Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: MHMk881GMOFzbZXSv1ioxOcn5eFky03KxEMvKl5csoA=
Subject key identifier: 89:28:7A:9B:F7:64:0E:2F:19:B3:A5:A0:32:99:98:8F:98:FA:2C:1C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 724C5394933BDA49429DD6991BEF1109F64E1646
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197537.roa
Signing time: Tue 23 Jun 2026 08:00:40 +0000
ROA not before: Tue 23 Jun 2026 07:55:40 +0000
ROA not after: Tue 22 Jun 2027 08:00:40 +0000
asID: 197537
IP address blocks: 141.11.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4c:53:94:93:3b:da:49:42:9d:d6:99:1b:ef:11:09:f6:4e:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 23 07:55:40 2026 GMT
Not After : Jun 22 08:00:40 2027 GMT
Subject: CN=89287A9BF7640E2F19B3A5A03299988F98FA2C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:2f:b9:3f:e6:e7:57:1e:2f:f9:ab:e7:a9:
c4:5f:e0:32:53:ff:19:20:82:3a:a0:f0:06:91:e0:
31:43:fd:ac:12:01:5b:b9:e1:8e:23:83:06:4a:08:
6b:db:b5:fd:d6:2d:99:1e:43:51:2d:75:69:b0:0e:
6e:7f:f9:f5:4a:f3:40:ae:67:8f:a1:0f:6b:97:a2:
47:63:0e:1f:2b:39:4c:f5:cc:c7:42:93:55:4b:1c:
92:df:5c:e6:a0:16:34:9b:a8:bd:a4:d8:ce:0e:7b:
5d:80:df:c9:ef:60:5b:05:4f:e5:09:5f:5d:be:d5:
ea:ef:88:e4:f5:4c:53:ff:1c:e0:ad:36:09:f2:81:
3f:c9:9b:7a:78:03:67:ac:e8:61:ca:a4:4e:7c:e0:
d8:1f:ea:30:93:ab:cd:cf:6e:8e:72:35:58:77:b9:
19:3d:d4:70:1a:2c:18:31:61:45:39:bd:1a:c6:c7:
58:0c:9c:52:c5:ea:6c:1c:7b:86:e7:80:26:91:16:
48:df:1e:d8:76:85:05:d6:c1:9d:7e:88:9c:93:78:
ae:55:f0:11:56:56:f6:8c:da:61:32:a3:31:7b:ea:
64:09:14:2f:61:07:31:99:0e:f6:af:32:93:99:c7:
4f:e6:cb:26:59:a8:6c:ea:0d:70:5a:4a:cc:c4:74:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:28:7A:9B:F7:64:0E:2F:19:B3:A5:A0:32:99:98:8F:98:FA:2C:1C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.208.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:7d:1b:20:0b:fe:ef:6b:eb:d3:43:7a:57:4c:54:67:a6:ae:
37:8a:46:1f:a4:98:ef:b6:ef:52:93:e2:f9:8b:34:4a:85:c2:
de:14:f6:6d:ea:79:50:ab:4a:7d:c6:d2:eb:fb:a0:64:e9:a8:
5b:45:7d:28:e0:39:92:fb:ce:2d:ba:de:6c:87:c7:7c:92:b7:
c3:9f:d9:ff:96:05:90:77:b7:33:de:4a:82:6b:be:77:ea:1e:
0b:90:b0:e6:4f:b5:ec:50:15:24:a5:08:88:d7:2f:18:47:65:
11:5f:f0:58:97:45:1b:51:8e:6c:aa:8c:cb:f2:7b:fe:9c:47:
d2:1f:1d:de:1f:02:c6:e7:df:be:ce:09:45:29:47:e9:4f:58:
01:de:44:fe:d1:51:6e:c3:c4:43:52:96:40:d2:99:94:25:f5:
2b:63:5b:a5:aa:42:0c:8c:49:77:15:b6:62:bf:7a:be:f8:30:
8b:2d:43:61:42:0d:34:18:f6:0a:de:48:24:2e:15:d6:c1:ec:
4c:4b:a6:17:b1:b3:09:a8:6d:b6:91:89:db:28:e1:62:08:e7:
fe:d0:1a:92:59:ea:15:77:5d:94:f6:f9:e5:fc:8d:54:65:e1:
18:38:99:27:fa:30:99:60:af:e6:9c:e9:d2:5e:d6:ba:eb:8c:
14:9b:99:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUckxTlJM72klCndaZG+8RCfZOFkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA2MjMwNzU1NDBaFw0yNzA2MjIwODAwNDBaMDMxMTAvBgNV
BAMTKDg5Mjg3QTlCRjc2NDBFMkYxOUIzQTVBMDMyOTk5ODhGOThGQTJDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JS+5P+bnVx4v+avnqcRf4DJT
/xkggjqg8AaR4DFD/awSAVu54Y4jgwZKCGvbtf3WLZkeQ1EtdWmwDm5/+fVK80Cu
Z4+hD2uXokdjDh8rOUz1zMdCk1VLHJLfXOagFjSbqL2k2M4Oe12A38nvYFsFT+UJ
X12+1erviOT1TFP/HOCtNgnygT/Jm3p4A2es6GHKpE584Ngf6jCTq83Pbo5yNVh3
uRk91HAaLBgxYUU5vRrGx1gMnFLF6mwce4bngCaRFkjfHth2hQXWwZ1+iJyTeK5V
8BFWVvaM2mEyozF76mQJFC9hBzGZDvavMpOZx0/myyZZqGzqDXBaSszEdEW3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUiSh6m/dkDi8Zs6WgMpmYj5j6LBwwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTk3NTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDPfRsgC/7va+vTQ3pXTFRnpq43ikYfpJjvtu9S
k+L5izRKhcLeFPZt6nlQq0p9xtLr+6Bk6ahbRX0o4DmS+84tut5sh8d8krfDn9n/
lgWQd7cz3kqCa7536h4LkLDmT7XsUBUkpQiI1y8YR2URX/BYl0UbUY5sqozL8nv+
nEfSHx3eHwLG59++zglFKUfpT1gB3kT+0VFuw8RDUpZA0pmUJfUrY1ulqkIMjEl3
FbZiv3q++DCLLUNhQg00GPYK3kgkLhXWwexMS6YXsbMJqG22kYnbKOFiCOf+0BqS
WeoVd12U9vnl/I1UZeEYOJkn+jCZYK/mnOnSXta664wUm5mM
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:29 2026 by rpki-client