Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197570.roa
File: AS197570.roa (raw, json)
Hash identifier: afrcI2i3XiaXYbq4jJhLHDw0A67N8NIycq3eR0eocyE=
Subject key identifier: CC:92:68:A7:EA:C6:51:01:E3:D6:B4:17:77:71:D6:4B:ED:8A:23:C9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 083052523CFA293FAC20E7337A7CF12EC7D5BB0F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197570.roa
Signing time: Sat 27 Jun 2026 11:30:13 +0000
ROA not before: Sat 27 Jun 2026 11:25:13 +0000
ROA not after: Sat 26 Jun 2027 11:30:13 +0000
asID: 197570
IP address blocks: 178.83.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:30:52:52:3c:fa:29:3f:ac:20:e7:33:7a:7c:f1:2e:c7:d5:bb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 27 11:25:13 2026 GMT
Not After : Jun 26 11:30:13 2027 GMT
Subject: CN=CC9268A7EAC65101E3D6B4177771D64BED8A23C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:83:49:3a:d3:26:09:69:e2:0f:0f:77:49:
70:08:d7:a4:2e:70:2c:09:ce:19:09:b9:b0:58:96:
53:7c:43:fb:f1:0a:7f:9d:a0:88:13:9a:44:44:b4:
bc:f7:a7:47:4e:7a:32:34:d3:17:70:8c:03:98:4d:
a1:71:b9:b9:84:b7:e7:30:5e:7c:de:a8:77:eb:89:
3e:0b:40:2b:e7:26:18:4e:04:5f:6f:b1:43:27:33:
a9:7b:0f:08:d6:9f:a7:d8:70:1c:30:0f:8a:ab:4a:
39:d3:69:a8:6a:7e:15:74:95:f8:01:11:6d:d6:c1:
2d:16:a1:ec:88:21:b1:74:79:5a:97:c0:59:b7:d0:
f6:bb:c8:fc:43:00:51:8d:66:61:57:eb:5a:f0:f6:
3a:dc:97:fd:ca:05:c4:4f:4c:bf:5c:9a:e7:68:1c:
14:c4:62:43:58:45:6b:82:3a:a4:b2:34:17:75:fb:
38:e2:3f:42:85:bd:28:23:b5:b0:49:5e:f5:e3:36:
db:7e:a1:6d:ca:2b:a7:40:25:4f:14:ef:cd:fc:6f:
d8:3e:25:b3:3b:17:b1:29:09:72:f8:1f:25:38:7c:
66:a2:fd:67:14:1e:13:07:1e:f0:df:63:ff:7e:2c:
fc:41:f3:89:e5:73:7d:0d:0f:83:55:d2:43:ad:60:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:68:A7:EA:C6:51:01:E3:D6:B4:17:77:71:D6:4B:ED:8A:23:C9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.89.0/24
Signature Algorithm: sha256WithRSAEncryption
92:90:a3:94:8c:3f:9e:62:46:2a:33:f5:24:e0:fe:77:bd:34:
89:fe:b7:e6:c0:99:e4:80:1c:84:d9:e3:f0:7f:f0:94:9e:3f:
6a:7b:71:fa:a8:b0:16:6d:d6:a1:61:b4:a1:ad:de:ac:86:1b:
f2:42:90:01:de:fc:e8:b0:31:e0:20:6a:b3:fc:ac:80:17:32:
0a:00:51:f1:c0:ab:8d:d3:e5:60:d9:de:17:2a:f4:16:5d:3e:
39:d8:56:a3:27:c7:4c:c2:aa:2b:79:87:c2:ec:65:2a:c6:b2:
9d:e7:23:be:20:28:fe:7e:bc:0b:31:bd:59:19:2b:5c:16:76:
69:4d:ed:55:9b:35:b9:4e:bc:00:41:c7:77:27:0c:15:b6:29:
d4:06:ae:fb:f7:eb:c1:e7:3e:24:69:e8:79:66:3d:72:bf:4c:
9c:f8:21:0b:db:53:55:9c:e1:42:88:20:85:87:67:f3:12:6b:
a6:50:9f:ba:ed:54:8a:fd:68:f1:0f:c5:b6:83:6f:72:13:a5:
9f:e6:41:9d:e2:0d:48:b9:a4:28:32:19:ab:2c:30:81:92:cb:
23:d6:86:c1:f0:1d:dd:72:75:4e:b7:4f:d6:32:c5:de:bd:6d:
09:08:86:e3:d7:d3:99:64:2d:07:2a:19:5c:6c:dd:6b:7b:91:
6a:6f:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client