Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197226.roa
File: AS197226.roa (raw, json)
Hash identifier: ajqgZaupS5lAcPhNXXDA/hP1BpQ+1KByraWLK/Bs6SE=
Subject key identifier: 87:44:49:27:2C:3E:B7:68:2E:28:7D:C7:CC:19:7B:23:F5:4B:CA:AF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0902789E8FDA256A2684FCAE68049D43E801EC70
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197226.roa
Signing time: Fri 02 Oct 2026 09:00:44 +0000
ROA not before: Fri 02 Oct 2026 08:55:44 +0000
ROA not after: Fri 01 Oct 2027 09:00:44 +0000
asID: 197226
IP address blocks: 178.95.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:02:78:9e:8f:da:25:6a:26:84:fc:ae:68:04:9d:43:e8:01:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 2 08:55:44 2026 GMT
Not After : Oct 1 09:00:44 2027 GMT
Subject: CN=874449272C3EB7682E287DC7CC197B23F54BCAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:fa:28:2f:f8:ec:dd:ab:f4:f4:c8:a8:fb:
ca:4a:3c:ec:a3:83:20:9d:1a:75:8c:c2:29:b6:35:
41:2c:4f:7f:05:4d:a9:64:5f:63:fd:0f:9d:f9:74:
43:34:d5:70:78:91:20:e9:e1:21:45:21:88:b7:bd:
0d:ba:9f:c1:e6:13:bc:2b:9f:bd:c0:c1:45:18:ed:
26:f2:6b:f5:e9:28:21:a3:19:fb:4e:ae:98:2c:09:
16:84:13:4a:f7:d9:02:4b:55:12:22:94:e1:7f:c9:
61:0a:fa:41:46:79:0c:72:61:ce:b7:c4:52:d5:35:
3c:b9:9e:53:2d:57:1a:7e:17:5e:f3:7f:d6:6f:d4:
2a:d9:c3:c4:cb:e9:ce:79:d8:13:84:33:70:20:06:
18:19:c3:27:d8:bc:44:75:3a:bb:b3:10:91:21:45:
d3:cd:ef:20:b8:35:80:b5:04:dd:17:36:5d:45:f4:
85:73:93:a9:dc:9a:06:11:4a:14:90:69:d1:6d:6b:
28:79:19:29:59:d2:86:2d:0a:43:40:79:56:e8:ce:
8e:46:94:56:c0:95:84:d4:8e:45:82:d0:ab:a5:b2:
ea:78:d2:1a:fa:f1:4c:20:6a:87:bf:73:ed:09:ab:
02:43:74:d9:6f:44:11:be:9c:3b:d0:d1:3a:36:c4:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:49:27:2C:3E:B7:68:2E:28:7D:C7:CC:19:7B:23:F5:4B:CA:AF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0a:10:9b:fd:f9:25:95:2a:82:61:15:f3:0d:ce:19:d4:ed:
34:3f:3a:21:ab:99:a0:5a:0f:5d:a1:28:07:b0:c2:ef:8a:65:
e0:03:46:de:cf:cc:bc:7b:7f:2f:a8:2e:af:4c:5a:0e:0a:41:
2d:42:c1:b5:c3:ea:5b:ba:80:10:8f:13:58:1e:dc:d4:13:17:
3d:ed:0a:dd:82:27:02:e9:22:01:8b:1e:98:6e:29:78:c5:2b:
3d:11:45:4b:22:00:ee:9e:6d:0e:3c:4b:da:6d:c7:91:5e:5f:
52:a5:3c:09:b5:de:3d:5d:b1:fa:6d:47:2e:c3:83:e7:1c:a7:
02:ee:b1:a5:fb:26:c4:c4:8d:a6:88:12:50:fc:69:09:ad:69:
9d:25:08:fb:0d:c2:9c:76:c8:f7:6b:82:95:fa:23:01:6b:3c:
9c:77:66:17:40:86:5d:79:53:6c:ed:7e:3b:92:86:c0:01:0f:
ad:02:be:06:0e:ac:14:b1:f4:d5:ac:f4:87:50:b2:3b:a6:f0:
a5:ac:56:66:98:a1:7f:88:b1:d3:bd:32:71:5f:6d:60:4a:dc:
5d:85:0c:0e:b2:c3:ba:44:20:7b:10:7b:81:32:75:26:31:a2:
02:52:c5:b8:82:3f:2a:2d:2b:b7:a1:6f:9e:7b:67:33:00:16:
50:59:a5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:13:51 2026 by rpki-client