Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: Jc+/7bdtVX5iaKR5wiHxOmt9KkzxQ8OP4UV5PdDIGlE=
Subject key identifier: 12:E4:20:58:52:89:BE:40:AD:43:24:64:5F:0C:11:72:71:18:3F:0B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3F9F18B6BFF0FA168AA30783F4EF86B8CAEC5D2B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
Signing time: Sun 28 Jun 2026 06:44:58 +0000
ROA not before: Sun 28 Jun 2026 06:39:58 +0000
ROA not after: Sun 27 Jun 2027 06:44:58 +0000
asID: 197359
IP address blocks: 178.93.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9f:18:b6:bf:f0:fa:16:8a:a3:07:83:f4:ef:86:b8:ca:ec:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 28 06:39:58 2026 GMT
Not After : Jun 27 06:44:58 2027 GMT
Subject: CN=12E420585289BE40AD4324645F0C117271183F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:55:2e:0a:eb:22:8c:e9:06:a9:4f:5c:08:
a7:ed:00:be:61:d5:87:47:8f:e1:ad:ba:07:b9:0d:
64:e8:7e:d5:97:be:92:e1:39:de:8e:03:a7:5f:4c:
4c:6f:ae:e9:0e:0b:fa:42:13:0d:e0:95:90:ea:fa:
8e:86:58:8d:d9:42:59:8a:b5:b3:5f:c2:d2:72:5f:
2b:06:1e:79:21:fc:b5:13:d4:a4:4c:00:e8:7d:c0:
08:75:08:96:ff:2d:9c:50:1d:83:bc:c0:c9:6f:5e:
66:a9:1b:cf:f2:2d:bd:50:97:67:08:43:ac:25:f1:
29:68:99:d3:0c:68:15:0b:a1:df:35:27:f1:22:b1:
49:f0:30:20:32:63:da:43:70:71:23:90:c2:5e:d6:
3d:39:4c:23:9c:cc:46:38:6f:b9:db:32:d5:22:1d:
f0:e2:3f:f7:21:f5:2e:52:f8:b3:bf:6f:a5:e0:82:
9b:4a:74:fd:f9:68:70:09:72:76:0c:19:98:97:a1:
08:69:93:2c:5e:0b:df:5a:1a:20:1f:a6:d7:54:ff:
ef:7c:a0:fc:b0:9e:d8:b3:70:37:f0:1f:33:13:d4:
9d:c0:b6:b7:88:d4:66:29:0d:bc:12:21:45:b7:cc:
de:28:f2:8b:0a:99:17:5d:90:c6:85:fb:f4:85:53:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:20:58:52:89:BE:40:AD:43:24:64:5F:0C:11:72:71:18:3F:0B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:dd:40:62:3a:15:36:e5:00:61:2b:8f:9a:49:d5:21:ae:89:
71:5a:ea:d3:61:a3:79:b8:65:da:a9:fa:50:4a:07:66:59:f1:
62:2c:04:a0:53:3b:db:ee:ac:e0:59:4b:36:fc:f4:20:0b:0c:
3a:cc:6a:7b:ff:20:a7:1c:4b:a7:67:13:6a:15:e2:78:3d:54:
10:b2:12:55:1b:dc:2d:2e:c6:5e:0b:e8:ef:42:e6:d2:cf:8a:
93:53:84:c3:8a:49:43:ea:7e:ec:47:0b:a2:e1:52:2e:cb:c6:
20:5f:d5:1c:96:f1:94:a3:8c:a2:42:fa:74:aa:9e:60:0e:5a:
4b:1d:88:ec:0f:cb:45:57:99:84:53:e6:0b:55:7b:f3:63:e3:
84:91:bf:51:06:0d:3a:56:7d:9e:6d:98:63:bd:48:de:9f:a9:
fe:5e:fa:1e:59:48:de:a9:ad:3a:49:c1:f0:1c:88:25:d1:77:
2a:e1:87:e2:f1:3d:6e:dd:6c:45:6c:1b:41:79:c1:c7:77:02:
0b:b2:bb:a4:bb:a4:6b:6b:e7:f2:0e:24:28:e1:52:80:0c:ca:
96:4e:fe:5e:bd:6f:c6:34:2a:6d:20:bd:7f:3a:0e:0a:b5:8d:
a4:36:cf:b4:8e:1c:65:fa:86:42:04:13:7f:91:c5:ac:4d:b6:
e4:d4:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:46:53 2026 by rpki-client