Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197173.roa
File: AS197173.roa (raw, json)
Hash identifier: PGPhHsojC6J62A+qX2aHwfQw9q0AsbPRD8OjcmXY+yo=
Subject key identifier: D9:2B:5F:40:0F:AB:67:20:55:08:F8:5B:22:46:7D:41:F2:03:DD:BB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 76B560A4078C91DAF6F4AD9FA7D393CBB91AA63F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197173.roa
Signing time: Thu 03 Sep 2026 12:14:22 +0000
ROA not before: Thu 03 Sep 2026 12:09:22 +0000
ROA not after: Thu 02 Sep 2027 12:14:22 +0000
asID: 197173
IP address blocks: 178.93.194.0/24 maxlen: 24
178.95.144.0/24 maxlen: 24
178.95.145.0/24 maxlen: 24
178.95.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b5:60:a4:07:8c:91:da:f6:f4:ad:9f:a7:d3:93:cb:b9:1a:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 12:09:22 2026 GMT
Not After : Sep 2 12:14:22 2027 GMT
Subject: CN=D92B5F400FAB67205508F85B22467D41F203DDBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:ec:43:20:88:cd:54:14:37:c7:1d:be:eb:
0d:60:18:b2:44:ff:9c:d3:b3:13:c8:4c:27:3a:91:
59:a2:6e:f1:f4:20:82:bd:6e:c3:a8:10:ff:7a:29:
37:ab:da:97:26:d1:89:79:dc:96:ac:91:18:fe:36:
60:fd:7e:49:83:ca:8d:09:7e:71:01:2d:1d:80:ac:
3f:a4:5d:f2:98:7e:18:24:47:01:f7:75:0b:91:6d:
9f:f2:75:6d:73:69:b4:04:d6:69:97:96:5e:4f:73:
f3:e8:17:11:b5:0b:1d:03:e5:c6:62:dd:7d:7c:1a:
99:04:76:f6:b3:7f:21:b0:70:45:6e:7a:a5:d9:99:
54:3c:b7:2c:01:1d:23:d5:28:8e:44:2d:09:97:53:
48:ea:bc:9f:c3:6b:93:00:fe:85:87:e7:1b:91:4f:
46:15:32:1c:87:61:e6:02:62:cc:10:09:7c:6e:9f:
c3:62:2f:c9:45:06:79:d3:95:21:13:0a:d8:4c:98:
67:03:e6:aa:e3:47:ea:43:1e:d7:8a:f9:39:c7:29:
2c:d7:15:76:f3:78:78:f0:48:76:e3:9c:36:15:c5:
e5:b7:45:57:4b:3f:db:0c:1e:12:b2:9d:f4:6c:a4:
d4:d8:90:a2:59:2e:b8:86:65:21:f5:14:17:d1:88:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:5F:40:0F:AB:67:20:55:08:F8:5B:22:46:7D:41:F2:03:DD:BB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.194.0/24
178.95.144.0/23
178.95.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a2:b4:74:bd:64:38:ed:7e:1a:26:92:bd:2e:fb:97:bd:08:
33:1c:0e:0f:27:b2:1e:e0:1a:42:e9:d8:54:75:33:8a:48:8d:
45:2e:25:ae:18:7d:ae:ca:3f:61:bd:f0:d5:af:3f:ed:43:1f:
8e:fe:66:8a:70:cd:15:a1:24:dd:df:7c:95:aa:56:e7:d6:92:
3f:29:c4:c0:90:96:ff:e1:d4:f9:b1:68:85:2b:a3:1b:53:f6:
3d:50:ea:26:84:69:bf:68:cb:db:13:98:5a:4a:6f:18:7b:19:
b6:5d:4b:bd:2b:ee:5b:c0:98:1a:8e:df:ae:e0:70:87:37:65:
d4:38:61:94:1c:34:18:b4:0a:5e:ce:52:fb:47:69:d2:21:33:
e4:53:4f:21:89:54:0d:10:a8:3f:a2:d4:db:d8:55:78:fe:2f:
e4:41:cf:2f:0d:1f:b2:84:d5:39:de:7b:44:60:d4:d9:b4:ee:
84:ca:04:80:f6:c4:f5:d0:2f:85:f1:f9:85:4a:4d:44:d7:81:
62:b4:4a:f1:c3:85:34:3e:73:1d:2c:e0:47:c4:17:e2:dd:80:
e0:b0:22:2d:e1:26:26:4d:a6:36:1e:b1:ca:50:98:d1:4b:d1:
d5:43:6c:22:8e:fa:bc:38:bd:77:cd:da:38:13:db:7d:a6:75:
b9:b9:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:17 2026 by rpki-client