Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197213.roa
File: AS197213.roa (raw, json)
Hash identifier: BwEtfgP2s9wZPl1Xi45AegD8M76D/wh05QIVKpXbQlY=
Subject key identifier: 4E:CD:6C:84:C2:08:1E:25:BC:9E:3A:BC:15:98:DA:03:29:BF:C6:AD
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 074028926DA944947C01406F60FE4D3ED0F03F04
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197213.roa
Signing time: Fri 17 Jul 2026 01:51:30 +0000
ROA not before: Fri 17 Jul 2026 01:46:30 +0000
ROA not after: Fri 16 Jul 2027 01:51:30 +0000
asID: 197213
IP address blocks: 82.139.194.0/24 maxlen: 24
82.139.204.0/24 maxlen: 24
82.139.219.0/24 maxlen: 24
82.139.221.0/24 maxlen: 24
82.139.242.0/24 maxlen: 24
82.139.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:40:28:92:6d:a9:44:94:7c:01:40:6f:60:fe:4d:3e:d0:f0:3f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 17 01:46:30 2026 GMT
Not After : Jul 16 01:51:30 2027 GMT
Subject: CN=4ECD6C84C2081E25BC9E3ABC1598DA0329BFC6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:92:47:06:a7:c8:b7:0e:fe:a0:9f:86:8e:
15:86:3c:ed:53:e4:cd:5e:20:7d:46:9f:b4:18:fa:
50:96:54:69:07:64:22:7e:76:1b:6e:2a:02:04:d1:
0f:68:cc:5a:71:33:64:15:b7:22:2a:1d:d8:28:6f:
ae:3d:0a:8d:ee:44:aa:2e:d1:fe:80:8f:f8:15:65:
3d:f1:d7:4c:1f:e8:2f:c7:3e:5f:53:6f:66:ff:13:
73:d7:0b:68:c2:36:82:95:62:c7:47:66:87:b4:f9:
ca:2b:30:21:0e:5a:5d:d1:0a:12:84:25:b7:09:bf:
f9:7f:ff:81:e6:36:06:3b:0e:ac:87:1a:8a:55:4a:
55:ad:fb:25:06:89:dc:d9:1f:9c:c8:05:02:e3:c3:
3d:80:d8:53:d8:27:af:ba:15:62:86:0a:a0:e2:b1:
17:17:42:dc:c5:1b:9f:81:cd:38:4c:6e:5f:63:f5:
1a:47:8d:14:07:70:29:c8:fb:ae:1a:48:18:3b:9d:
f4:bb:05:cc:01:31:dc:56:ff:5f:64:99:77:f4:c6:
f6:ff:34:1b:9a:70:4e:40:3a:7c:ad:19:aa:58:df:
db:b9:c7:45:9e:44:88:a0:e4:e9:be:cc:86:5b:99:
6e:dc:8d:c1:0a:cb:c7:4f:68:bb:cc:f3:36:c0:e0:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:6C:84:C2:08:1E:25:BC:9E:3A:BC:15:98:DA:03:29:BF:C6:AD
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.194.0/24
82.139.204.0/24
82.139.219.0/24
82.139.221.0/24
82.139.242.0/24
82.139.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fb:10:39:be:8b:af:2a:69:1b:61:02:82:8f:74:f1:ed:37:
a8:88:34:6c:fe:ad:12:c9:90:2c:d3:a8:46:e5:80:4a:f6:ce:
63:ba:97:5e:81:5b:c0:a1:ae:66:2b:6e:7c:a3:46:3b:90:45:
8a:35:4e:b7:e4:01:7d:9f:96:da:51:01:0a:15:71:06:33:26:
79:6f:e6:2f:a6:5b:65:2b:11:25:c2:83:3a:d1:ed:e9:a9:cb:
6e:45:d5:7a:af:4b:76:8f:39:1d:44:c5:77:8c:74:7c:4a:1c:
10:89:67:d4:51:7f:54:47:9a:47:00:73:06:69:e1:ba:a7:9c:
5e:e8:29:ad:43:da:ff:65:b5:8a:04:99:91:9a:f9:86:99:3b:
39:2f:b1:db:e3:e8:a8:33:42:aa:5f:7a:c2:f3:f4:e6:50:ab:
b1:ee:33:55:a0:6d:9c:10:80:32:1f:52:40:0f:00:e5:75:f8:
c1:66:42:03:e9:63:a9:50:b2:7b:27:c8:b7:4a:b0:ea:fc:66:
51:79:83:e8:01:7f:64:31:3a:5e:bc:77:5c:ac:d0:e6:18:bb:
41:93:18:2a:35:5e:bc:9b:3c:78:a7:1a:89:6f:06:21:76:73:
d5:b1:4d:12:fe:e7:b2:6e:46:25:91:0a:fb:96:4e:35:50:c8:
88:54:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:05 2026 by rpki-client