Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: AB2yw24yxmh7KsUeDbmoo5ybiLYzJjQhw3TlIuNtQbM=
Subject key identifier: 70:3A:64:54:4D:24:94:BC:A8:D4:4A:D0:29:43:0D:1D:12:82:CA:12
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 63F84F780855B5D85BF833D20A0538C67767237B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
Signing time: Wed 23 Sep 2026 00:06:38 +0000
ROA not before: Wed 23 Sep 2026 00:01:38 +0000
ROA not after: Wed 22 Sep 2027 00:06:38 +0000
asID: 197359
IP address blocks: 46.202.217.0/24 maxlen: 24
178.92.49.0/24 maxlen: 24
178.92.214.0/24 maxlen: 24
178.95.130.0/24 maxlen: 24
178.95.134.0/24 maxlen: 24
178.95.138.0/24 maxlen: 24
178.95.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f8:4f:78:08:55:b5:d8:5b:f8:33:d2:0a:05:38:c6:77:67:23:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 23 00:01:38 2026 GMT
Not After : Sep 22 00:06:38 2027 GMT
Subject: CN=703A64544D2494BCA8D44AD029430D1D1282CA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:59:46:35:80:ed:14:6e:a7:b4:68:0e:97:
f0:cd:54:ee:21:05:20:f2:87:ec:ef:9c:fd:ce:59:
13:75:de:ac:fc:ae:86:b9:84:8b:ab:c5:c4:e3:35:
db:64:89:fa:c5:ef:26:79:23:68:18:cc:41:64:ed:
75:d0:c1:21:2b:48:76:48:a2:20:47:ca:66:71:a0:
75:70:03:61:1d:16:cd:29:18:7a:30:4c:1b:ed:b5:
d8:01:fa:c7:71:f4:75:cb:ee:0e:c7:99:d8:58:40:
88:96:be:3c:cd:e5:ca:95:e9:3d:aa:2b:c2:6f:2a:
08:c6:d1:9e:07:69:bb:7f:de:f0:0c:8e:d9:92:78:
4c:a6:25:95:60:b0:c8:8e:a6:5e:78:b3:5d:ad:9d:
01:f8:4c:93:d3:50:41:2b:40:20:42:6b:fa:bd:93:
c0:88:9d:35:a0:11:1c:57:7a:0d:dd:07:98:46:1e:
4a:29:3f:b7:1a:12:5a:90:c7:eb:87:67:41:11:6c:
1f:f7:c8:62:9a:df:0a:d8:2d:51:6c:a2:64:14:b3:
ee:44:b5:d7:f3:01:c9:2b:f3:08:99:00:17:01:01:
3a:83:25:d0:f0:e9:01:4e:73:6d:b0:37:1b:f9:54:
5f:e3:d1:17:f1:83:ce:97:1a:a1:f6:7a:5d:8e:86:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:64:54:4D:24:94:BC:A8:D4:4A:D0:29:43:0D:1D:12:82:CA:12
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.217.0/24
178.92.49.0/24
178.92.214.0/24
178.95.130.0/24
178.95.134.0/24
178.95.138.0/24
178.95.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:52:18:70:5f:6e:b7:18:5e:f0:02:ea:35:13:db:90:e9:97:
49:d3:1f:81:aa:4a:63:81:fc:8d:6c:29:e7:34:f5:38:92:00:
27:b5:f7:95:8c:74:be:46:21:59:54:1d:a4:1b:a3:67:e1:fe:
60:8d:dd:2a:50:50:96:a7:49:59:90:4a:7a:16:29:21:8b:58:
51:0f:43:90:fe:1e:87:32:33:ce:cf:b3:4a:05:67:1e:9c:55:
32:1a:c7:31:44:e5:27:00:8d:7f:02:ff:d7:ff:c5:be:2f:3d:
40:47:3a:51:3c:2c:37:5d:cd:0d:3d:82:a8:b5:a5:e6:41:7a:
35:31:6d:1a:fa:91:b7:db:b7:1b:fc:0d:79:4e:1d:5a:a7:8d:
8e:9b:3b:60:bc:3f:ef:61:52:a3:9d:91:2f:f3:1b:45:88:20:
c3:cf:19:97:2c:52:c6:37:f3:cc:df:bd:b4:06:76:d0:f6:a8:
3c:b2:d2:73:79:79:23:df:c9:af:22:46:71:fb:e3:41:f4:e9:
29:56:43:ef:ed:f2:34:4e:ea:91:ee:49:59:33:c7:72:1a:af:
66:7e:d6:c0:64:e3:89:a3:5f:d3:13:d4:0a:5f:2e:15:9c:68:
18:07:8a:3d:56:56:f3:56:40:cc:a9:b7:3f:4c:18:ea:74:04:
ce:48:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:06:05 2026 by rpki-client