Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197528.roa
File: AS197528.roa (raw, json)
Hash identifier: onQCdiVLXB3GQSzUq1tW8WwyZ6/fLHMWrPLrt4tkfyM=
Subject key identifier: AF:60:F8:06:F3:98:05:EE:35:5A:DE:A5:82:3D:1F:16:26:72:8D:16
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1FBEC6F9F5ECA9A92C550CFDB7076A22FDC05905
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197528.roa
Signing time: Fri 17 Jul 2026 14:40:55 +0000
ROA not before: Fri 17 Jul 2026 14:35:55 +0000
ROA not after: Fri 16 Jul 2027 14:40:55 +0000
asID: 197528
IP address blocks: 45.153.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:be:c6:f9:f5:ec:a9:a9:2c:55:0c:fd:b7:07:6a:22:fd:c0:59:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 17 14:35:55 2026 GMT
Not After : Jul 16 14:40:55 2027 GMT
Subject: CN=AF60F806F39805EE355ADEA5823D1F1626728D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:5f:b7:71:a4:6b:3e:d2:5c:9d:d7:56:86:
fa:a6:b7:af:b2:a2:59:47:a7:e1:fc:af:a7:f8:29:
71:b2:c8:cc:43:cd:b3:b4:b0:55:8e:75:a4:a4:f2:
00:a6:8f:0b:ae:f4:15:44:45:e6:f2:75:f8:ad:04:
f2:d4:66:ab:35:83:69:7b:56:94:7e:ec:08:c7:f5:
6f:2d:ff:76:c1:f8:86:d8:11:9b:ec:f2:e9:4e:43:
29:22:ca:8f:7f:ff:b3:14:09:94:02:c3:28:5c:d2:
af:dc:e9:9d:ee:a6:85:1f:d3:5a:e3:b6:ea:50:30:
10:74:6d:8d:ab:72:e4:13:05:36:38:a2:55:72:ec:
14:a2:c8:72:84:ec:50:c8:07:fa:4a:1d:c3:53:ee:
3f:af:87:04:64:9e:62:89:6c:4a:ac:43:79:19:d5:
52:29:0f:3d:ca:e4:7a:4d:62:7a:d4:44:57:91:b0:
9f:31:34:49:c0:96:2f:f3:38:94:eb:73:dd:75:ed:
64:77:5c:e7:db:08:ce:05:6b:78:4e:18:cd:4f:75:
9a:48:40:dd:5e:34:f0:7e:77:03:33:4c:dc:e3:d1:
ce:4b:11:6d:d0:46:29:98:6b:56:2d:f8:ec:b2:4d:
a6:2d:b6:ac:8a:f4:41:20:bf:82:ce:29:30:9d:3e:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:F8:06:F3:98:05:EE:35:5A:DE:A5:82:3D:1F:16:26:72:8D:16
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
45:74:a8:9e:f4:87:de:fc:d3:85:cb:37:95:7f:28:65:4c:13:
b1:0f:78:69:57:a3:fc:75:c7:86:14:79:c8:ae:4f:1c:99:be:
a3:99:99:51:95:de:b4:f3:58:57:a3:ad:f8:e9:eb:17:1d:c1:
3a:44:53:ce:f8:89:17:8d:5b:66:d8:de:7f:15:92:19:fe:78:
72:31:08:e6:b3:c4:f9:b2:a5:d8:20:72:be:46:4a:79:92:9a:
8c:7f:70:8e:9f:41:98:17:d3:20:64:40:4d:26:9a:0f:85:d1:
59:7b:a9:68:bd:0f:9c:9c:b3:b0:fa:12:d3:94:d7:da:4a:54:
ab:e7:ec:ad:71:a1:94:01:ba:3c:4e:82:7a:33:a8:a7:72:73:
f2:20:96:ea:df:8a:ff:ef:3b:70:50:5b:d7:27:9f:4a:64:84:
de:f8:9b:a0:a4:4d:da:e6:44:bf:32:6d:05:23:a0:a4:77:b4:
f7:e6:53:6e:24:48:26:e7:1a:1e:1b:c7:1d:4d:0a:02:2e:c4:
7a:b1:be:ec:dc:2e:2c:f2:27:ff:91:7b:e5:28:04:6e:6b:aa:
c7:8e:65:80:7b:c7:74:96:07:35:57:24:93:2a:58:7d:e0:d7:
63:23:c8:be:92:4d:1a:62:56:27:c5:bf:68:a5:61:ff:af:ca:
78:42:8e:75
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUH77G+fXsqaksVQz9twdqIv3AWQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA3MTcxNDM1NTVaFw0yNzA3MTYxNDQwNTVaMDMxMTAvBgNV
BAMTKEFGNjBGODA2RjM5ODA1RUUzNTVBREVBNTgyM0QxRjE2MjY3MjhEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MF+3caRrPtJcnddWhvqmt6+y
ollHp+H8r6f4KXGyyMxDzbO0sFWOdaSk8gCmjwuu9BVERebydfitBPLUZqs1g2l7
VpR+7AjH9W8t/3bB+IbYEZvs8ulOQykiyo9//7MUCZQCwyhc0q/c6Z3upoUf01rj
tupQMBB0bY2rcuQTBTY4olVy7BSiyHKE7FDIB/pKHcNT7j+vhwRknmKJbEqsQ3kZ
1VIpDz3K5HpNYnrURFeRsJ8xNEnAli/zOJTrc9117WR3XOfbCM4Fa3hOGM1PdZpI
QN1eNPB+dwMzTNzj0c5LEW3QRimYa1Yt+OyyTaYttqyK9EEgv4LOKTCdPiiNAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUr2D4BvOYBe41Wt6lgj0fFiZyjRYwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTk3NTI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZkF
MA0GCSqGSIb3DQEBCwUAA4IBAQBFdKie9Ife/NOFyzeVfyhlTBOxD3hpV6P8dceG
FHnIrk8cmb6jmZlRld6081hXo6346esXHcE6RFPO+IkXjVtm2N5/FZIZ/nhyMQjm
s8T5sqXYIHK+Rkp5kpqMf3COn0GYF9MgZEBNJpoPhdFZe6lovQ+cnLOw+hLTlNfa
SlSr5+ytcaGUAbo8ToJ6M6incnPyIJbq34r/7ztwUFvXJ59KZITe+JugpE3a5kS/
Mm0FI6Ckd7T35lNuJEgm5xoeG8cdTQoCLsR6sb7s3C4s8if/kXvlKARua6rHjmWA
e8d0lgc1VySTKlh94NdjI8i+kk0aYlYnxb9opWH/r8p4Qo51
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:40:00 2026 by rpki-client