Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197260.roa
File: AS197260.roa (raw, json)
Hash identifier: sdEdZTYoG0FhrLLxXfpX14UedkHDS9kJb6pgw9hkczM=
Subject key identifier: 38:6F:C2:F2:55:26:DB:A6:F6:B5:15:6D:15:91:DE:91:06:E9:D0:A9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3D44A7F877F78FBE12DDDA17E71E86A9F68FD0DD
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197260.roa
Signing time: Wed 07 Oct 2026 20:37:43 +0000
ROA not before: Wed 07 Oct 2026 20:32:43 +0000
ROA not after: Wed 06 Oct 2027 20:37:43 +0000
asID: 197260
IP address blocks: 2a14:7583:8000::/48 maxlen: 48
2a14:7583:8001::/48 maxlen: 48
2a14:7583:8002::/48 maxlen: 48
2a14:7583:8003::/48 maxlen: 48
2a14:7583:8004::/48 maxlen: 48
2a14:7583:8005::/48 maxlen: 48
2a14:7583:8006::/48 maxlen: 48
2a14:7583:8007::/48 maxlen: 48
2a14:7583:8008::/48 maxlen: 48
2a14:7583:8009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:44:a7:f8:77:f7:8f:be:12:dd:da:17:e7:1e:86:a9:f6:8f:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 7 20:32:43 2026 GMT
Not After : Oct 6 20:37:43 2027 GMT
Subject: CN=386FC2F25526DBA6F6B5156D1591DE9106E9D0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:96:e1:b6:bd:c3:51:75:6d:0c:fb:c8:e6:
5a:ea:37:f9:a4:2e:bc:27:31:6f:46:a2:bf:70:ae:
53:16:d9:15:12:b7:7c:8a:74:f9:d1:71:b2:6b:2b:
85:e0:5d:8b:90:2b:8e:8b:25:12:22:fb:c0:59:8d:
b3:ab:62:88:87:23:48:12:5b:1e:8c:70:59:70:e5:
ac:33:6b:a9:27:b1:53:dd:98:64:71:6e:44:08:38:
34:5f:c4:4f:ac:f3:61:2d:0e:4b:d3:25:63:d6:03:
93:4a:28:b6:e2:10:2c:f3:30:10:ad:cf:4e:ca:4f:
47:b7:6f:e6:1c:af:da:11:85:7f:4e:47:80:a4:97:
89:ef:2f:1f:97:84:48:2c:5b:62:3c:75:84:98:7e:
15:91:50:66:4a:fc:30:85:ef:0a:2b:7f:0d:4c:b4:
8f:e5:d1:df:f0:a1:b0:3c:5d:59:8e:ff:ba:76:9a:
90:ad:d7:b1:24:5e:9c:a4:c1:11:13:f1:6c:e2:f7:
db:a5:97:17:16:51:24:27:42:ad:9d:ae:aa:b8:ad:
fe:21:78:8e:4b:3a:19:ae:82:aa:4c:d9:3c:06:09:
91:b2:32:19:ec:80:5b:19:94:10:42:c3:df:b0:d7:
53:43:b2:60:72:ad:0c:ee:3a:9b:a4:19:af:31:68:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:C2:F2:55:26:DB:A6:F6:B5:15:6D:15:91:DE:91:06:E9:D0:A9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:8000::-2a14:7583:8009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:cc:a9:4c:10:70:89:ea:10:e7:57:e7:2c:ca:79:12:78:71:
b3:65:8f:d6:0a:df:e2:5e:52:dc:7b:5f:25:98:41:b9:f8:a9:
b1:bd:3a:83:6f:8d:b7:9c:2e:eb:93:85:06:11:46:52:cf:af:
1f:1b:0d:37:36:61:77:6d:b5:f1:65:4e:df:cb:f3:62:0c:7b:
4b:91:6a:93:a7:1b:12:4d:2d:cd:b0:7e:45:2d:ad:62:92:49:
6c:39:c7:b5:dc:06:9a:ac:3e:e9:0c:b6:3c:e3:63:32:de:f6:
6a:ac:fb:18:ee:da:11:e3:c0:22:e8:b0:71:d9:08:f2:75:76:
ac:45:63:79:f3:01:ac:38:75:34:30:e2:9d:c8:21:db:12:9c:
6d:26:52:cf:bd:0f:77:66:a0:6f:07:4e:ff:0d:ad:63:8c:79:
cd:fa:5e:16:13:7c:b6:82:32:bc:b5:a6:37:f0:9f:15:a4:af:
7e:a6:d7:00:75:be:86:08:a3:4a:50:a1:0f:67:59:60:5a:8f:
04:2c:cf:91:c7:46:55:76:38:47:71:09:3b:41:cc:ac:2c:ae:
96:10:24:c8:aa:95:23:1b:e9:2f:70:86:40:dc:9f:5f:a8:b2:
9e:ca:e4:db:b9:b4:f6:25:a6:10:bb:ab:ce:87:08:32:02:43:
07:6c:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:13:07 2026 by rpki-client