Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: Vv/geVTG5FCGVmbMBJLxtEM23lz1FomP0ERHUKJVTL0=
Subject key identifier: 5D:17:5C:47:8F:F9:31:AF:7F:AC:74:8D:48:31:51:90:78:26:81:C1
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 717779CB77EB526BA6D2986BB5C407CED771F6FE
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197537.roa
Signing time: Fri 09 Oct 2026 07:49:36 +0000
ROA not before: Fri 09 Oct 2026 07:44:36 +0000
ROA not after: Fri 08 Oct 2027 07:49:36 +0000
asID: 197537
IP address blocks: 46.236.240.0/24 maxlen: 24
82.139.205.0/24 maxlen: 24
82.139.207.0/24 maxlen: 24
82.139.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 15:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:77:79:cb:77:eb:52:6b:a6:d2:98:6b:b5:c4:07:ce:d7:71:f6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 9 07:44:36 2026 GMT
Not After : Oct 8 07:49:36 2027 GMT
Subject: CN=5D175C478FF931AF7FAC748D48315190782681C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:08:57:cd:50:43:40:96:d5:f8:e6:09:c2:
6e:3a:58:c1:bd:a9:60:95:ba:68:15:e0:5b:0a:01:
cb:22:14:f4:7d:0c:f9:c1:a8:46:79:31:d8:42:31:
07:89:10:25:9f:6b:02:90:3f:45:f1:95:1f:17:2b:
bf:ca:cf:1c:26:ea:6a:84:af:62:3c:a4:2d:cd:50:
f1:1b:81:8f:d5:a2:44:57:8a:eb:e8:26:92:a5:28:
df:f7:18:1a:02:9c:e8:d7:6b:e0:d6:64:2d:3d:7a:
1e:90:c5:c9:39:bd:4d:13:94:85:47:03:2b:ad:db:
57:32:e0:33:80:ff:ff:99:16:0d:65:a0:e2:b3:76:
8c:9e:3d:73:f0:8d:6b:22:21:ab:86:fa:f4:1d:91:
3b:56:7a:23:ae:52:1d:21:2a:fd:09:8c:bc:34:0b:
e1:82:6e:27:a4:02:1a:8b:1d:a2:c7:4d:4b:02:05:
1b:6e:76:3f:31:6e:ba:64:bb:ae:9d:c8:25:59:fa:
19:61:47:e3:ca:d1:94:c2:a7:4c:78:4a:cb:51:0e:
93:39:c4:f1:68:87:d5:1a:6d:97:44:35:d3:40:af:
e8:2e:75:8e:a3:8f:bd:08:58:64:8f:ee:9a:a4:4c:
a5:01:2d:58:09:04:50:0f:7b:7b:04:17:8a:c7:50:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:5C:47:8F:F9:31:AF:7F:AC:74:8D:48:31:51:90:78:26:81:C1
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.240.0/24
82.139.205.0/24
82.139.207.0/24
82.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
18:27:7f:04:de:6e:ae:f0:29:79:dd:2b:39:0e:b1:bd:22:29:
58:74:ef:ba:a5:22:8b:2f:c7:13:d0:33:96:3a:c0:73:45:e6:
d8:73:c5:5a:72:c8:b3:52:d0:a8:8e:f1:4f:b1:d8:9e:49:7b:
fe:9d:73:8d:5f:a4:ee:c9:61:b3:6d:8a:c9:42:5f:b9:3b:96:
12:40:1c:00:7c:95:35:5a:6a:4a:bb:0d:fa:f3:ef:24:6c:bc:
21:e3:5c:1f:7e:e9:2a:63:b8:a7:85:89:6c:56:ef:4d:59:4f:
21:88:65:04:5e:76:25:c4:8d:2f:6a:12:15:ad:3d:31:de:8b:
c9:f3:07:36:bf:90:1c:a9:2f:1d:7d:2a:01:69:06:cc:15:33:
ca:e3:ff:0f:82:4e:e0:c8:20:e6:05:89:60:ac:34:c4:f2:31:
ff:53:e3:3e:df:ec:be:67:85:19:d5:c4:66:61:6d:66:2e:f3:
07:cd:58:23:08:0c:65:ab:96:43:90:df:38:24:35:51:fd:3a:
3e:04:79:42:18:82:c5:2c:6f:63:7f:70:6a:e1:34:89:bf:73:
2e:50:38:bb:aa:95:e2:c7:7a:9c:bc:19:18:65:b3:f2:7f:43:
a6:bd:e6:3b:3f:c2:a4:cd:8a:f1:64:f3:b7:a1:70:44:d1:a4:
2a:da:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:08:56 2026 by rpki-client