Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197127.roa
File: AS197127.roa (raw, json)
Hash identifier: KwIsF4WLnzobdqTP1lpUfqv8A33PE8QcNqmm+NeReMo=
Subject key identifier: 62:5A:D7:36:C2:4D:E0:D8:A5:27:EB:08:85:B9:6C:8B:09:B4:A9:08
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 60615CBF19F77CEDB6293F7818AF32DB4C6E15C5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197127.roa
Signing time: Tue 02 Jun 2026 15:25:24 +0000
ROA not before: Tue 02 Jun 2026 15:20:24 +0000
ROA not after: Tue 01 Jun 2027 15:25:24 +0000
asID: 197127
IP address blocks: 2a14:7583:effb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:61:5c:bf:19:f7:7c:ed:b6:29:3f:78:18:af:32:db:4c:6e:15:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 2 15:20:24 2026 GMT
Not After : Jun 1 15:25:24 2027 GMT
Subject: CN=625AD736C24DE0D8A527EB0885B96C8B09B4A908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:f1:a3:53:d8:b3:c9:bd:3e:36:b4:f8:60:
46:97:f1:b5:2e:fe:60:f2:16:24:4c:e1:94:51:03:
ad:71:50:bd:91:42:8f:2a:ac:47:b8:f4:85:81:f5:
96:ef:45:fe:f2:51:ad:c2:df:f8:01:a8:d0:91:b3:
7e:65:87:ba:30:86:5f:8c:95:de:5d:fa:e8:40:13:
f7:05:1d:b0:f5:e5:4f:82:cf:7e:39:e3:5b:cc:ed:
e2:b6:fa:93:f4:90:d2:b2:f1:09:fe:98:fa:aa:10:
e6:a9:f5:a8:36:fe:c9:b6:df:e8:c6:dd:e1:76:c3:
68:b6:25:dc:29:b4:6c:37:57:71:29:a8:50:04:2c:
65:f7:34:fd:6d:cc:d3:57:f4:37:79:0a:63:a3:c0:
3d:1e:d5:72:00:8a:c4:1e:22:d4:82:87:84:62:06:
0a:0d:57:c6:6a:27:5d:43:c8:00:42:4a:c7:4d:a2:
fe:58:e9:b9:96:16:54:e3:36:8f:7b:28:60:1d:b7:
77:44:f2:92:be:34:17:c8:63:3d:14:af:e9:0f:40:
d3:06:bd:3f:8a:0d:04:96:80:2e:52:e3:5c:8d:ce:
60:2d:fa:1e:2b:07:29:f3:ad:cf:9d:74:83:ba:00:
59:0e:0b:58:65:f7:03:bc:95:3a:26:0f:f5:06:12:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:D7:36:C2:4D:E0:D8:A5:27:EB:08:85:B9:6C:8B:09:B4:A9:08
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197127.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:effb::/48
Signature Algorithm: sha256WithRSAEncryption
58:bf:a6:17:88:d1:17:86:dc:ee:82:31:73:e3:03:d9:9a:c4:
45:44:b5:7c:0c:25:0d:22:fe:9a:a6:2b:61:d7:0e:0f:6a:bc:
2f:2f:91:a0:7e:dc:39:6f:e0:01:9a:e9:ef:5c:45:1f:99:78:
10:80:b7:be:83:ee:bd:3f:c7:1f:ca:73:d3:f5:1c:68:e4:59:
59:75:f9:37:ec:8d:40:17:67:0a:37:44:79:59:51:c5:75:f2:
bc:ba:42:f7:35:5c:50:01:e5:d9:9f:20:72:3f:78:ba:99:b7:
ee:b8:d8:3b:d6:cb:5f:6b:66:c4:4b:a3:e8:22:63:6e:90:1e:
14:3f:a1:6f:3d:9b:0f:69:99:e4:32:62:59:b8:e3:19:5d:49:
cf:92:c3:01:f8:01:ca:65:b2:bc:61:5a:5b:36:4b:f6:55:0a:
33:3a:09:ca:78:65:13:60:b5:5b:8e:c7:4a:95:01:ae:a1:03:
e1:4b:e0:3f:60:c1:c6:c6:e4:ee:58:c9:1f:5e:29:e3:c0:9a:
29:7c:7e:b2:90:35:72:67:2d:d8:9b:4f:f2:aa:61:03:2c:0e:
5f:64:1f:d9:9b:52:2b:1f:e9:6d:8a:cc:11:7b:ea:b1:d2:30:
92:c7:62:d5:2b:2c:54:cc:f6:04:7b:a0:58:76:c7:62:ca:1d:
53:e1:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:39 2026 by rpki-client