Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197324.roa
File: AS197324.roa (raw, json)
Hash identifier: qIvlhei9/fRnl9qfEBOm2RBfqLJEu2fdd1Jh2en8vnw=
Subject key identifier: 92:FA:83:48:92:9F:8C:B1:18:DD:17:2C:03:4E:F3:2F:01:C8:9A:5C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 763B27FB2B7433312F20C448683E72F1324677BC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197324.roa
Signing time: Tue 14 Jul 2026 14:15:06 +0000
ROA not before: Tue 14 Jul 2026 14:10:06 +0000
ROA not after: Tue 13 Jul 2027 14:15:06 +0000
asID: 197324
IP address blocks: 2a14:7581:5900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3b:27:fb:2b:74:33:31:2f:20:c4:48:68:3e:72:f1:32:46:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 14 14:10:06 2026 GMT
Not After : Jul 13 14:15:06 2027 GMT
Subject: CN=92FA8348929F8CB118DD172C034EF32F01C89A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:43:3d:84:4c:a2:68:56:c8:e6:c5:00:70:
29:fe:5e:7b:08:12:30:be:e7:32:a5:79:a8:e0:39:
e9:8a:83:c5:c2:29:0c:4f:c8:e4:e6:00:4b:d2:7b:
3c:62:4c:66:94:ac:c2:49:5f:36:54:f1:7b:8c:c4:
f2:1d:88:14:e7:5f:bc:64:e5:9e:3d:83:f3:9f:a9:
d0:6c:b1:10:d8:2d:25:f1:3d:0b:4e:e8:b8:9f:6c:
79:69:73:32:c0:ba:fc:8c:99:ca:79:1e:72:98:d2:
7e:92:16:ad:ea:c8:d1:ba:3d:6f:2c:19:ff:80:af:
0a:9a:40:70:16:f4:d0:6d:8e:80:8e:19:17:5a:0b:
7d:fb:e2:c9:56:b8:d6:b0:dd:cf:52:32:c1:d9:e0:
f9:50:ec:f9:1b:86:5c:63:12:dc:96:c8:ed:5c:89:
f2:5d:8e:c0:4f:00:b1:da:6c:1d:86:93:7a:da:ca:
f5:5f:b4:1c:8c:b7:46:5c:dd:e7:9b:9b:48:c8:d3:
84:53:ff:a8:e1:49:74:93:32:a2:67:7b:6f:31:64:
58:69:96:54:b0:cb:c6:5c:e4:18:45:5f:b3:d6:45:
34:8d:2f:ec:83:66:fc:ec:a4:1c:01:33:5a:4c:73:
3f:bc:13:6b:aa:99:56:0b:a4:ff:57:af:29:6c:48:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FA:83:48:92:9F:8C:B1:18:DD:17:2C:03:4E:F3:2F:01:C8:9A:5C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5900::/40
Signature Algorithm: sha256WithRSAEncryption
51:26:3f:bf:84:df:af:5e:08:61:5b:3b:3d:36:bb:d3:48:7d:
61:a6:b4:1c:71:a4:3d:1f:4f:17:67:1b:9d:a3:00:10:09:64:
c6:7c:90:80:51:0b:15:e2:fd:e3:2a:2e:f5:3c:cd:7e:0c:6e:
25:ad:7f:c9:0c:fc:22:c4:a5:38:bb:92:37:5e:e1:8f:b3:31:
8d:0b:e8:a4:20:d6:dc:9b:e1:d1:6e:4a:04:d8:fe:60:fe:89:
39:da:59:94:c1:60:de:4b:56:7a:84:ce:3a:47:be:ab:f7:31:
da:d1:81:11:28:95:01:c6:da:6a:e6:c6:b9:48:8b:6e:d0:ef:
d3:f1:47:eb:80:95:14:3a:f8:91:33:ea:c2:bc:5f:84:ac:0a:
9f:87:81:fa:b3:05:a5:c8:0f:ea:2b:5d:c4:6d:24:79:f0:3c:
64:11:cc:e6:80:29:e5:c1:cc:4f:95:33:36:7f:24:ca:97:74:
fe:b9:46:b2:8f:85:36:3b:17:e4:52:49:d8:f0:90:09:7b:15:
d9:9d:6d:fc:07:c5:43:44:ba:78:41:10:50:68:a3:d5:ab:16:
df:18:53:94:92:a5:40:dc:1d:50:6e:59:59:f5:99:ba:41:d5:
41:71:04:66:99:0d:78:2f:d0:2c:3e:54:35:78:68:7f:79:38:
bc:e6:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:06 2026 by rpki-client