Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197354.roa
File: AS197354.roa (raw, json)
Hash identifier: Y0R6DWB+jTeRXc496Kgcsu1P9G/wNJvW32w1+lROSjU=
Subject key identifier: 98:3D:A4:B4:90:E2:D8:AD:37:3F:90:3F:9F:69:94:2F:42:B9:6A:F3
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 052FCE41DD3E92E2868FB10373A1D0C8490A684C
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197354.roa
Signing time: Mon 22 Jun 2026 10:59:20 +0000
ROA not before: Mon 22 Jun 2026 10:54:20 +0000
ROA not after: Mon 21 Jun 2027 10:59:20 +0000
asID: 197354
IP address blocks: 194.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 07:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2f:ce:41:dd:3e:92:e2:86:8f:b1:03:73:a1:d0:c8:49:0a:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 22 10:54:20 2026 GMT
Not After : Jun 21 10:59:20 2027 GMT
Subject: CN=983DA4B490E2D8AD373F903F9F69942F42B96AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:17:64:b7:26:b7:75:3f:87:34:b8:70:86:
1b:38:4d:cd:f0:f5:bd:9b:09:a4:eb:bf:f9:83:6a:
aa:6b:48:8e:51:97:03:c0:d2:36:cc:e3:7a:54:9c:
03:b4:b7:82:36:22:84:18:43:e4:a3:52:d2:31:d9:
98:21:96:6b:35:54:db:61:6e:af:e1:52:1c:14:42:
90:b2:2e:9f:ef:23:dc:27:3b:b2:e3:d0:e9:da:ef:
22:b9:96:b9:3a:f8:9c:f4:c3:09:3d:c7:17:bd:0b:
a2:f3:3a:c8:96:84:b5:4e:51:3c:aa:b5:ea:9e:10:
5f:73:ad:9e:e6:56:56:57:15:80:db:aa:4f:ff:1d:
69:1a:f2:da:77:0c:53:f2:61:b5:e3:02:40:dc:34:
a2:ad:d7:6a:9d:16:29:67:36:ed:06:42:e1:14:bd:
f8:f8:22:97:9f:ce:c4:d5:aa:78:57:f9:34:52:6c:
37:8a:bd:dd:92:cd:49:66:f6:db:13:e5:e6:ae:47:
ef:4a:5a:7a:bb:20:d1:86:81:84:57:76:1d:5e:37:
54:17:45:49:7e:68:30:88:e8:57:0c:8b:aa:87:92:
e3:c3:91:9c:d4:6a:91:9c:0b:3d:7f:1a:2a:48:65:
b5:b4:c1:eb:d1:75:c5:51:79:8c:13:87:3b:56:fb:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:A4:B4:90:E2:D8:AD:37:3F:90:3F:9F:69:94:2F:42:B9:6A:F3
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197354.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5b:f1:de:c3:cc:19:62:1d:3a:fc:3a:07:03:c1:44:ad:dd:
65:73:92:8d:e3:3e:7d:fc:1d:71:61:d9:16:72:05:1b:e4:e0:
7b:ef:9a:0b:e4:db:0d:8e:4e:4c:4b:4b:50:c7:36:10:fd:bd:
99:ee:dd:d6:5f:26:30:3e:01:a0:4f:25:2e:79:4c:5c:73:d7:
b3:6b:b9:aa:12:87:7f:db:01:0a:ea:21:84:93:e9:00:88:08:
08:e9:11:f8:65:df:71:2b:35:97:cc:83:a6:0f:e8:3f:30:cf:
e2:87:9a:e2:0f:dd:5d:b9:9e:8f:c2:aa:0a:d2:f6:e3:b3:af:
56:26:50:0e:25:17:a1:71:a1:01:0f:8b:5f:d0:7c:55:2b:0f:
78:cb:80:b0:05:c5:d7:e4:6c:ed:ba:67:18:97:a6:2f:c4:b5:
55:2e:e7:74:c6:aa:e4:33:c8:7b:fe:e3:bf:02:72:17:bd:43:
77:01:c1:76:99:38:bc:3d:71:5d:f7:5a:40:33:71:14:e3:c3:
78:ac:28:a6:d9:53:97:41:71:dd:99:9b:2a:8b:d0:8c:6f:c6:
bf:65:63:d7:36:7b:b1:ee:11:68:2c:c6:79:0b:dd:60:f6:9e:
2b:ba:b7:ad:72:4f:c2:b4:20:dd:55:85:40:16:75:78:a8:33:
c8:da:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:29:27 2026 by rpki-client