Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS197842.roa
File: AS197842.roa (raw, json)
Hash identifier: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=
Subject key identifier: D2:13:1E:1D:C1:CA:71:79:EA:56:ED:BF:5F:A8:D8:94:2B:97:51:1E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 3D572ADCDE872C6BFF690B18DA403D6656A1D0ED
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS197842.roa
Signing time: Tue 30 Jun 2026 07:33:10 +0000
ROA not before: Tue 30 Jun 2026 07:28:10 +0000
ROA not after: Tue 29 Jun 2027 07:33:10 +0000
asID: 197842
IP address blocks: 177.29.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 14:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:57:2a:dc:de:87:2c:6b:ff:69:0b:18:da:40:3d:66:56:a1:d0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jun 30 07:28:10 2026 GMT
Not After : Jun 29 07:33:10 2027 GMT
Subject: CN=D2131E1DC1CA7179EA56EDBF5FA8D8942B97511E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:fb:31:57:21:60:68:b3:83:78:11:f1:37:
0e:4d:f9:2c:b8:b4:2b:2b:6d:f4:5d:64:88:44:87:
cb:61:d4:0c:4e:54:bb:d7:5d:38:cb:dd:7c:85:f4:
e4:05:3b:41:9c:8a:fd:2d:e8:19:b6:28:ec:6f:f5:
94:45:02:31:a6:77:c0:32:d4:a1:93:54:7b:80:22:
9f:ec:d3:05:fb:b2:a3:f8:71:b9:b5:3c:7f:9d:ef:
64:dd:31:4c:b4:89:8b:b6:ef:0a:c5:28:4a:f4:11:
d8:a0:7f:5d:80:27:5d:14:5d:d3:16:d5:e2:bd:7e:
6c:23:ae:f8:05:0e:90:2e:b0:bf:12:9a:57:d7:5c:
4e:2f:b4:b3:31:b2:87:43:6f:e6:11:64:64:6e:dd:
e3:32:e9:59:7c:69:c1:2f:22:53:41:8d:3f:db:02:
8a:04:52:7b:17:86:38:ae:05:9e:e2:7b:f7:8f:ad:
a6:0a:ff:bd:99:dd:4f:0f:f9:01:58:46:79:2c:d2:
9a:73:1e:ce:de:fe:83:c8:f3:7f:09:88:47:b1:f1:
2c:23:fe:8c:e7:7b:f4:ce:bb:df:2f:77:a4:76:fc:
cd:12:05:40:15:e9:63:c7:4f:62:dc:bc:fa:ca:3b:
a9:a0:d5:09:1a:b3:a8:7e:54:19:10:80:b7:46:af:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:1E:1D:C1:CA:71:79:EA:56:ED:BF:5F:A8:D8:94:2B:97:51:1E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS197842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6d:e9:39:05:96:2a:fa:17:ac:57:bb:c9:4e:ad:4b:9c:99:
09:84:0d:16:50:60:fe:81:b2:22:a5:9c:21:a6:a7:48:0e:0f:
96:94:c2:a5:aa:10:32:8a:1a:fe:d7:8b:64:83:86:76:1e:f4:
fb:77:f8:5b:fb:85:7a:a8:ec:db:1e:fa:57:52:a6:cf:3c:af:
ad:37:b8:92:25:2a:08:da:37:05:b9:51:44:2f:ce:7f:20:a4:
2d:b1:f1:41:8a:49:68:70:7e:81:17:01:84:a0:4c:b3:99:c8:
f6:9d:7c:e0:49:37:c0:d4:39:c5:39:aa:1f:9b:da:ad:65:ba:
ea:33:1f:47:e9:fb:e5:f8:0f:b9:40:f5:28:a5:a1:4b:fc:0a:
f2:77:93:7b:71:73:9f:36:16:10:94:5e:e5:d6:50:24:22:94:
d2:11:1c:75:10:fa:94:a4:44:ac:08:34:4b:61:fa:78:e9:76:
7d:4d:9a:ef:a3:db:bb:3c:52:f5:4f:75:8f:86:3f:a4:b8:24:
1b:3f:20:f8:74:3e:bd:aa:84:00:53:af:8c:00:48:35:00:33:
36:4e:5e:be:15:03:c7:02:e7:fe:1f:6c:16:ac:69:dd:14:d7:
30:c6:47:a8:97:bf:50:ab:6f:08:4a:2c:58:38:d8:f7:ff:5f:
c9:3a:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:17 2026 by rpki-client