Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197331.roa
File: AS197331.roa (raw, json)
Hash identifier: jJyQcF7jGWkNrG0SHsI2pCIvuu8g6kXDN5QWlzXpA+4=
Subject key identifier: AE:2B:DD:18:42:29:14:12:47:85:43:99:9A:83:9F:D8:28:61:46:7B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 75212E616620B620ECA186A21448539405723B8F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197331.roa
Signing time: Fri 19 Jun 2026 11:53:48 +0000
ROA not before: Fri 19 Jun 2026 11:48:48 +0000
ROA not after: Fri 18 Jun 2027 11:53:48 +0000
asID: 197331
IP address blocks: 78.105.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:21:2e:61:66:20:b6:20:ec:a1:86:a2:14:48:53:94:05:72:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 19 11:48:48 2026 GMT
Not After : Jun 18 11:53:48 2027 GMT
Subject: CN=AE2BDD1842291412478543999A839FD82861467B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:38:51:80:bf:c4:2d:7a:c0:12:6f:85:b0:
cb:31:8c:47:39:15:27:c2:f3:1a:59:b2:47:0c:50:
ed:ec:b1:83:98:48:63:a3:f7:46:d4:c3:2b:ea:d7:
5b:f5:75:a7:63:8f:0f:5a:c1:0b:e9:40:a2:8c:cf:
61:db:00:30:ec:40:30:63:2c:48:57:db:2d:01:18:
7a:a7:5c:ea:6f:ef:8b:67:ee:7b:01:b7:25:52:cb:
e4:ff:e5:ef:da:0a:93:fa:bd:aa:4c:cf:13:e6:54:
a3:9a:8d:3c:e9:a0:2f:8e:3e:bd:d6:bb:33:b3:62:
0e:b3:a3:50:65:e2:a1:ca:b7:29:a4:4b:57:07:92:
32:a6:e8:bd:57:09:f8:6d:d4:23:f1:3a:f9:59:49:
54:ea:70:e0:1d:a0:4e:1f:4d:0a:05:f2:76:3a:e4:
2f:31:aa:55:c7:bd:ce:8e:6c:e2:f8:29:40:79:57:
84:2e:b8:53:03:1f:36:cf:c8:89:9a:3e:a3:ad:f9:
37:e4:7c:02:75:b5:aa:e0:a2:38:8f:91:b0:03:b8:
3f:bd:38:6a:c4:3c:a4:53:62:5b:90:49:d1:d0:fa:
f7:4f:b7:4c:46:39:55:40:16:31:e5:df:51:d6:3d:
cd:24:d5:6c:83:54:30:b8:36:d0:41:78:7b:23:1f:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:DD:18:42:29:14:12:47:85:43:99:9A:83:9F:D8:28:61:46:7B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:14:5e:ff:a1:d3:72:26:06:54:76:9d:5e:1d:78:1d:f4:0e:
82:44:69:83:8d:7f:c6:ef:9b:fa:2c:e7:63:af:32:d3:63:eb:
4f:18:cb:e3:ad:fe:fd:33:1d:be:d0:32:b3:97:b9:a3:8b:1a:
4a:78:f6:f8:04:b9:b4:be:72:df:64:2e:a2:59:42:d4:eb:39:
6c:b0:11:a3:7e:72:2b:a5:35:d0:ea:d6:89:c2:f8:7f:d0:9a:
ad:b8:5e:22:53:a9:ec:b5:d4:67:a0:35:52:c0:c5:16:b3:e8:
57:45:37:48:30:ef:fc:de:88:bd:9d:24:37:70:a3:40:3b:17:
50:f0:23:d1:cd:e3:03:82:f4:57:67:c6:d3:bd:e0:5b:b3:82:
6d:09:8f:fc:41:61:ed:e9:9a:6f:d4:da:31:20:0c:8e:dd:d1:
c5:bf:fe:ec:53:c3:7f:c4:de:b8:ea:62:b9:4d:09:8b:27:7e:
d2:57:ca:46:06:76:5e:16:f6:56:cc:09:9c:99:49:20:f0:63:
32:eb:c3:c6:d2:30:7e:03:57:c5:6e:c7:78:88:ce:9a:e8:b9:
e4:31:d4:6e:c5:23:7b:28:43:e0:14:b2:59:75:a7:cf:12:54:
35:06:98:63:33:3a:54:9b:0a:e3:a4:0f:c0:6b:77:33:38:db:
9e:d3:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:13 2026 by rpki-client