Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197817.roa
File: AS197817.roa (raw, json)
Hash identifier: zyqUzQ2VBs3tFhN/EpBx66H9FPAt7JsZoO38EyfYajA=
Subject key identifier: 6A:07:E1:80:28:49:0A:1B:B5:89:CD:30:69:F4:06:6C:A5:45:4A:B8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5EF019D9066FF80841B2BEA411A5A633185D2504
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197817.roa
Signing time: Fri 29 May 2026 06:54:39 +0000
ROA not before: Fri 29 May 2026 06:49:39 +0000
ROA not after: Fri 28 May 2027 06:54:39 +0000
asID: 197817
IP address blocks: 2a13:9500:184::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f0:19:d9:06:6f:f8:08:41:b2:be:a4:11:a5:a6:33:18:5d:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 29 06:49:39 2026 GMT
Not After : May 28 06:54:39 2027 GMT
Subject: CN=6A07E18028490A1BB589CD3069F4066CA5454AB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:bd:8a:8f:ca:28:7b:3f:fd:66:7f:8e:09:
22:99:ec:cc:02:86:db:04:ca:64:fc:8c:a9:da:bf:
f2:a3:6f:d7:a8:75:dd:52:4a:db:99:9a:65:f5:71:
3a:1c:b9:d4:29:3e:53:e1:12:7f:13:fe:f7:a9:33:
78:98:c3:4a:07:fc:98:3b:31:74:91:15:05:82:7c:
7c:5d:68:fb:a3:a3:19:27:33:71:91:51:0c:f8:c1:
d5:84:b4:8c:a3:8c:f2:9f:fa:0a:e2:0e:89:df:65:
30:16:04:e6:46:42:b0:dc:cf:e3:1e:57:0f:92:ba:
e1:18:28:57:af:26:6c:3d:7b:21:7c:38:64:49:61:
07:62:88:a5:1d:4a:9c:48:fe:1a:2b:1b:5d:d7:b8:
6a:bc:70:8d:fc:27:db:b7:d7:76:25:1b:86:32:81:
09:04:f9:e1:13:7b:81:ef:56:a4:cb:06:cb:b7:3b:
3e:11:cc:fb:71:e1:6a:9c:bc:55:82:0d:fc:f4:a1:
a9:8d:da:e8:38:46:f7:bc:54:f7:1c:8f:4f:72:cb:
71:3c:b7:5d:bf:a9:f4:77:5d:8e:81:e8:c8:e7:1b:
32:d5:bf:a3:27:5f:d8:87:aa:ea:33:95:8b:50:cf:
65:4d:94:6b:89:af:03:33:6e:41:a1:3a:fc:a8:bb:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:07:E1:80:28:49:0A:1B:B5:89:CD:30:69:F4:06:6C:A5:45:4A:B8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:184::/48
Signature Algorithm: sha256WithRSAEncryption
5d:23:96:ad:bb:d4:86:99:02:01:d5:2b:b6:b9:54:b1:75:47:
8d:a5:1f:8e:c7:f2:80:8e:b1:48:8e:8b:a4:88:8d:8d:c6:d0:
68:bb:dc:0f:47:02:9f:1c:74:36:c6:08:2b:b3:f1:f7:ab:67:
6d:8e:9e:3d:3b:31:98:23:af:37:f5:e2:08:f2:93:4d:27:05:
f8:17:d7:4e:73:7c:6a:31:3d:3b:96:ad:a5:ae:46:31:f5:c9:
03:86:1c:0b:10:ba:9e:bf:6f:80:3b:8e:7a:f1:d3:1a:35:b2:
57:a9:24:5e:49:f2:e4:e8:57:bc:7a:83:38:0e:ba:65:42:4f:
b8:53:fe:86:15:5f:04:c7:35:28:52:8a:20:ed:35:74:53:64:
e1:d4:82:fc:ce:59:4b:fb:83:d3:fd:48:38:64:96:3e:f2:da:
9d:e2:d0:e5:7f:09:24:02:02:c9:97:b9:8d:d6:f6:32:ca:fb:
9d:3b:2d:bb:27:26:1b:62:18:12:0b:20:3c:09:fd:6b:5d:c2:
22:ca:50:00:a8:22:36:f7:32:0b:56:28:20:9c:e7:c7:5c:da:
e7:77:11:22:e5:e5:20:1f:81:80:d3:bb:cf:f6:a9:98:c7:91:
6d:5d:8b:90:79:98:e7:43:c4:1a:1f:e2:ad:83:0c:13:b1:18:
5e:01:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:35 2026 by rpki-client