Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
File: AS197649.roa (raw, json)
Hash identifier: oniX4lvgrWh32AeZoIdsim5qktptLvc70jt0Naon9+Q=
Subject key identifier: 81:8F:3D:D4:6E:40:47:01:75:E2:F1:EE:A9:D3:B4:B2:12:E0:9B:A0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7CB79A4367A595511D17ED39A896EECA2D98861F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
Signing time: Wed 17 Sep 2025 03:07:53 +0000
ROA not before: Wed 17 Sep 2025 03:02:53 +0000
ROA not after: Wed 16 Sep 2026 03:07:53 +0000
asID: 197649
IP address blocks: 2a0f:85c1:8bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b7:9a:43:67:a5:95:51:1d:17:ed:39:a8:96:ee:ca:2d:98:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 03:02:53 2025 GMT
Not After : Sep 16 03:07:53 2026 GMT
Subject: CN=818F3DD46E40470175E2F1EEA9D3B4B212E09BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:59:3c:22:f2:0c:41:25:1a:02:00:a4:a5:
b3:74:ba:87:2f:99:d8:64:fc:70:5b:13:0b:1b:43:
57:00:fa:ff:92:ef:20:a3:f2:9a:11:82:22:18:67:
d9:cf:f6:d6:fa:67:7c:03:d2:be:73:07:0b:fe:1e:
eb:0e:fd:15:ca:83:ed:9b:f8:67:ce:8b:90:92:c9:
74:cb:d4:c0:08:a4:86:00:1b:ab:25:7c:9d:9b:e4:
4b:06:b6:be:e6:58:05:0f:45:cb:79:5f:ec:88:8b:
d6:29:96:29:cf:b3:f4:bc:ba:63:1f:a8:5a:ef:5a:
75:1b:bc:6a:d3:89:1d:83:44:54:81:4c:c1:2b:d8:
b1:be:7b:39:c6:d6:98:a8:82:9d:d5:97:47:03:98:
f2:9e:3f:0a:dd:2e:fc:53:0b:57:4d:ef:31:3e:36:
e0:97:38:8d:d8:dc:e8:1e:df:80:f2:18:9c:8a:ac:
e5:2f:8a:9f:f3:5c:80:61:aa:d7:c3:24:ca:7d:be:
99:14:bd:2a:6b:bd:03:6a:3e:4c:de:58:0f:39:89:
f4:45:ae:4f:a9:42:5e:ea:17:fd:5c:bc:86:6f:8b:
3b:b4:0c:41:43:6a:d5:0b:5b:b2:14:b8:0e:88:65:
f1:4b:63:a4:cb:b9:8c:68:91:b6:1a:43:bf:49:4f:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8F:3D:D4:6E:40:47:01:75:E2:F1:EE:A9:D3:B4:B2:12:E0:9B:A0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8bc::/48
Signature Algorithm: sha256WithRSAEncryption
ee:32:44:73:3f:99:6e:83:61:92:b7:93:24:09:2f:7a:c1:4d:
54:eb:8c:8a:25:ca:9e:d1:6d:4a:49:88:bc:89:34:64:b5:9d:
23:ec:6a:cc:3b:fd:df:67:61:28:32:89:6f:cb:b3:32:95:0a:
79:64:5a:bb:32:ec:a7:b9:7f:4a:01:b9:61:b3:9b:ee:25:f3:
0e:8e:bd:a9:28:60:46:2d:77:48:ba:7d:4d:85:b9:38:42:26:
96:47:62:ba:27:d6:1b:42:85:6b:fc:86:82:c0:e3:95:f0:da:
3c:fe:75:52:43:1b:0b:2f:51:c1:22:ce:12:1b:fe:f6:03:4d:
d0:0a:90:08:bd:7a:8e:74:71:ff:fb:5d:39:28:78:93:3a:74:
18:ef:44:8a:a0:cb:1d:b7:84:ee:1f:4f:ca:c9:e5:57:c7:cb:
a6:55:0d:26:71:82:54:b3:db:36:54:30:e8:a6:7a:7f:f0:b3:
7b:41:97:4f:ad:78:43:a3:22:bb:89:1e:11:6a:b8:11:5e:55:
c9:58:2b:9d:c1:dd:ee:ae:9a:4a:b8:2b:52:ad:ce:1f:69:90:
41:d7:d8:2a:ab:6f:6b:0c:d8:83:c9:e4:c7:93:21:7e:66:2a:
dc:b3:30:d4:01:44:01:a3:00:00:1c:4f:dc:7f:cb:29:29:5b:
e4:ac:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:09 2025 by rpki-client