Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197331.roa
File: AS197331.roa (raw, json)
Hash identifier: /JHaXU8mCcOLgkoB7COcZ626/I1iEVkSWXmGZ5geZ+Y=
Subject key identifier: F0:A3:3F:FB:DA:91:0D:27:6F:23:61:CB:B6:FA:2E:73:69:85:8D:7F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B7AB89B9DF7AA3F23DBF5D97CA7E8C6F2373086
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197331.roa
Signing time: Fri 19 Jun 2026 11:53:55 +0000
ROA not before: Fri 19 Jun 2026 11:48:55 +0000
ROA not after: Fri 18 Jun 2027 11:53:55 +0000
asID: 197331
IP address blocks: 82.47.161.0/24 maxlen: 24
178.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7a:b8:9b:9d:f7:aa:3f:23:db:f5:d9:7c:a7:e8:c6:f2:37:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 19 11:48:55 2026 GMT
Not After : Jun 18 11:53:55 2027 GMT
Subject: CN=F0A33FFBDA910D276F2361CBB6FA2E7369858D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:44:6d:8a:fd:5a:55:97:87:a2:f0:a3:5b:
67:6a:31:06:e6:87:09:ab:94:4f:00:fd:ad:de:e4:
e6:c9:c0:8c:84:97:ff:e9:e5:66:d6:97:cd:d6:47:
0f:13:3a:63:d8:11:4c:5c:ca:de:56:42:8b:f7:19:
ab:32:86:53:6c:25:9c:ba:b6:76:2d:a6:d4:2b:ae:
ec:7a:34:09:ba:fc:cb:76:e2:89:20:ab:e4:f0:50:
58:86:69:66:51:ba:f1:8e:ad:4e:86:47:33:23:6a:
f2:18:ca:03:f3:4e:82:d2:00:55:c3:cd:b8:84:ec:
ea:92:98:0c:07:22:89:c9:e2:b9:5a:9c:99:4f:ae:
98:37:b2:1a:cc:fe:2d:08:b5:5b:98:56:40:88:ca:
d1:5d:b0:1d:a0:3e:76:86:1d:34:45:37:32:83:a2:
9c:f5:04:21:38:c9:30:f7:55:d3:6f:1d:09:94:57:
c0:01:9a:97:ee:fb:c0:cf:aa:22:64:ab:c2:7d:00:
bf:c6:ad:43:c4:66:cb:49:81:f5:1c:28:98:e1:dc:
a6:f7:11:61:92:34:1f:2d:f9:68:4f:82:92:4f:5f:
e5:72:44:9b:d5:ec:f6:32:b8:7d:c2:d3:b5:e3:f8:
d5:c3:2a:f6:ea:36:30:87:9c:4f:a1:60:26:fd:05:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:3F:FB:DA:91:0D:27:6F:23:61:CB:B6:FA:2E:73:69:85:8D:7F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.161.0/24
178.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
06:de:bc:37:2e:d3:aa:de:08:1a:61:ae:68:95:85:ee:15:6c:
e1:e2:04:cb:1a:18:5a:5d:50:65:15:7b:52:e6:68:1e:3b:bc:
16:17:42:6e:e9:3d:ff:d9:48:58:80:af:1b:ce:7a:f1:fc:17:
c6:8b:0b:fa:3b:df:7b:2f:98:47:ba:e4:ab:6a:0a:b0:c3:1a:
75:38:82:3b:db:8d:9f:b4:dc:e9:8c:5a:0d:b3:18:2a:1b:0d:
46:57:c4:86:0d:b6:2d:aa:aa:9c:9a:40:19:a0:f8:89:1b:43:
58:b8:95:6c:e4:44:62:e8:6e:67:42:ee:a0:f5:f3:31:a4:6f:
6f:e1:eb:85:3b:f5:ad:4b:45:e3:43:78:39:40:36:fa:63:15:
ba:8d:50:e0:c5:be:62:b6:16:ea:0b:d5:5b:69:50:15:16:8e:
75:77:97:ef:9f:f7:73:96:d8:c7:24:c2:58:66:34:7a:4f:73:
4f:4b:4c:3b:c8:20:7d:63:7b:89:7f:6f:1b:b2:c0:99:3f:59:
2b:1c:a2:f2:af:d9:89:a5:f7:b3:32:5c:78:bd:53:94:c7:1c:
82:4d:41:55:4f:77:cc:66:b0:ba:59:b3:98:c3:f7:e1:f0:38:
41:f5:e4:d8:c5:2f:dc:ed:ea:d3:36:d9:ad:da:02:37:4d:68:
11:f4:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:13 2026 by rpki-client