Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197528.roa
File: AS197528.roa (raw, json)
Hash identifier: xtSNiCCPCRlFQ64o3X+JHqxts40Wq1CWkGkRvOb56Vc=
Subject key identifier: CC:05:13:AE:36:FE:EB:73:39:6D:A2:CA:DD:0B:13:B3:5A:88:8B:89
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 37AF04B6C22B434FAB7A63378B05C16417E134A5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197528.roa
Signing time: Wed 20 May 2026 11:30:17 +0000
ROA not before: Wed 20 May 2026 11:25:17 +0000
ROA not after: Wed 19 May 2027 11:30:17 +0000
asID: 197528
IP address blocks: 2a14:7583:eff7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:af:04:b6:c2:2b:43:4f:ab:7a:63:37:8b:05:c1:64:17:e1:34:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 20 11:25:17 2026 GMT
Not After : May 19 11:30:17 2027 GMT
Subject: CN=CC0513AE36FEEB73396DA2CADD0B13B35A888B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:20:1a:2c:8a:13:72:2b:f8:c1:73:fb:e6:
d7:d7:31:81:05:af:39:d6:d0:91:88:b0:ff:ad:63:
b9:0c:ef:4a:3d:85:3e:0a:97:f5:52:ce:29:e1:4d:
70:d3:05:33:72:38:d6:76:64:da:9a:d2:86:51:3f:
f6:4e:16:18:37:96:e6:d8:64:75:65:c3:ec:88:3c:
20:e3:61:b7:f3:16:36:9c:0d:f2:e1:4c:23:4f:48:
82:d5:ad:39:bd:1c:ed:57:da:19:3e:ed:77:03:1c:
21:c8:42:ec:57:26:b0:a8:ff:5f:4e:4b:36:da:f0:
2c:7f:a5:1f:8c:56:98:d8:75:0c:37:28:2e:a8:49:
f9:1f:3a:3d:8b:54:da:9e:b9:e9:26:54:61:92:a2:
9a:77:bc:38:23:a6:8f:75:c1:b6:24:52:5a:cf:8e:
2a:b3:88:ed:d9:70:14:5b:04:14:dd:56:d4:30:b7:
8d:2e:fa:93:5a:94:84:8f:6c:24:a9:63:d1:5d:27:
8f:da:38:e3:a4:82:f1:28:94:93:5f:0c:8a:e9:c1:
43:b5:07:2b:27:16:59:83:d9:3f:43:5c:fb:39:dd:
e5:68:3f:64:e4:fa:37:80:12:26:f1:73:99:7a:ab:
64:30:b0:3b:39:c8:c6:e0:0a:d4:8c:24:3f:5d:c9:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:13:AE:36:FE:EB:73:39:6D:A2:CA:DD:0B:13:B3:5A:88:8B:89
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:eff7::/48
Signature Algorithm: sha256WithRSAEncryption
7f:2b:6d:4a:45:cc:9c:af:8e:73:08:d6:6c:af:44:64:70:dc:
f6:d4:06:88:2c:f4:5d:97:e4:b8:ad:c7:5e:7e:48:05:de:a6:
23:60:7b:7f:90:f7:27:a8:09:d9:43:86:7e:f4:9f:5a:87:a8:
1c:e3:d7:c1:9c:1f:81:fe:94:a0:d9:b4:f4:17:ec:a5:8d:d7:
c9:66:2b:c8:0c:4b:cd:45:a0:22:30:6d:50:ef:8a:58:7f:cc:
8d:29:9c:88:fa:da:ab:9f:15:02:77:1c:c4:da:ed:4a:9b:9a:
72:c0:74:f2:0d:61:b5:25:a1:c2:b6:8b:b5:ed:f2:18:e7:7f:
bd:48:af:69:b5:3c:cd:b9:cc:8d:b3:f7:90:95:28:4c:82:4d:
63:ee:ab:ea:10:13:7e:d4:6a:a1:6e:f3:59:e2:94:f6:34:75:
e4:4a:d0:be:34:c8:fb:44:f9:a2:bd:c8:de:bb:b5:b4:f5:14:
89:b0:d1:a7:48:8f:ea:3f:8c:4f:a0:63:e1:2d:f7:20:86:2c:
14:59:17:88:50:a1:f3:a2:4a:ad:56:b2:c1:e1:21:9c:24:72:
11:a6:87:11:f2:dc:93:92:e2:d2:2a:9b:4c:d2:d7:82:e5:d6:
f2:92:ab:bc:16:7a:85:58:fb:a1:7f:76:c7:1c:80:ac:a6:d2:
b5:b4:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:39 2026 by rpki-client