Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197860.roa
File: AS197860.roa (raw, json)
Hash identifier: yOaQi2MdGLsO0ft7gqqwc4cD4bZCg7ZbCr4cblvd4yQ=
Subject key identifier: EE:82:4F:25:1D:6C:CC:CF:45:9C:A4:83:38:0F:2D:B9:D9:60:C0:3A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26A28414682198FC3B1C8EDEB71FE86E2306F271
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197860.roa
Signing time: Wed 23 Sep 2026 12:49:35 +0000
ROA not before: Wed 23 Sep 2026 12:44:35 +0000
ROA not after: Wed 22 Sep 2027 12:49:35 +0000
asID: 197860
IP address blocks: 82.38.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a2:84:14:68:21:98:fc:3b:1c:8e:de:b7:1f:e8:6e:23:06:f2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 12:44:35 2026 GMT
Not After : Sep 22 12:49:35 2027 GMT
Subject: CN=EE824F251D6CCCCF459CA483380F2DB9D960C03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:4b:3c:91:04:78:08:97:dc:c9:f9:d3:f3:
a3:44:57:54:16:b7:3d:00:bd:bf:6c:04:aa:87:1d:
a1:28:13:21:4c:dc:23:3f:20:5d:82:b7:e7:cc:1d:
05:d5:29:60:32:7a:28:7d:e2:1b:80:fc:77:e7:88:
67:5a:8b:ee:44:c1:95:79:1b:67:e0:38:ed:53:e1:
93:a7:48:70:6e:f1:8a:67:88:c7:8e:ea:27:0e:7f:
ce:3b:dd:eb:57:e7:16:fd:97:8c:21:24:e9:28:36:
39:b4:22:e5:36:db:80:04:f2:dd:3a:0b:bb:4d:ae:
98:03:5c:d8:b3:a4:d7:af:6c:d5:8f:d1:08:c7:db:
70:ec:fd:01:49:3b:14:74:73:73:4f:02:a9:c8:da:
86:c9:b5:98:58:fe:c7:e9:e2:10:7f:4a:ce:5b:12:
0c:2d:ef:fa:fb:55:8c:fd:33:f6:64:64:aa:08:d6:
a4:c9:ba:a9:89:c5:5b:dc:ce:e6:15:70:d9:eb:29:
24:13:17:8f:ab:95:01:76:27:3f:f5:07:a0:d5:a7:
90:84:31:2d:ea:6a:38:91:a3:cd:31:e0:99:e0:e8:
a5:6c:dc:d6:24:b3:c5:71:80:8a:d9:3a:97:52:5a:
61:f5:fd:09:82:46:1d:54:ef:36:74:4f:72:32:c3:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:4F:25:1D:6C:CC:CF:45:9C:A4:83:38:0F:2D:B9:D9:60:C0:3A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.223.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ec:f1:85:b7:fe:14:c8:34:e1:81:85:05:f4:be:18:7b:6b:
c7:6c:92:ac:a3:92:dd:e4:47:71:5d:44:7f:c6:f0:cc:02:fe:
d8:fd:f4:93:6e:53:0a:3e:07:b9:0a:f5:46:58:de:0d:e2:1e:
60:b5:5b:cd:fe:a1:c3:31:88:2b:1e:bd:6d:b7:c3:68:e2:a6:
d5:d6:7b:f0:d6:f1:f0:de:be:47:cc:cf:2e:82:ea:99:de:a1:
1f:9b:88:f9:74:14:19:da:74:76:b6:5b:f8:b2:dd:38:c8:bf:
51:97:47:a0:77:8f:5a:55:e7:ae:8e:bd:5e:2f:12:6f:0a:7b:
29:6f:51:12:b7:af:e5:38:d5:dd:99:5e:ca:f2:e3:44:e8:65:
a0:9d:b2:c1:d2:56:cf:3f:2a:a2:99:25:35:fe:e7:d1:d1:94:
ae:f2:a4:bd:2d:84:e3:79:7f:bf:ed:b4:d7:ca:d5:98:ea:e0:
77:15:ad:d5:c4:61:90:b2:df:f5:81:15:9d:e0:ef:ca:ff:3b:
a2:f7:17:d2:ba:56:02:5b:2e:10:e2:cf:fd:fb:11:9d:c2:3e:
f7:44:27:5e:58:9b:91:a3:41:8c:ff:23:5f:84:d3:cf:57:ac:
3f:55:68:24:4d:2f:72:80:9a:cc:ae:61:93:22:63:16:d8:bb:
c5:89:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:37:53 2026 by rpki-client