Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197178.roa
File: AS197178.roa (raw, json)
Hash identifier: bCurNwRjRGCrQo3p7HSUST456zgo8L0aw1gImH0cqU0=
Subject key identifier: 76:4A:25:9E:A9:82:CB:7A:A5:E4:1C:64:00:9F:0A:9E:AA:DD:0A:33
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 325556C387C7887AD0BBF0D06CA84A81C0076C48
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197178.roa
Signing time: Tue 02 Jun 2026 21:02:07 +0000
ROA not before: Tue 02 Jun 2026 20:57:07 +0000
ROA not after: Tue 01 Jun 2027 21:02:07 +0000
asID: 197178
IP address blocks: 2a14:7581:fec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:55:56:c3:87:c7:88:7a:d0:bb:f0:d0:6c:a8:4a:81:c0:07:6c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 2 20:57:07 2026 GMT
Not After : Jun 1 21:02:07 2027 GMT
Subject: CN=764A259EA982CB7AA5E41C64009F0A9EAADD0A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:57:74:4d:7f:51:a7:cf:ae:c5:d9:d1:76:
07:a7:ce:84:91:76:19:b5:f3:13:ad:c9:55:ec:1c:
0f:f8:da:54:b2:32:88:00:67:f0:59:df:45:4c:bb:
d8:87:d8:85:99:11:e3:e0:a4:28:57:67:d1:78:a5:
9f:c6:cb:f8:ee:08:21:54:8c:01:1e:bc:5c:c9:28:
4b:52:3c:92:1d:8d:de:b8:3f:d0:64:76:ea:29:f1:
8a:76:72:81:90:da:19:be:fd:27:3c:4b:eb:f4:c8:
71:a6:32:82:5d:f4:4b:82:82:66:cf:41:60:f7:f8:
36:56:9e:44:15:cb:95:23:33:9d:ed:59:ba:5c:d1:
8b:c8:3c:35:9b:0f:9e:d1:e2:db:ae:38:40:9c:2a:
2e:16:3c:67:ca:bc:6e:2f:6b:20:81:10:57:8e:ac:
4f:98:2a:ce:9c:f4:14:fd:3d:7f:f4:ea:a1:a3:fc:
1a:ba:83:e3:8a:6c:3d:8b:7e:01:7f:a0:eb:eb:af:
b5:af:56:fe:dc:3d:6f:c4:be:f1:9b:86:1c:41:58:
9c:c5:e4:81:0e:4e:1e:23:b7:06:ba:10:db:08:0e:
d3:57:d3:25:16:11:33:11:51:17:d3:63:88:e4:68:
81:2e:c8:81:ff:53:ce:ac:79:dc:b7:3f:b7:af:2b:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:25:9E:A9:82:CB:7A:A5:E4:1C:64:00:9F:0A:9E:AA:DD:0A:33
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197178.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fec::/48
Signature Algorithm: sha256WithRSAEncryption
66:3f:76:e9:34:93:49:40:cd:db:27:ab:27:bb:03:ad:91:3d:
35:00:9b:c1:ac:b3:9d:bf:a0:28:1c:96:fe:1c:7e:78:3f:2d:
c7:0f:af:69:af:77:51:c7:de:3f:a4:63:d9:16:6e:01:59:03:
8c:fe:4b:32:6b:cd:56:42:38:0b:80:45:cb:3c:43:92:ed:b3:
c7:d8:69:89:fc:a2:05:73:e6:73:9a:ea:41:82:fc:e1:a8:10:
4f:dc:1c:7e:75:3c:7f:51:12:6d:e5:c2:c4:92:e2:70:bc:5d:
09:e4:9b:6e:04:0e:87:27:65:5b:77:af:ab:b5:b8:52:a9:46:
a9:ca:74:9f:db:13:68:11:bc:32:17:59:d6:6d:e6:87:c0:0b:
aa:78:6b:e5:c7:a3:e8:a5:5f:d8:af:c6:2d:90:08:bd:33:d8:
1a:ea:84:90:fc:7e:b4:7e:6e:0a:94:6e:39:30:cd:d3:ea:24:
d0:c3:1d:e3:f5:08:39:84:6e:4e:9f:8c:02:94:ac:76:a8:58:
f8:2c:b9:66:6d:5b:84:a8:f9:18:f9:e3:92:79:6d:03:cf:91:
97:f1:c4:54:e4:52:c0:0f:c7:a9:1b:d4:81:10:61:b4:4e:b3:
91:ab:f5:cd:50:93:4d:66:a6:11:1e:34:10:57:fa:54:70:a1:
70:31:98:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMlVWw4fHiHrQu/DQbKhKgcAHbEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA2MDIyMDU3MDdaFw0yNzA2MDEyMTAyMDdaMDMxMTAvBgNV
BAMTKDc2NEEyNTlFQTk4MkNCN0FBNUU0MUM2NDAwOUYwQTlFQUFERDBBMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RVd0TX9Rp8+uxdnRdgenzoSR
dhm18xOtyVXsHA/42lSyMogAZ/BZ30VMu9iH2IWZEePgpChXZ9F4pZ/Gy/juCCFU
jAEevFzJKEtSPJIdjd64P9Bkduop8Yp2coGQ2hm+/Sc8S+v0yHGmMoJd9EuCgmbP
QWD3+DZWnkQVy5UjM53tWbpc0YvIPDWbD57R4tuuOECcKi4WPGfKvG4vayCBEFeO
rE+YKs6c9BT9PX/06qGj/Bq6g+OKbD2LfgF/oOvrr7WvVv7cPW/EvvGbhhxBWJzF
5IEOTh4jtwa6ENsIDtNX0yUWETMRURfTY4jkaIEuyIH/U86sedy3P7evK7BHAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUdkolnqmCy3ql5BxkAJ8KnqrdCjMwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTk3MTc4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gQ/sMA0GCSqGSIb3DQEBCwUAA4IBAQBmP3bpNJNJQM3bJ6snuwOtkT01AJvBrLOd
v6AoHJb+HH54Py3HD69pr3dRx94/pGPZFm4BWQOM/ksya81WQjgLgEXLPEOS7bPH
2GmJ/KIFc+ZzmupBgvzhqBBP3Bx+dTx/URJt5cLEkuJwvF0J5JtuBA6HJ2Vbd6+r
tbhSqUapynSf2xNoEbwyF1nWbeaHwAuqeGvlx6PopV/Yr8YtkAi9M9ga6oSQ/H60
fm4KlG45MM3T6iTQwx3j9Qg5hG5On4wClKx2qFj4LLlmbVuEqPkY+eOSeW0Dz5GX
8cRU5FLAD8epG9SBEGG0TrORq/XNUJNNZqYRHjQQV/pUcKFwMZiS
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:41 2026 by rpki-client