18:a1:27:f4:68:cc:63:1a:39:10:ca:67:5a:50:10:
96:b2:f1:c6:db:7b:3d:10:75:a8:d8:b0:a7:8f:ff:86:68:9b:
d7:81:8e:7a:c4:b2:7f:ec:ee:bb:3c:ef:e9:1e:88:c9:84:42:
e9:ac:06:1f:de:92:6b:2c:4b:94:a2:c8:92:4a:bc:05:6b:37:
52:74:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:24:41 2026 by rpki-client