Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: QmNAMjzwY/qQumdb1u9RHcoRuewv4u8Gj/BX3jmXb8Q=
Subject key identifier: 3A:8C:3E:01:14:8C:F3:04:66:8B:9A:7D:54:97:8C:72:51:4B:CF:3B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5B76EE62C629761EC419EFFD0AE1A05444A319B2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
Signing time: Sat 04 Jul 2026 13:11:30 +0000
ROA not before: Sat 04 Jul 2026 13:06:30 +0000
ROA not after: Sat 03 Jul 2027 13:11:30 +0000
asID: 197359
IP address blocks: 188.220.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:76:ee:62:c6:29:76:1e:c4:19:ef:fd:0a:e1:a0:54:44:a3:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 4 13:06:30 2026 GMT
Not After : Jul 3 13:11:30 2027 GMT
Subject: CN=3A8C3E01148CF304668B9A7D54978C72514BCF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:b0:61:89:e1:ad:81:85:9f:d6:2a:63:9a:
67:f9:1a:b6:40:59:c1:39:f8:97:3a:0c:4b:00:61:
b5:b4:31:14:a4:eb:21:25:bd:35:86:0e:5d:f0:11:
4f:70:8d:f7:7d:b0:67:61:51:30:e9:3f:b6:04:54:
f8:4e:4c:af:e3:2a:b7:30:72:ec:13:eb:84:67:59:
5e:4c:28:55:63:ed:6b:4f:17:2f:07:dd:77:85:41:
cc:0b:94:02:0a:73:26:de:d9:91:34:d9:9d:88:52:
8f:36:9d:86:08:54:6a:c9:86:49:09:1c:b6:c7:b0:
63:e1:54:24:fa:35:8f:a9:57:3f:0b:ee:8b:18:46:
32:8a:61:3f:a8:be:0d:fd:6f:db:ea:e8:08:71:ce:
b5:ef:4b:9b:de:cd:43:14:83:a4:cd:4e:fc:fc:34:
82:35:5a:d1:93:39:81:b9:24:cc:8a:e8:48:80:9a:
ea:cf:7b:64:5a:63:ac:4e:b2:17:e4:e7:b2:cd:8b:
cc:f8:6d:05:39:0c:75:82:7d:42:e6:5a:13:7b:1e:
ef:78:e3:90:15:56:a0:34:2f:88:95:9f:d3:f4:7a:
ee:f4:d0:7b:6d:dc:ba:9d:70:e4:29:16:42:cf:c2:
4f:db:f9:e5:ca:93:b4:dd:5a:ef:eb:4c:5f:6f:47:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:3E:01:14:8C:F3:04:66:8B:9A:7D:54:97:8C:72:51:4B:CF:3B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e7:9e:43:b6:a7:a0:5c:35:9c:de:5b:6a:4b:76:cb:cb:5e:
14:2b:7e:33:96:d9:3b:6f:86:4d:b2:0f:ca:19:a0:ec:3e:29:
84:2c:74:a1:ad:ed:6f:de:c6:b6:d2:ab:11:7d:5b:5c:98:e4:
49:5e:a2:9c:ee:79:d1:b5:74:d3:81:37:5b:c2:6a:c2:59:c4:
31:26:bd:4c:9f:8a:7f:35:38:bd:07:99:b8:32:cd:31:c8:59:
29:fc:ab:30:51:f0:df:25:3c:31:63:99:c6:c1:db:47:7f:9f:
0c:c7:f9:ed:bf:c0:04:98:48:23:39:ba:f5:ad:82:34:8d:d3:
e2:60:2b:43:94:14:a1:28:38:42:4e:2d:8f:73:78:ee:52:73:
39:34:4d:c4:82:df:52:2d:b5:e5:40:df:35:04:f1:66:2e:99:
b1:3a:66:58:b4:11:6c:05:c6:85:f7:13:e5:10:ac:09:c6:ff:
3f:36:e3:6f:23:f1:73:17:1a:ff:23:68:81:3f:5f:b1:a6:62:
1a:e0:88:9a:e0:47:e8:19:76:14:22:42:aa:07:6a:e2:bf:78:
ea:fa:dc:40:fc:8d:92:4c:92:d2:8d:04:50:6a:bf:7d:12:4a:
72:b6:14:b7:96:7d:36:5a:68:80:69:14:79:3e:f9:0a:cd:f7:
59:d7:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 23:19:59 2026 by rpki-client