Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197194.roa
File: AS197194.roa (raw, json)
Hash identifier: 2yr3LYfDRNBSZnEYThkctYeoQrcqEj2iY5PDVMsJ9G8=
Subject key identifier: 1E:F8:B3:12:61:9A:F4:2F:3A:BA:15:92:70:DF:C1:9D:1C:EF:EF:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 48CE08700A4C810C08BD385E25255316DD36996C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197194.roa
Signing time: Sat 30 May 2026 19:50:58 +0000
ROA not before: Sat 30 May 2026 19:45:58 +0000
ROA not after: Sat 29 May 2027 19:50:58 +0000
asID: 197194
IP address blocks: 82.47.101.0/24 maxlen: 24
82.47.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ce:08:70:0a:4c:81:0c:08:bd:38:5e:25:25:53:16:dd:36:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 30 19:45:58 2026 GMT
Not After : May 29 19:50:58 2027 GMT
Subject: CN=1EF8B312619AF42F3ABA159270DFC19D1CEFEF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:0d:9a:28:a0:cc:8c:06:97:f1:de:e3:8b:
29:e9:e7:04:89:a4:66:0b:a6:8a:f8:cd:23:1b:6c:
8b:1f:5c:24:ee:4f:2e:37:40:ef:92:c6:86:3a:c3:
0e:08:12:04:36:2d:ac:35:21:9a:0d:06:94:ca:7c:
b5:db:1d:11:71:d7:ed:76:44:ee:50:d9:5a:b1:c3:
62:84:23:d0:8d:99:64:58:9e:e5:34:ed:a8:b0:2a:
c9:46:aa:05:33:34:a3:7d:4c:37:ab:82:79:29:7c:
2f:6f:a9:22:e4:1a:62:f6:97:c4:97:64:74:a0:bc:
f9:c5:6a:54:01:63:5b:c5:59:ae:50:77:70:75:dc:
0c:9f:29:89:53:0c:0d:73:ba:15:ff:8a:bf:7e:e1:
3b:11:9e:7b:1d:70:d7:df:ca:1f:73:ea:78:9f:37:
be:a7:74:f0:8b:45:08:7b:62:da:54:03:99:99:42:
cb:75:ca:94:03:8a:c7:d7:f4:5a:fb:22:09:f4:ea:
7a:03:54:1b:a8:ea:e8:ed:10:73:ea:9d:7e:c8:0e:
7a:7b:f4:17:3b:f4:c2:44:32:70:a5:61:41:8c:a0:
70:e3:c5:06:77:e2:02:42:44:b2:9e:f6:b4:e8:d2:
cc:50:ac:c0:41:85:75:e4:ba:be:d1:bc:51:48:99:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:B3:12:61:9A:F4:2F:3A:BA:15:92:70:DF:C1:9D:1C:EF:EF:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.101.0-82.47.102.255
Signature Algorithm: sha256WithRSAEncryption
1c:67:ef:aa:29:0c:e9:44:90:0b:e2:1f:b5:21:2d:6a:5f:23:
d5:b8:69:96:84:ed:67:fa:d2:80:c6:35:e0:a9:c3:b7:91:50:
dc:47:7e:7f:e3:45:a6:95:5f:43:10:f6:44:bb:d1:a3:b6:95:
d6:b5:41:f2:dd:b7:42:84:13:01:57:3c:e5:85:0a:c8:59:57:
b6:3a:da:9e:c3:05:f4:19:38:ea:c0:8f:01:80:5c:04:37:20:
28:b9:f5:eb:d3:d3:de:55:58:cc:5f:57:99:9c:e2:ad:0d:c7:
fd:03:46:bb:64:fd:5f:72:6a:0d:94:c6:b4:45:3d:7b:a3:59:
fd:6b:25:0a:29:1a:60:96:bf:53:39:8b:1a:3f:93:de:ca:31:
e0:4a:56:b0:2e:07:a5:56:3c:ca:81:77:0c:a1:6b:c5:93:16:
52:18:3a:c0:b7:2b:ca:29:87:20:c5:ba:a2:f8:df:2b:27:3c:
e3:ff:6d:d1:8d:44:30:a7:2a:ad:76:4d:f9:be:e5:9b:76:e1:
da:d6:d9:0a:3e:46:34:ba:55:7a:0a:1a:4a:c1:33:f5:06:78:
37:8d:06:9e:59:46:29:5c:8c:88:12:c3:42:2d:8a:92:ef:e5:
e4:27:3b:8b:ce:42:50:45:0a:c6:4c:e3:ca:57:4a:99:c8:32:
ab:3a:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:30 2026 by rpki-client