Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: q+yV303EmY2ExzymoyjVEf4au7qXN5BVNLnUkZuSJsI=
Subject key identifier: 44:C1:71:A1:03:33:C5:39:FF:7E:4E:15:65:6A:59:DB:39:40:18:D4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 59CE7DFFA39E23B30F887BCBA5A3883D05A9F5AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
Signing time: Thu 07 May 2026 16:22:45 +0000
ROA not before: Thu 07 May 2026 16:17:45 +0000
ROA not after: Thu 06 May 2027 16:22:45 +0000
asID: 197537
IP address blocks: 82.21.77.0/24 maxlen: 24
82.22.176.0/24 maxlen: 24
82.23.148.0/24 maxlen: 24
82.24.84.0/24 maxlen: 24
82.26.194.0/24 maxlen: 24
82.39.196.0/22 maxlen: 24
82.39.248.0/23 maxlen: 24
82.47.189.0/24 maxlen: 24
82.47.190.0/24 maxlen: 24
82.47.208.0/24 maxlen: 24
82.47.212.0/24 maxlen: 24
82.47.214.0/24 maxlen: 24
82.47.218.0/24 maxlen: 24
82.47.219.0/24 maxlen: 24
82.47.221.0/24 maxlen: 24
82.47.224.0/24 maxlen: 24
82.47.225.0/24 maxlen: 24
82.47.228.0/24 maxlen: 24
82.47.229.0/24 maxlen: 24
82.47.231.0/24 maxlen: 24
82.47.242.0/24 maxlen: 24
82.47.243.0/24 maxlen: 24
82.47.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ce:7d:ff:a3:9e:23:b3:0f:88:7b:cb:a5:a3:88:3d:05:a9:f5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 7 16:17:45 2026 GMT
Not After : May 6 16:22:45 2027 GMT
Subject: CN=44C171A10333C539FF7E4E15656A59DB394018D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:aa:fc:48:c6:51:ce:4f:8b:e6:b6:12:03:
19:7d:b0:f3:0b:8a:e2:42:d4:f4:6e:85:53:cc:77:
a0:97:c9:75:49:d4:86:57:8f:81:30:a4:2c:b8:c1:
f8:6e:53:23:54:bf:ad:f3:f9:c2:e9:e0:fc:53:27:
30:f1:4d:de:3f:f9:24:26:d7:69:63:13:b7:10:8d:
2b:04:4d:55:85:de:ad:7c:5c:85:47:5d:e9:1c:c5:
51:d0:7e:41:e1:58:78:d7:8f:b2:4a:49:25:c4:9a:
a9:80:8c:11:1a:50:78:b8:0b:05:95:89:0d:2a:17:
83:f8:e2:36:62:15:8e:f8:45:36:f4:b6:72:84:95:
10:ad:0e:c3:f7:ea:31:52:8e:32:4a:7a:46:72:ad:
34:ab:9f:dc:a0:bf:15:58:0b:f6:e0:6e:50:10:8a:
04:fb:91:ed:7d:cd:ae:00:61:b6:3a:2b:35:58:c8:
1b:a5:8b:77:d3:24:55:ce:4c:32:d3:9f:8b:4c:f8:
1f:f3:9a:b3:e3:31:b0:7f:a0:58:44:13:29:f0:47:
5b:0e:70:ca:4d:f2:89:9a:78:f7:80:6f:0f:77:d9:
83:00:8a:a1:f9:29:66:0c:6c:c2:75:47:53:69:c6:
7d:bb:e8:9c:c6:b7:eb:ab:3c:3c:bd:16:24:15:19:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:71:A1:03:33:C5:39:FF:7E:4E:15:65:6A:59:DB:39:40:18:D4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.77.0/24
82.22.176.0/24
82.23.148.0/24
82.24.84.0/24
82.26.194.0/24
82.39.196.0/22
82.39.248.0/23
82.47.189.0-82.47.190.255
82.47.208.0/24
82.47.212.0/24
82.47.214.0/24
82.47.218.0/23
82.47.221.0/24
82.47.224.0/23
82.47.228.0/23
82.47.231.0/24
82.47.242.0/23
82.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a8:65:69:36:d0:62:83:6d:60:b2:a4:3c:19:03:48:5f:38:
4e:00:17:94:2f:c1:a4:23:61:10:28:9e:94:e1:55:30:14:5c:
c6:d5:1c:b6:a7:4d:7b:eb:21:a9:f6:4b:3c:f1:ad:52:7b:f4:
82:0b:94:c3:15:b1:d4:42:2e:5c:2e:ed:34:70:59:04:23:1b:
a5:88:76:88:f7:77:a2:b1:07:6c:47:51:1f:c9:67:1f:7a:fd:
ef:dc:04:5f:11:bc:c7:36:09:8c:73:5b:07:f5:82:95:3d:fc:
a1:d0:e4:9d:a0:b6:9c:6a:74:63:24:95:ca:54:3b:6b:a9:c9:
18:2e:a6:22:d6:09:d5:67:aa:d3:af:b1:fe:45:7f:80:5e:e0:
c5:c0:63:fe:ed:3b:da:89:7f:2a:bc:29:c0:60:c5:a8:bf:d6:
ab:09:97:79:97:48:8c:05:cd:a4:eb:de:ed:96:5b:7d:83:98:
36:28:8f:7b:f1:66:d8:42:76:65:06:c9:23:4b:6b:d1:fe:b3:
3c:44:94:c2:aa:2a:50:c3:35:57:fe:f2:18:74:c7:f3:1d:d7:
b7:d0:76:0a:22:15:66:17:d9:fc:b1:0f:03:ef:a7:1c:32:47:
30:36:d1:ba:fd:be:bd:3a:fb:2b:bf:6a:6f:23:35:4d:8f:4c:
9c:44:a5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:25:31 2026 by rpki-client