Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
File: AS197649.roa (raw, json)
Hash identifier: jarII4IJSZSHDFrsBhLLO1k6OdYPCG4iNHjp6126cIw=
Subject key identifier: E6:4D:CD:FD:FE:44:8C:5A:BE:4C:B0:46:12:D5:45:32:BA:4B:72:B7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 313A73C537082C31BA3D3F65BC7887C479F59BBE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
Signing time: Wed 19 Aug 2026 03:09:06 +0000
ROA not before: Wed 19 Aug 2026 03:04:06 +0000
ROA not after: Wed 18 Aug 2027 03:09:06 +0000
asID: 197649
IP address blocks: 2a0f:85c1:8bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3a:73:c5:37:08:2c:31:ba:3d:3f:65:bc:78:87:c4:79:f5:9b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:06 2026 GMT
Not After : Aug 18 03:09:06 2027 GMT
Subject: CN=E64DCDFDFE448C5ABE4CB04612D54532BA4B72B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:e0:a0:c3:23:dc:c4:a2:93:18:ac:7d:cd:
4e:dc:88:89:ba:5d:3e:d3:45:6a:69:b5:7c:ba:6e:
23:48:81:d7:b3:95:e0:89:d6:30:84:27:38:7a:38:
21:d2:de:0f:f8:55:98:dc:f3:b6:a4:ad:22:55:2c:
27:bc:bf:27:93:1a:ad:33:6b:d1:bf:6f:16:fa:a1:
88:b5:b8:2d:df:95:af:33:80:0d:05:c7:46:ba:e0:
ae:b8:fb:f0:73:65:9a:af:ff:b0:1d:82:80:a8:00:
97:4a:3c:14:07:e2:a8:28:b7:3c:e8:f2:18:b6:ac:
86:48:16:28:28:8c:66:f5:ca:f5:7e:14:b3:11:53:
cc:9f:16:ff:59:cb:e6:3c:ba:2f:d1:e5:04:f9:22:
96:6b:ab:47:73:c8:17:46:1c:ca:37:57:26:3b:60:
3b:f7:43:a5:ad:4a:16:e4:56:72:4f:21:ab:90:ca:
9d:57:53:f6:30:62:c8:9f:48:5a:5b:d1:90:09:ae:
fb:9f:3b:83:71:f7:ae:8a:9b:65:fd:84:70:f0:12:
be:d9:79:81:bc:30:a5:90:61:6c:bf:71:30:88:f8:
47:56:7b:d7:f4:84:40:46:fd:4e:ca:25:bd:ad:d4:
d0:dc:25:c8:d1:09:34:75:93:7c:4d:dc:72:4d:c7:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:CD:FD:FE:44:8C:5A:BE:4C:B0:46:12:D5:45:32:BA:4B:72:B7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8bc::/48
Signature Algorithm: sha256WithRSAEncryption
9e:a0:8a:2d:1a:4e:e5:21:bf:90:7d:0f:01:08:15:29:b1:ff:
a6:7f:5c:ed:bf:60:05:80:48:2e:53:cf:61:a7:51:3b:5d:bb:
43:fd:5c:c6:0e:2e:ba:02:2e:80:12:4e:bb:8a:26:29:e8:f3:
ac:c9:a0:f6:c3:92:34:cd:28:d1:b7:f7:06:56:3f:d1:08:d6:
1d:21:07:29:f8:81:83:9d:fb:0e:e8:57:d6:7c:53:75:4c:d9:
72:6e:31:90:3d:b0:80:f3:d3:33:3a:ad:89:45:9c:71:7c:3f:
5b:cb:ff:41:4f:5c:0c:b1:a2:fc:38:aa:7c:06:99:89:9d:e1:
95:df:28:c6:33:7d:00:1b:08:22:f3:02:44:47:23:b1:cc:7b:
8e:16:27:75:1c:81:b6:e0:43:3d:59:49:50:5e:d7:07:ef:cc:
91:17:95:66:fd:3f:64:e4:81:b3:e7:21:ad:85:dd:3a:b6:eb:
37:28:83:b6:74:6b:0d:1d:62:3a:60:65:f5:36:dc:1d:de:46:
c6:de:bf:a2:13:52:f1:85:fc:b7:d1:09:3a:ee:42:53:fd:e3:
30:42:56:25:d7:a9:30:fe:f6:f3:0b:f3:0a:75:68:4e:29:fa:
6e:89:21:ec:07:1f:c5:a6:d7:43:5a:03:c4:b7:de:51:98:36:
b3:55:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:41 2026 by rpki-client