Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197974.roa
File: AS197974.roa (raw, json)
Hash identifier: NOXtFe+aUfGtV5ZEjfMdykYBff94kCWnlECLo33ZCHQ=
Subject key identifier: 89:5E:50:D8:14:C3:DF:E1:7C:CB:4A:67:83:21:2C:8F:A7:B7:A2:19
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6482BA5D4CE5DE7889C5765C5E159C485A38337D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197974.roa
Signing time: Thu 08 Oct 2026 12:41:38 +0000
ROA not before: Thu 08 Oct 2026 12:36:38 +0000
ROA not after: Thu 07 Oct 2027 12:41:38 +0000
asID: 197974
IP address blocks: 94.118.67.0/24 maxlen: 24
94.118.69.0/24 maxlen: 24
94.118.118.0/24 maxlen: 24
94.118.127.0/24 maxlen: 24
94.118.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:82:ba:5d:4c:e5:de:78:89:c5:76:5c:5e:15:9c:48:5a:38:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 8 12:36:38 2026 GMT
Not After : Oct 7 12:41:38 2027 GMT
Subject: CN=895E50D814C3DFE17CCB4A6783212C8FA7B7A219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:7a:82:d0:64:91:cf:f3:95:49:46:91:95:
ec:d3:8f:60:ca:bb:fa:25:9c:44:78:bb:2f:6f:18:
cd:e8:c1:33:11:14:99:ed:17:c2:cc:c1:7a:9b:b9:
7c:5d:65:1f:a0:d6:04:31:71:9c:42:fa:c0:5c:67:
5c:42:91:f0:ec:2f:7a:b1:8d:9f:de:c6:d9:e6:59:
4a:4f:61:8d:bd:9e:9c:d2:44:a0:67:79:2e:b8:ba:
5b:2b:b0:ec:7a:40:58:03:e1:23:99:88:ef:f1:8d:
23:fa:90:bf:3d:f2:ca:43:6c:ab:83:69:2a:81:17:
0c:1c:31:37:b7:47:09:a0:10:3d:7c:2f:96:1f:81:
d8:66:36:c0:da:89:63:89:5f:39:99:13:46:6a:68:
ee:54:7c:34:73:2e:5e:1c:7b:5f:98:4a:8d:e9:e5:
b9:88:de:c7:63:aa:91:75:6c:12:12:17:51:99:43:
17:84:d1:28:e2:8c:b9:26:8c:66:a4:c5:da:ee:3e:
28:94:ca:18:a6:3a:2e:95:dd:4a:62:7e:d3:20:94:
cb:3e:91:07:d4:03:2f:4c:6b:5f:7e:ac:e3:f1:ee:
5f:78:b6:a8:da:5d:d8:95:c9:7c:d5:63:1e:15:c1:
6d:22:62:84:0b:17:ee:1d:10:b1:c3:cc:f6:86:7c:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:50:D8:14:C3:DF:E1:7C:CB:4A:67:83:21:2C:8F:A7:B7:A2:19
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.67.0/24
94.118.69.0/24
94.118.118.0/24
94.118.127.0/24
94.118.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c3:53:5c:07:c5:dc:d8:9a:5a:fc:63:05:b6:65:09:d9:97:
10:37:c7:aa:9e:a9:cf:b3:65:3f:58:64:fb:00:c4:d1:dc:6d:
0b:90:02:73:53:8c:68:c4:bf:d3:68:ef:e1:1d:fa:84:c8:fa:
85:6c:a1:59:b6:b4:fa:37:7b:95:fc:c8:d5:87:1d:e6:87:ab:
f1:80:db:b9:82:d2:7c:1c:38:bb:ff:b8:e5:b5:e7:b7:4f:45:
e8:53:69:73:9b:71:6f:36:4d:b4:08:d2:19:f1:a7:92:5b:e6:
5a:d5:f0:c2:15:cb:0e:33:49:36:53:33:e5:48:b1:4a:9b:d6:
87:e0:f6:93:47:5f:81:7e:44:7e:fe:25:94:8c:8a:b9:17:31:
be:45:14:79:92:54:ba:09:ed:37:3e:d4:ad:a3:b5:26:bf:1e:
42:96:70:e6:85:bb:30:cf:44:a9:7f:9e:a8:d6:38:fd:8b:93:
1d:c3:ae:53:61:94:1d:4d:1e:d0:83:94:84:81:e6:48:86:15:
4b:73:68:ee:dd:fe:61:8f:87:ab:63:d7:2a:47:3c:57:ce:81:
56:5c:73:b3:bb:e3:6e:86:9c:e1:d5:b1:4c:ff:c5:5c:24:57:
c0:f9:48:ff:44:8f:73:58:7e:bc:71:49:50:ce:74:d9:71:39:
69:e4:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:19:44 2026 by rpki-client