Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: yntkdcK1D8hvdtgvCYwmjKUVPajxBylh9Q0VinIiT/c=
Subject key identifier: 4F:27:99:42:63:AF:74:72:3D:E1:6E:DA:53:59:79:C7:44:65:A3:DF
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 0D4A8B7595A5595EA613D91B91301050ECC1A8FD
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS197537.roa
Signing time: Wed 06 Aug 2025 09:42:47 +0000
ROA not before: Wed 06 Aug 2025 09:37:47 +0000
ROA not after: Wed 05 Aug 2026 09:42:47 +0000
asID: 197537
IP address blocks: 176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4a:8b:75:95:a5:59:5e:a6:13:d9:1b:91:30:10:50:ec:c1:a8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 6 09:37:47 2025 GMT
Not After : Aug 5 09:42:47 2026 GMT
Subject: CN=4F27994263AF74723DE16EDA535979C74465A3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:00:e0:39:ca:38:b7:03:7a:d8:64:f9:ba:
6c:2a:eb:a1:2e:01:de:b9:28:b9:af:41:25:8e:e7:
0e:72:6d:87:9e:d7:ac:90:6f:97:35:a4:37:8e:8d:
b6:a1:07:87:9c:23:3f:66:39:ed:0a:08:5b:1a:32:
9a:de:30:81:83:06:02:86:00:77:92:51:48:53:60:
99:7c:16:1e:c8:8d:3b:0c:3e:db:f1:93:dd:f8:6d:
76:f5:11:08:da:b8:6d:92:78:dc:42:88:ae:6e:c2:
04:88:0e:cc:cd:10:08:31:7d:e5:1e:0e:9e:68:53:
6f:70:31:71:f9:f2:3b:78:0e:44:b1:19:2e:7e:c5:
f5:1b:4c:97:6e:bd:d3:35:74:e9:8b:65:f7:00:da:
0b:0a:5c:f1:13:2a:7c:96:fb:83:1e:cc:68:31:85:
3c:6e:9e:dc:22:fe:ab:09:ab:4d:72:64:9f:c7:fb:
a0:43:33:b5:54:2f:a7:fe:82:ed:6f:9c:d3:5e:a6:
0b:b9:81:84:7b:5c:39:61:c2:28:54:9d:af:85:cd:
82:f7:0c:ce:50:e3:ae:49:bd:73:09:60:e4:08:f5:
30:25:52:ca:a5:22:e4:7d:d4:d3:4f:7e:19:38:6c:
14:25:d5:80:4d:ab:29:6e:7f:79:6e:f6:44:b7:57:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:99:42:63:AF:74:72:3D:E1:6E:DA:53:59:79:C7:44:65:A3:DF
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
98:75:fb:15:c1:79:a6:84:29:fb:e7:af:2a:16:5c:d3:c1:ca:
27:9a:38:1b:b6:b6:8c:51:3e:d7:12:6c:a8:2f:dc:cf:e4:08:
09:1e:ad:61:72:b5:99:cc:53:e6:1f:70:3e:e8:fb:c6:78:84:
51:3c:d4:71:e6:e6:b6:ac:a1:df:2d:07:2e:ba:8e:ad:5f:32:
86:62:02:b1:fe:aa:fa:e1:8b:fa:20:94:f7:00:d4:1a:6f:60:
07:e1:75:94:d2:9b:df:46:45:b0:52:34:ed:ea:78:8f:09:ad:
59:1f:32:d6:7d:37:ca:be:b1:67:35:22:27:e2:9e:f3:b3:3f:
2b:8e:0e:9a:d0:f1:7e:42:19:51:a9:c7:a9:12:2a:27:a8:64:
80:6d:ed:06:e5:63:01:5a:72:19:a9:d2:fd:a5:8f:8d:22:16:
74:26:4b:22:24:00:8f:00:6d:a5:73:aa:3a:e2:1a:27:06:4c:
f3:cf:44:3e:82:0d:37:3f:8a:ed:e2:a8:8e:11:d6:01:5d:46:
09:ed:cc:a2:7d:02:af:e1:b5:9b:22:40:e7:9a:ed:73:69:e9:
b7:ca:79:e3:99:a8:a3:90:48:1f:04:e8:51:d6:f4:e2:82:7b:
a1:a5:cf:97:a1:28:82:32:bb:6c:45:49:4e:03:87:75:65:d4:
b4:0d:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:09 2025 by rpki-client