Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197806.roa
File: AS197806.roa (raw, json)
Hash identifier: wOA5jxc0FX/4UZIyyho4b/+GYvICL5Lr5FHofHmSvCc=
Subject key identifier: EA:DC:DA:5E:04:D7:DD:02:90:01:9D:A7:24:6A:5E:1E:F7:C0:F6:9D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4F3A85002F4B5579F121E9C83ECBE38D8FCBF8B0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197806.roa
Signing time: Fri 08 May 2026 13:02:54 +0000
ROA not before: Fri 08 May 2026 12:57:54 +0000
ROA not after: Fri 07 May 2027 13:02:54 +0000
asID: 197806
IP address blocks: 2a14:7580:5700::/40 maxlen: 40
2a14:7585:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3a:85:00:2f:4b:55:79:f1:21:e9:c8:3e:cb:e3:8d:8f:cb:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 8 12:57:54 2026 GMT
Not After : May 7 13:02:54 2027 GMT
Subject: CN=EADCDA5E04D7DD0290019DA7246A5E1EF7C0F69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:c6:3a:44:0e:45:c4:c4:ae:60:3c:1f:f3:
0d:84:a6:48:fa:32:a1:a0:35:8a:fb:1d:45:a2:ad:
ef:0f:98:93:7a:52:0d:06:5f:ee:2f:55:e0:82:4a:
8f:6a:1c:b7:8e:a6:eb:dc:5b:00:8d:cb:57:2c:c8:
b7:16:02:55:79:dd:99:68:c9:82:84:4a:28:5f:ba:
b1:c7:d3:d7:04:ef:61:d1:09:bf:77:e8:32:5b:3b:
7c:04:8d:89:93:be:07:aa:5c:93:de:b2:65:d9:2a:
12:64:e3:aa:77:c1:af:f7:cf:9e:de:dd:bf:07:4b:
73:3f:c7:3f:d0:b8:d3:e2:f2:6a:78:1b:7b:8b:b2:
74:65:66:2a:a4:fe:84:b3:c8:04:e7:2b:1e:ff:75:
a2:f8:8e:e4:2e:52:1c:18:46:1e:cd:b0:5c:8e:3a:
1d:67:17:27:ec:0a:2f:1a:37:eb:0a:e0:1b:68:91:
34:a1:2f:46:8c:5c:e3:ca:f5:db:43:a5:a1:63:7c:
3d:f9:76:80:71:9d:0f:2e:d2:7a:a7:66:11:5e:91:
5f:fb:3d:8e:9e:c6:87:bf:62:06:42:54:a6:9c:97:
c8:6e:bb:35:6b:1b:22:84:1f:29:c4:70:4d:a6:63:
af:dc:15:df:54:af:19:c0:da:2c:d1:a4:48:0e:ed:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:DA:5E:04:D7:DD:02:90:01:9D:A7:24:6A:5E:1E:F7:C0:F6:9D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS197806.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5700::/40
2a14:7585:5000::/48
Signature Algorithm: sha256WithRSAEncryption
44:b9:80:3a:33:60:43:26:76:bb:22:f9:aa:88:ac:80:ca:a9:
47:ad:06:64:be:92:d6:dc:cf:80:c3:49:51:76:1e:bc:39:a8:
68:0b:10:91:28:d5:7a:ff:b4:68:ed:75:9a:0e:18:2a:a1:b4:
93:2b:2e:67:4a:09:27:48:fd:db:75:fe:55:56:0f:87:28:e1:
cb:ef:e7:b3:e7:24:29:0a:45:97:38:d5:8a:56:6e:4a:28:13:
52:84:ac:08:30:b9:fc:dc:7c:b7:e8:cb:91:89:85:22:bc:da:
51:85:0a:61:73:f7:23:dc:bd:2d:b7:49:d7:7c:42:13:b8:3c:
b4:27:55:e0:da:e4:4b:16:00:68:b1:53:1a:8c:e4:41:f0:7d:
27:7f:5e:69:80:ff:33:31:19:18:44:e3:56:7e:c9:2a:3c:6f:
b0:b1:08:8e:03:f0:2a:d3:c9:b6:96:d4:45:74:0a:00:ac:15:
db:64:78:36:64:43:e2:a2:03:80:3a:db:de:22:85:c1:f2:c6:
58:97:7e:17:86:3a:a0:18:a4:f8:d0:ce:00:d1:79:0f:15:56:
d8:c2:4a:04:59:40:42:c7:52:2e:48:40:cc:29:4c:99:3b:8d:
b7:d0:11:3f:d6:66:9f:aa:94:ff:9b:3c:7c:e3:29:9b:55:17:
64:03:05:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:56 2026 by rpki-client