Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: t5g/I72yLTyBYKaTjz5P3AJCdpMeHKpgGBS+3HT87FM=
Subject key identifier: 39:9D:FA:DD:40:0C:50:E3:67:26:F1:48:6F:D6:FA:AA:1A:26:93:E1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3DF2E331327E491BE00461948A2D5997F5FD50D6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
Signing time: Thu 28 May 2026 14:40:49 +0000
ROA not before: Thu 28 May 2026 14:35:49 +0000
ROA not after: Thu 27 May 2027 14:40:49 +0000
asID: 197537
IP address blocks: 92.112.23.0/24 maxlen: 24
95.135.136.0/24 maxlen: 24
95.135.145.0/24 maxlen: 24
95.135.146.0/24 maxlen: 24
95.135.147.0/24 maxlen: 24
95.135.152.0/24 maxlen: 24
95.135.169.0/24 maxlen: 24
95.135.170.0/24 maxlen: 24
95.135.172.0/24 maxlen: 24
95.135.174.0/24 maxlen: 24
95.135.177.0/24 maxlen: 24
95.135.188.0/24 maxlen: 24
95.135.211.0/24 maxlen: 24
95.135.216.0/24 maxlen: 24
95.135.220.0/24 maxlen: 24
95.135.226.0/24 maxlen: 24
95.135.227.0/24 maxlen: 24
95.135.231.0/24 maxlen: 24
95.135.236.0/24 maxlen: 24
95.135.243.0/24 maxlen: 24
95.135.247.0/24 maxlen: 24
178.94.142.0/24 maxlen: 24
178.95.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f2:e3:31:32:7e:49:1b:e0:04:61:94:8a:2d:59:97:f5:fd:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 28 14:35:49 2026 GMT
Not After : May 27 14:40:49 2027 GMT
Subject: CN=399DFADD400C50E36726F1486FD6FAAA1A2693E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:27:69:0a:ae:d6:2b:69:99:39:5d:07:64:
f7:31:2e:c2:be:b1:a8:22:d3:e2:c6:ed:82:2c:5f:
ea:dc:70:4e:53:d9:03:64:b7:3b:f0:ce:73:ec:90:
b5:e3:61:54:cf:55:e9:7a:fa:82:77:74:d2:d2:5b:
58:d1:38:4a:da:53:bb:0d:86:0e:1f:10:84:9b:54:
f5:c4:40:02:6e:e4:bd:28:3c:00:e8:e9:ac:51:e0:
35:e9:b2:d6:2a:36:03:2d:12:14:35:fa:66:5b:91:
4e:a1:8a:ea:a2:a8:80:ec:28:02:2d:4a:c4:f7:2d:
db:84:e4:7e:5b:01:23:cf:bf:0b:aa:23:cf:01:e6:
3e:49:79:41:4a:ab:f8:60:2e:5d:5a:6d:7b:19:c9:
1a:17:dc:2c:eb:b0:3a:7a:fe:b7:1e:5f:7d:a4:bd:
d7:de:a2:e4:d8:85:4d:73:57:18:65:7a:52:07:91:
52:c3:e9:8b:44:98:b0:01:b1:28:d1:4e:31:a7:b9:
af:67:0b:85:ca:51:57:9f:67:93:a5:9c:ce:b0:20:
1c:09:c5:42:d9:1a:18:fc:da:24:7a:fe:73:7b:78:
8c:06:0f:fe:c9:c8:87:fa:b5:c7:a1:74:f3:9a:47:
34:29:5f:c1:b5:a4:69:58:b2:6d:33:14:43:21:93:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:FA:DD:40:0C:50:E3:67:26:F1:48:6F:D6:FA:AA:1A:26:93:E1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.23.0/24
95.135.136.0/24
95.135.145.0-95.135.147.255
95.135.152.0/24
95.135.169.0-95.135.170.255
95.135.172.0/24
95.135.174.0/24
95.135.177.0/24
95.135.188.0/24
95.135.211.0/24
95.135.216.0/24
95.135.220.0/24
95.135.226.0/23
95.135.231.0/24
95.135.236.0/24
95.135.243.0/24
95.135.247.0/24
178.94.142.0/24
178.95.16.0/22
Signature Algorithm: sha256WithRSAEncryption
30:93:8f:84:cd:ce:0a:1b:3a:e7:bd:56:bb:5d:32:10:41:78:
cd:08:53:65:e1:e2:55:78:cd:25:3d:aa:12:eb:2b:79:46:e8:
20:d3:b5:6f:ff:cc:e1:18:9e:64:54:b7:be:97:8e:b4:b3:47:
b4:ff:77:65:5c:51:ff:79:97:08:24:0a:17:e2:89:01:74:d5:
7c:ef:63:ad:00:58:21:c1:be:84:0b:9a:fe:a5:0d:43:ce:55:
a7:31:de:d5:4b:4e:7d:7d:8d:7e:e9:ff:d7:46:8a:79:76:b7:
89:f3:9f:c5:33:40:8d:09:16:49:72:ce:5d:a4:80:bf:ec:08:
59:c4:f9:b4:03:37:6f:8e:71:57:6e:f0:6d:87:36:59:9f:7e:
6e:97:bd:5e:56:a6:f9:85:c7:29:91:c7:a4:88:ea:e5:68:15:
df:e3:b9:9c:49:c9:90:83:e9:23:ea:a8:71:ea:e3:65:37:65:
6e:3a:9f:ed:02:7b:dd:2e:aa:ee:5c:07:7b:88:6c:fb:7b:ba:
d4:35:cb:b1:56:7a:4a:05:42:4d:78:51:3b:fe:74:79:ca:41:
36:34:d4:8f:94:22:9e:de:95:a0:0c:63:3c:17:b6:28:3e:12:
0e:dd:22:20:b1:fa:10:27:51:59:ba:00:fe:aa:fe:8d:de:9b:
5d:11:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:32:13 2026 by rpki-client