Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197884.roa
File: AS197884.roa (raw, json)
Hash identifier: JiD6JWdhYoCG8h8DWl7cTZFfu1GBBzkdnebp2l3COeI=
Subject key identifier: 26:A5:C9:98:61:76:5C:A6:44:EA:2F:17:ED:32:CF:FD:0A:92:44:1D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 67919D29D09085A684C8A032FE1D4683586425A8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197884.roa
Signing time: Sun 12 Jul 2026 09:36:13 +0000
ROA not before: Sun 12 Jul 2026 09:31:13 +0000
ROA not after: Sun 11 Jul 2027 09:36:13 +0000
asID: 197884
IP address blocks: 2a13:9500:1a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:91:9d:29:d0:90:85:a6:84:c8:a0:32:fe:1d:46:83:58:64:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 12 09:31:13 2026 GMT
Not After : Jul 11 09:36:13 2027 GMT
Subject: CN=26A5C99861765CA644EA2F17ED32CFFD0A92441D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:f1:55:23:e8:54:3e:40:c4:74:12:2f:4c:
76:11:57:bf:25:72:79:8e:46:a6:92:d4:f6:d6:27:
a1:46:20:4e:79:0b:93:6f:66:a2:43:ab:78:b0:bd:
a6:d1:4d:e2:74:ed:ca:e2:f7:0e:d7:99:10:20:95:
b7:7e:68:ff:88:1e:f7:c7:b0:07:db:dd:9a:90:8a:
b6:8b:38:03:81:6a:0c:84:1e:62:f5:35:d6:6e:62:
b1:d6:d7:aa:b2:53:bd:67:93:bb:19:b9:e5:e1:ff:
bb:35:34:3e:7d:b2:88:14:a9:cf:9c:fb:b3:36:69:
b5:db:7c:5d:38:f9:5c:dd:35:c0:da:10:1a:c9:66:
67:83:13:03:4d:6e:7d:15:bf:1b:17:18:1c:56:b1:
46:fb:38:a2:64:35:b2:54:95:e3:ce:7e:93:03:af:
e0:dc:05:7a:89:b3:4d:cc:8e:2c:4d:fe:59:a3:98:
a5:1b:55:d5:8a:a1:f3:29:de:a2:b6:87:39:04:0a:
8a:d0:a2:12:f0:04:9a:a7:a3:d3:7d:43:bc:d3:57:
90:56:9b:55:85:4d:f6:5c:40:27:f8:60:b8:75:e1:
d3:88:1d:1a:1e:5f:90:ab:19:f6:96:9a:01:a4:94:
b9:2a:b2:6c:0d:be:02:81:71:e1:f0:82:dd:aa:e1:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:C9:98:61:76:5C:A6:44:EA:2F:17:ED:32:CF:FD:0A:92:44:1D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1a5::/48
Signature Algorithm: sha256WithRSAEncryption
06:4f:94:63:0d:4b:cc:4e:9e:35:f7:c4:51:38:a5:2a:2b:3f:
68:11:94:a9:65:ba:6d:57:ed:6f:52:8d:aa:e7:b3:19:40:85:
c0:4c:da:0c:3d:60:41:77:d3:41:e0:31:fb:14:e7:32:bd:0c:
b6:02:53:87:ae:fc:dd:3a:64:d4:4e:dd:ad:16:47:9f:c2:eb:
87:d2:e9:03:8e:25:24:ea:f3:cf:a3:f7:d8:4f:d7:88:d9:bc:
4b:73:88:25:50:11:e1:31:52:51:bd:43:b4:af:d1:a4:bf:28:
13:42:d1:55:31:7e:95:dc:d6:bf:c3:7e:73:ba:94:f3:7b:b9:
31:a9:51:b1:ca:ae:fa:18:c2:83:62:12:d2:ec:08:53:a2:38:
b7:19:b2:fe:e4:40:79:dd:81:95:4f:11:71:6a:94:64:5f:8a:
95:ee:12:0c:b9:1b:d4:68:8a:84:3a:16:0b:b5:77:2c:69:95:
ad:c5:de:e8:2d:12:4e:8c:62:f0:c7:46:9e:7b:c6:55:59:30:
08:22:fe:77:1f:6a:2a:c1:98:ad:66:d2:4c:ee:f6:41:48:44:
ee:0e:ff:29:2e:68:d9:ab:fb:51:01:69:9b:98:b6:85:0e:7a:
48:3c:40:24:e4:6d:ef:ec:6a:5e:54:c1:76:f8:74:11:70:b3:
c7:7a:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client